We use essential cookies to run this site. With your permission, we also use analytics and marketing cookies. Cookie policy
Agentic AI for secure behaviour management
Agents run multi-channel phishing simulations, training, nudges, reporting and phishing response, in your policy and tone. You decide what needs approval.
The agent asks, plans and builds. You approve in the middle.
From the console A saved chat in Keepnet’s demo tenant, replayed. The agent asked three questions, listed the documents it used, and built nothing until the plan was approved.
Trusted every day by security teams that measure behaviour, not attendance
Agents read each employee’s behaviour and history, then explain each choice before you approve it.
The agent drafts from your own documents, never names the employee, and waits while you edit the plan.
Recurring phishing, QR code and training activities run on schedule, at a sensible hour in each employee’s time zone.
When you switch them on, agents analyse what employees report and act on intent, under your playbooks.
Ask in plain English. The agent picks the view that fits the question: KPI dashboard, line, bar, heatmap, Sankey and more.
Agents read each employee’s behaviour and history, then explain each choice before you approve it.
Screens from Keepnet’s demo tenant, 12 October 2026.
More on reports from the Reporting Agent and reported email triage.
Agents read the documents and organisation details you give them, and show which ones they used.
Policies, procedures and guidelines in PDF, Word, Excel, Markdown or text, up to 50 MB each. Upload a folder or a ZIP.
Ask a question and see exactly which passages an agent retrieves, with the source document.
Sector, employee count, languages, brand tone and priority risks, shared across your team.
The Main Assistant sends each request to the right specialist. You can also pick one yourself.
Swipe to see more
Creates short training modules for compliance and security education, with translations.
Creates phishing email simulations and landing pages from behaviour profiles.
Creates SMS phishing simulations and their landing pages.
Places two-way voice phishing simulation calls with an AI voice.
Creates deepfake video simulations for training. Opt-in only.
Creates voice clones for your catalogue, only with the speaker’s consent.
Recommends existing library items for each employee.
Answers questions on your security policies and summarises them.
Creates branded reports from your platform data.
Read-only analyst for secure behaviour data across employees and devices.
Analyses the reported email queue.
Sets up and runs recurring phishing and training tasks.
1 of 12
Describe it, keep only the tools and documents it needs, and test it. It runs in chat only once you switch it on.
Name the agent and say what it should do.
Draft with AI turns the description into instructions you can edit.
Draft with AI suggests tools. Keep what the job needs; each is marked read-only or elevated access.
Point it at the policies it should answer from, or leave it on the whole knowledge base.
Send a sample message and read the reply. Nothing is saved until you create the agent.
Name the agent and say what it should do.
From the console The Create agent form in Keepnet’s demo tenant (ACME Manufacturing). The agent was tested, not saved. A Builder mode also drafts the agent from a short conversation.
Safeguards apply in both modes and cannot be switched off.
The default. Agents recommend, and actions run once an admin approves. Approve a whole run or one employee at a time.
Your choice, when you are ready. Actions run on their own within the policies you set.
Simulation frequency cap, training cooldown window, holiday and blackout periods, and each employee’s time zone.
Ethical AI communication, alignment with your governance, inclusive language, equality and non-discrimination.
Plain language, accessibility-aware wording, transparent AI communication and culturally sensitive messages.
Deepfake is opt-in. A voice is cloned only with the consent of the person it belongs to.
From the console Company Settings, Agentic AI Settings. Read how the settings work
Based on the AI control questions Gartner advises CISOs to put to vendors.7
| Question | Keepnet |
|---|---|
| Does anything run without a person approving it? | Not unless you allow it. Approval is the default, and autonomous execution runs inside mandatory safeguards. |
| Can we start with a pilot group? | Yes. Scheduled tasks and campaigns target the groups you choose. |
| What stops it sending too much? | A simulation frequency cap, a training cooldown window, holiday and blackout periods, and each employee’s time zone. |
| How is the content kept accurate and on-policy? | It is grounded in your own documents, the chat lists the sources it used, and you edit the plan before anything is generated. |
| Can it create a deepfake of our executives? | Only if you opt in, and only with the consent of the person whose voice or face is used. |
| Is our data used to train the model? | No. Customer data is never used to train or improve any model, Keepnet’s or a provider’s. |
| Does personal data reach the model? | No. Personal data stays in your tenant and is removed before AI processing. |
And the model key can be yours too.
