KnowBe4 Security Awareness Training is somewhat of a misnomer, in my opinion. It's not that it doesn't do "Security Awareness" training, it's just that it does *so much more*.
I have used KB4 for several years now. I always liked it, but I didn't realize how great it was until their competition tried to sell me their products. I reviewed options from all the big names and did demos with all.
I won't bore everyone with all the details but just one example. One of the major competitors (that charges 3x the price, by the way) tried to show me how to set up custom training (uploading our own videos and assigning to users) on their product. After *45 minutes* on a demo call with three of their people, I said "Can I show you how I do this in KnowBe4?" They said sure. I set up the exact same training (because I had given it to them as an example) in *under 3 minutes*. They were flabbergasted and asked if I could do it again with them recording it so they could show it to their engineers.
Even after the 45 minutes setup, the competitor wouldn't be able to do a whole laundry list of things I just take for granted with KB4. One example is tracking started but incomplete training. KB4 does this with *all* training. The competition can only tell me if the user has clicked the link.
KB4 is the ultimate "set it and forget it" tool that just keeps working. In a way, I kind of feel bad. Like, shouldn't I be interacting with this more? I go there to check Phish Training results. Everything is still running and just keeps right on going. No glitches, no errors, it just works.
Training of all kinds is assigned automatically to new users. New users are automatically added to training groups. Phishing "clickers" are automatically added to remedial training.
Records are kept flawlessly and conveniently. Managers are notified if desired. Users get reminders.
Best of all, as the example above shows, it's just *so dang easy*. If there's a task in KB4 that takes 5 minutes, I don't know what it is.
There are very few products anymore that do what they say and do it easily, flawlessly and beautifully. KnowBe4 does.
Honestly, it's worth the full price we pay if it were *nothing but phishing training*, but it's so, so much more.
What's more, is this is a company that really understands customer service. They stay in touch just enough to head of questions and concerns and let you know they're there, but not enough to be annoying. The sales are low pressure and the assigned account managers have always been attentive and friendly.
There are a lot of companies out there that could really learn from KnowBe4.
My only major complaint, which is just about to be remedied (it's in BETA), is that they don't yet support SCIM user provisioning. This is the *one thing* that's keeping my users on an on-premise Active Directory.
I'm slightly irritated about the various levels and what you get for each (Smart Groups requires an upgrade, but it's worth it) but everything that I don't like is small potatoes compared to the benefits.
Ask the right questions of the competitors. Make sure they can not just do what you need "in theory" but in practice.
We use a very well knows Email Security product that also offers "Phishing Training" that included *for free* with the product. I don't even use it and even if I didn't use KB4 for anything else, I'd rather pay them that use the "free" product from the other people.
"We can do that." doesn't always mean you'll *want* to do it.