Secure behaviour you can measure.
Keepnet turns security awareness training and multi-channel phishing simulations, not email-only, into measurable behaviour change.
Security teams running Keepnet
Every product changes how employees behave
Start with one. Each feeds the next.
259 behaviours, 11 frameworksSimulateMulti-channel phishing simulationsSee which employees click and which report, by email, SMS, call, QR and deepfake.
47,000+ templates ready to useTrainSecurity awareness trainingThe lesson each employee’s behaviour calls for, in their own language.
11,000+ training items, 61 languagesRespondIncident ResponderEmployees report a suspicious email, SMS or call and get a verdict.
One queue for email, SMS and callsAutomateRun by AI agents you controlAgents run simulations, training, nudges, reporting and phishing response. Approval by default.
Included in every plan
What secure behaviour management changes
Training that passes the audit is not the same as employees who spot the SMS, the call or the deepfake.
- TriggerSecurity awareness training: Modules on a calendarSecure behaviour management: Training triggered by what each employee does
- ChannelsSecurity awareness training: Email phishing onlySecure behaviour management: Multi-channel phishing simulations, not email-only
- ContentSecurity awareness training: Same content for everyoneSecure behaviour management: Content matched to role, risk and language
- DataSecurity awareness training: Data from the training toolSecure behaviour management: Signals from the security stack you already run
- ProofSecurity awareness training: Completion ratesSecure behaviour management: Behaviour measured before and after
of organisations had a phishing, vishing or smishing incident in the past year.
Why more training does not fix it
“Pre-scheduled, calendar-based training achieves compliance, but fails to alter employee behavior.”
Spot, simulate, nudge, measure
Spot
Behaviour signals arrive from Microsoft Entra ID Protection, Microsoft Defender and your own simulations.
Simulate
Realistic simulations by email, SMS, call, callback, QR and deepfake, matched to each employee's risk.
Nudge and train
A nudge by email, SMS or Teams in the moment, then training mapped to the same behaviour.
Measure
The same employees, before and after.
AI agents run the loop. Nothing goes out until you approve it.
More than half of organisations launched their first phishing simulation within two weeks of licence start, nearly two in three within 30 days.
Try the console yourself
Simulations that reach the inbox without whitelisting
Click to start a live preview
No form, no sales call. Best in landscape on a phone.
Start the tourThe interactive product tour of the Keepnet console
The tour will not open in this page
Your browser or network is blocking the embedded frame.
Open the tour in a new tab1 of 6
Read more about the vishing simulatorRead more about the smishing simulatorRead more about the quishing simulatorRead more about callback phishing
What changes after the first simulation
An employee's first simulated phishing email is the one they are most likely to click: 9.2%, falling to 4.8% across every simulation that follows. The template difficulty mix stayed flat between the first and the twelfth.
The median organisation's click rate on a simulated phishing email fell from 3.4% on its employees' first simulation to 1.4% by their twelfth.
The drop held in every cohort size tested, between 31% and 50%. Your own starting rate depends on template difficulty; the drop is what carries across.
Click, report and completion rates are in the same dashboard.
You decide what the AI agents do
- Nothing runs before you approve it.
- Start with a pilot group, then widen.
- Simulations are generated inside your company policy.
- Generated training is checked for errors before employees see it.
- Deepfake is opt-in, with approval over who appears.
- Simulations and nudges are capped per employee.
Where it is already running
Pick the sector closest to yours, with published numbers as customers gave them.
In their words
Videos load from YouTube only when you press play.
This video will not play here.Watch it on YouTubeResearch
Find the gaps attackers reach first
Keepnet research on how employees respond to phishing by email, SMS and call. Every finding links to the report it comes from.
Anonymised and aggregated, so no organisation or employee can be identified. Keepnet is also a contributor to the Verizon 2026 Data Breach Investigations Report[5].
Whitepaper · August 2026The Mobile Phishing Visibility GapFind out where SMS and call phishing escapes your reporting, and how employee reports become usable signals.Read the whitepaper
Report · June 202544%more susceptible to phishing: new hires in their first 90 days compared with tenured employeesRead the findings
Report · February 20246.5%of 3,279 employees called shared sensitive information during simulated vishing calls.Read the findings
"It would be unfair to single out just one feature. The mail scenarios and customisable training modules are particularly excellent."
"It's a really great platform with a lot of flexibility to ensure our requirements are met. Onboarding was friendly, enjoyable, and thorough."
"It's super easy and intuitive to setup campaigns, whilst making it easier for end-users to report phishing emails."
"The product itself works great on day one and delivers immediate value as our team was able to get started with our phishing exercise program immediately."
"It has been consistent, reliable, and implementations over time shows that they really listen customer feedback."