Personal data stays in your tenant and is removed before AI processing.
Not by Keepnet and not by any provider. It is in the contract, in the data processing agreement.
GPT models run in Microsoft Azure OpenAI Service, and nothing is sent to OpenAI. Your data stays in the region you choose.
Bring your own provider key. It is stored in Cloudflare Secrets Store and never shown again after saving.
Each answer shows its tokens and the cached share. Usage and cost breaks down by user, model and product, with CSV export.
Keepnet’s AI management system is certified to ISO/IEC 42001:2023, alongside ISO 27001, 27017 and 27018.
"It would be unfair to single out just one feature. The mail scenarios and customisable training modules are particularly excellent."
"It's a really great platform with a lot of flexibility to ensure our requirements are met. Onboarding was friendly, enjoyable, and thorough."
"It's super easy and intuitive to setup campaigns, whilst making it easier for end-users to report phishing emails."
"The product itself works great on day one and delivers immediate value as our team was able to get started with our phishing exercise program immediately."
"It has been consistent, reliable, and implementations over time shows that they really listen customer feedback."
"We've seen a noticeable improvement in how employees react to suspicious emails or phone calls- because they remember the stories."
"Within minutes, we can create realistic, scenario-based templates specific to our organization, reducing setup time while increasing the relevance of training."
"The simulations and campaigns are very customisable and realistic."
"Thanks to Keepnet's Incident Response tool, we reduced the e-mail analysis and response time, which used to take hours, to 2 minutes."
Keepnet Labs has a rating of 4.9 out of 5 based on 104 ratings in the Security Awareness Computer-Based Training market on Gartner Peer Insights as of October 2026. GARTNER is a registered trademark and service mark, and PEER INSIGHTS is a trademark and service mark, of Gartner, Inc. and/or its affiliates, and are used herein with permission. All rights reserved. Gartner Peer Insights content consists of the opinions of individual end users based on their own experiences, and should not be construed as statements of fact, nor do they represent the views of Gartner or its affiliates.
From the 2026 release notes.
Agentic AI pricing
With fair use and no per-task charge. Bring your own model key if you prefer.
Short answers, with the detail below each one.
AI agents that plan, create, deliver and measure the work of your programme, rather than a chatbot that only answers questions.
In Keepnet they run your secure behaviour management programme: multi-channel phishing simulations, training, nudges, reporting, and the analysis of reported emails, SMS and calls. You decide what needs your approval.
Only if you allow it. Approval-gated execution is the default.
Autonomous execution runs inside mandatory safeguards, such as a simulation frequency cap and blackout periods.
No. Keepnet does not use customer data to train, fine-tune or improve any model, its own or a third party’s, and its AI sub-processors are contractually prohibited from doing so.
GPT models hosted in Microsoft Azure OpenAI Service, and open-weight models on Cloudflare Workers AI. Nothing is sent to OpenAI.
You can also bring your own provider key.
Yes. Admins create company agents with their own instructions, model, tools and documents, test them, then make them available in the chat.
Yes. Upload your policies and guidelines, switch them into the knowledge base, and agents use them to answer questions and to create training and simulations. The chat lists the sources it used.
No. It takes routine programme work off the team, and the team keeps the decisions it wants to keep.
It is included in every Keepnet plan, with fair use. There is no per-task charge.
Thirty minutes, no cost and no obligation.
A confirmation is on its way to your inbox.
Thirty minutes with the Keepnet team, on Microsoft Teams. Your details are already filled in.
Prefer to pick a time later? The team will follow up within one working day.
Your demo is booked
A calendar invite is on its way to your inbox, with a Microsoft Teams link.
The booking calendar will not open in this page.
Open the calendar in a new tabPage reviewed
