Cookie settings

Choose which cookies Keepnet can use. You can change this at any time from "Cookie settings" at the bottom of every page.

Book a demo
About Keepnet
4.9/5Rated 4.9 out of 5 on Gartner Peer Insights from 104 ratings5.0/5Rated 5.0 out of 5 on Capterra from 46 reviews

Secure employee behaviour, measured before and after.

Keepnet is a secure behaviour management platform for organisations.

11M+
employees practised with Keepnet3
2017
founded in London
UK, EMEA, US
teams in your time zone
ISO 42001
certified AI management, one of four ISO certifications

Trusted every day by security teams that measure behaviour, not attendance

VodafoneArrivaArnold ClarkWhitbreadRyanaircarwowBorealisUNICEFHersheyDr. Martens
Why Keepnet exists

We exist to stop social engineering.

Our team has spent years protecting organisations: building security products, assessing defences, responding to incidents and tracking threats. Wherever we looked, one pattern kept repeating: the human element is the most common factor in breaches.2

Security awareness was meant to help. But success was measured by completed training, not by what employees actually did when an attack arrived.

We started Keepnet in London in 2017 to work on both sides: secure habits for employees, and a security culture and proactive tools for organisations. Our aim is to turn the human element into a proactive line of defence.

Meet the team
The Keepnet team together at a company offsite
Keepnet colleagues at a team lunch
The Keepnet team at a company dinner
The Keepnet team celebrating together
1 / 4
What we believe

Secure behaviour becomes how work gets done.Behaviour change becomes how security programmes are judged.

Forecast Gartner expects that by 2030, widely adopted control frameworks will measure behaviour change, not compliance training.4

  • Practice follows the attackerAttackers do not stay in one channel. Neither should practice.
  • Behaviour, not completionFinishing a course does not show how employees respond to an attack.
  • Evidence others can checkOur SMS and call simulation data is in the Verizon DBIR, not only in our own reports.2
Customer results

Secure behaviour you can see

418%
Increase
in suspicious emails reported during initial adoption
and reporting stayed 88% higher two years later5
Vodafone logoTelecoms
51%
Reduction
in credential submissions in just over seven months
with 91% of early submitters never repeating6
SunExpress logoAviation
In their words

Customers and partners

Organisations therefore need to think more broadly about risky behaviour, visibility, and resilience across the full communication landscape rather than focusing on phishing alone.
Ayo AdebayoHead of Cyber Security, SunExpress
Keepnet's platform, tailored for managed services, has streamlined our operations, making us more efficient and client-centric.
Chad FullertonDirector of Information Security, ECI
We're proud to partner with Keepnet and confident in the business value it continues to deliver for organisations across every sector.
Ian McGowanManaging Director, Barrier Networks
Our story so far

From phishing tests to secure behaviour

  1. 2017

    Founded in London

    Simulate, train, analyse, respond.

  2. 2018

    Backed by CyLon

    London's cyber accelerator takes a stake.

  3. 2019

    Tech Nation Cyber

    One of 20 UK cyber scale-ups.

  4. 2023

    Beyond email

    SMS and call simulations launch.

  5. 2025

    Agentic AI

    AI agents run campaigns within your rules.

  6. 2026

    Verizon DBIR contributor

    Our SMS and call data, in the report.2

  7. 2026

    In Gartner's SBM research

    Listed among SBM vendors.1

The team

The team behind your results

From your first conversation to long-term results, this is who works with you.

  • Ozan Ucar

    Ozan Ucar

    Founder and CEO

    Sets product direction with customers, after building and exiting two cybersecurity companies.

  • Ellie Thompson

    Ellie Thompson

    Global Head of Customer Success

    Leads the team that sets your first baseline and keeps secure behaviour improving after it.

  • Matt Jones

    Matt Jones

    SVP Sales

    Builds your programme around your priorities and the results your board wants to see.

  • Tom Petersen

    Tom Petersen

    Enterprise Account Executive

    Shows the change on your own employees in a proof of value, before you commit.

  • Shonna McNasby

    Shonna McNasby

    Senior Customer Success Manager, US

    Your guide from onboarding to results. She brings what works across Keepnet's customer programmes to yours.

  • Hassan Khan

    Hassan Khan

    Finance and Operations

    Keeps contracts, questionnaires and billing simple, so your team stays focused on results.

Board and advisors

  • David Annable

    David Annable

    Board member and investor

    Helps Keepnet build the team that grows with its customers.

  • Anne Allibone

    Anne Allibone

    Fractional CFO

    Keeps the financial reporting your procurement and vendor-risk checks ask for in order.

  • Steve Beckitt

    Steve Beckitt

    Advisor

    Keeps governance strong as Keepnet grows, so your vendor-risk team can rely on it.

  • Emre Tinaztepe

    Emre Tinaztepe

    Technical advisor

    Brings an incident-response founder's view to how Keepnet analyses and acts on what employees report.

Swipe for more
Before your security review asks

The evidence is published, not on request

ISO/IEC 27001 certification logo
Information security
ISO/IEC 27017 certification logo
Cloud security
ISO/IEC 27018 certification logo
Cloud privacy
ISO/IEC 42001 certification logo
AI management

Four current certifications, independently audited. Certificates and the full control set are published at doc.keepnetlabs.com/resources/compliance.

Encryption
AES-256 at rest, TLS 1.2 or 1.3 in transit
Data residency
In the region you choose: the UK, EU, US, Canada, Türkiye or the UAE, on Microsoft Azure, whose platform holds a SOC 2 Type 2 report
Data protection
EU and UK GDPR, DPA 2018. The DPA is published with the SCCs, the UK Addendum and the sub-processor list
Contact us

Talk to the team

Tell us what you need. It goes straight to the team that owns it.

  1. Pick a topicPlatform, support, partnerships, press or careers.
  2. The right team gets itNot a shared inbox. Your message is routed by topic.
  3. A person repliesUsually within one working day.

Already a customer? Visit the Help centre

Please pick a topic
Required
Required
Please use your work email address
Where your organisation is based.
Please pick a country from the list
Start with + for another country code.
Please enter a phone number we can call you on
Required
Required

We use your details only to reply to you.

Thank you, your message is in

It is on its way to the team that owns the topic.

Sources

  1. Gartner, "Ditch Security Awareness and Adopt AI-Powered Secure Behavior Management", William Candrick, Alex Michaels, 22 September 2026 (G00860839). Gartner does not endorse any company, vendor, product or service depicted in its publications, and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner publications consist of the opinions of Gartner's business and technology insights organization and should not be construed as statements of fact.
  2. Verizon 2026 Data Breach Investigations Report: the human element appeared in 62% of breaches, up from 60% in the 2025 edition, p. 12; phone and email simulations, p. 50; contributors list, p. 118.
  3. Keepnet platform data, cumulative to October 2026.
  4. Gartner, "Drive Secure Employee Behaviors", gartner.com/en/cybersecurity/insights/drive-secure-employee-behaviors: "By 2030, all widely adopted cybersecurity control frameworks will focus on measurable behavior change rather than compliance-based training as the critical measure of efficacy for human risk management."
  5. Keepnet platform data, Vodafone: suspicious emails reported by employees, two years after launch compared with before launch.
  6. Keepnet platform data, SunExpress: employees who submitted credentials in an early credential-submission simulation, 26 January to 3 September 2026.