"We've seen a noticeable improvement in how employees react to suspicious emails or phone calls- because they remember the stories."
"Within minutes, we can create realistic, scenario-based templates specific to our organization, reducing setup time while increasing the relevance of training."
"The simulations and campaigns are very customisable and realistic."
"Thanks to Keepnet's Incident Response tool, we reduced the e-mail analysis and response time, which used to take hours, to 2 minutes."
Keepnet Labs has a rating of 4.9 out of 5 based on 104 ratings in the Security Awareness Computer-Based Training market on Gartner Peer Insights as of October 2026. GARTNER is a registered trademark and service mark, and PEER INSIGHTS is a trademark and service mark, of Gartner, Inc. and/or its affiliates, and are used herein with permission. All rights reserved. Gartner Peer Insights content consists of the opinions of individual end users based on their own experiences, and should not be construed as statements of fact, nor do they represent the views of Gartner or its affiliates.
Pricing
Buy one simulator, or the whole platform
See what each plan covers, how to start and what you can try first.
See pricing- Priced per employeeThe more employees you cover, the less you pay per employee.
- No extra line itemsAgentic AI, deepfake simulation and report buttons in every plan.
- Enterprise controls includedAdmin accounts, SSO, SCIM and the API at no extra cost.
- Try before you commitTry and buy, or a proof of value with your own employees.
Ready for your security review
Four current certifications, independently audited. Certificates and the full control set are published at doc.keepnetlabs.com/resources/compliance.
Questions buyers ask
Keepnet is a secure behaviour management platform. It turns security awareness training and multi-channel phishing simulations, not email-only, into measurable behaviour change.
More than 11 million employees have taken a Keepnet simulation or training (Keepnet platform data, cumulative to October 2026). Keepnet is headquartered in the UK.
Gartner calls this market secure behaviour management. Forrester and many buyers still call it human risk management.
Either way, the field replaces scheduled awareness training with in-the-moment nudges, simulations across channels and signals from security tools, and measures behaviour change rather than completion. Read the full explanation.
Security awareness training is measured by completion; secure behaviour management is measured by what employees do next.
Gartner's view: “Pre-scheduled, calendar-based training achieves compliance, but fails to alter employee behavior” (Gartner, Fight AI Disinformation: A CISO Playbook for Working with Your CIO, CCO and CMO, Akif Khan, 23 October 2025). Keepnet keeps the training library and compliance courses, and adds the simulations, nudges and measurement around them.
In the Secure Behaviour Dashboard: the same employees before and after, by organisation, department or employee, for any period, with targets you set.
Across 102,452 employees in 158 organisations, the click rate fell from 9.2% on the first simulated phishing email to 4.8% across every simulation that follows (Keepnet anonymised customer research, 1 January 2020 to 29 September 2026).
AI agents build and run campaigns, and nothing goes out until you approve it.
You can pilot with one group first. Simulations are generated inside your company policy, deepfake is opt-in with approval over who appears, and simulations and nudges are capped per employee. Keepnet holds ISO/IEC 42001, supports bring-your-own model keys and does not use customer data to train models.
Per employee, with every product available on its own.
Prices are published for organisations up to 1,000 employees; above that, pricing is quoted. See pricing.
See Keepnet with your organisation in mind
- Run multi-channel simulationsFrom email through to deepfake.
- See reporting outcomes and the behaviour scoreReporting, repeat behaviour and remediation, in one board report.
- Explore AI agents and automationSee how simulations, training and follow-up can run with less manual work.
Book a 30-minute demo
Thirty minutes, no cost and no obligation.
Thank you, your request is in
A confirmation is on its way to your inbox.
Thirty minutes with the Keepnet team, on Microsoft Teams. Your details are already filled in.
Prefer to pick a time later? The team will follow up within one working day.
Your demo is booked
A calendar invite is on its way to your inbox, with a Microsoft Teams link.
The booking calendar will not open in this page.
Open the calendar in a new tabSources
- Gartner, "Ditch Security Awareness and Adopt AI-Powered Secure Behavior Management" (G00860839, September 2026), 2026 Gartner CISO Role Survey (n=297).
- Gartner, Fight AI Disinformation: A CISO Playbook for Working with Your CIO, CCO and CMO, Akif Khan, 23 October 2025.
- Keepnet anonymised customer research, email phishing simulations, accounts and licences starting January 2025 to June 2026 (n=428 organisations).
- Keepnet anonymised customer research, email phishing simulations delivered 1 January 2020 to 29 September 2026. Per employee: employees who received at least 12 simulations (n=102,452 employees across 158 organisations). Per organisation: median of the same 158 organisations. Benchmark: all ten cohort sizes tested, the largest 498,861 employees.
- Verizon 2026 Data Breach Investigations Report, p. 50; contributors list, p. 118.