Security awareness training that builds secure behaviour.

Software that assigns, delivers and tracks the training that helps employees recognise and report attacks. The useful ones also show whether behaviour changed, not just who completed a course.

Gartner describes the move beyond awareness as secure behaviour management, and lists Keepnet among the representative vendors in that market. Some analysts call the same category human risk management. Gartner, September 2026^[3]

Many frameworks ask for a course at least once a year, and the library covers that. A yearly course alone rarely changes behaviour, so Keepnet adds a short lesson when an employee’s behaviour calls for one, with a cap per employee.

Nudges and reminders keep it in mind between lessons. See how it works.

From what the employee does. Simulation results, reports, and alerts from Entra ID Protection and Microsoft Defender are recorded as risky or positive behaviours, each with a severity, across a catalogue of 259 behaviours.

Each behaviour maps to lessons in the library, so repeated risk earns more practice and secure behaviour earns less noise. New hires and repeat clickers are grouped automatically, so nobody has to maintain a list.

Little day to day. Agents pick the lessons, schedule them, send the reminders and follow up after a simulation, and groups stay current over SCIM.

You approve each step, or let the agents run inside the rules you set. Line managers receive their own team’s results on a schedule.

Yes. Keepnet packages each course as SCORM for your LMS, and completions report back to both Keepnet and the LMS.

You can also upload your own SCORM 1.2 or 2004 courses and assign them alongside the library.

Nothing goes out until you approve it, unless you choose otherwise. Lessons are generated from the policies you upload, inside a global framework and your own organisation’s policy, and generated content is checked before it is released.

Personal data is removed before AI processing, and customer data is never used to train AI models. Deepfake is opt-in, and who appears in one is approved before it runs. Frequency is capped per employee, so training cannot turn into a daily stream. You can start with a pilot group, such as IT and security, before widening. See what the agents do.

The library has content in 61 languages and 89 locales, counted daily. Each employee receives training in their preferred language, taken from Entra ID, and can switch from the enrolment email.

Lessons are recreated for each language rather than translated, so examples, names and currency change with it.

Compare the same employees before and after, not who finished a module. Completion, click rate and reporting rate are all in the platform, and the reading that decides it is whether the behaviour moved.

Across Keepnet’s own data, an employee’s first simulated phishing email is the one they are most likely to click: 9.2%, falling to 4.8% across every simulation that follows, a 48% drop. Keepnet research, n=102,452 employees^[1]

Each line manager can receive their own team’s results on a schedule, and the reading sits against the target you set and your sector. See the reading.

Yes. The library maps 200+ lessons to DORA, 200+ to NIS2 and 10,000+ to ISO/IEC 27001, across 42 frameworks, and issues a certificate on completion.

NCSC Assured courses from Bob’s Business and GoldPhish are in the library on plans that include them, and Keepnet’s own lessons follow NCSC guidance. DORA makes security awareness programmes compulsory for staff and senior management at EU financial entities.

Yes. Training is available on every plan, and every Keepnet product can be bought on its own. What the library includes depends on the plan.

Prices are published up to 1,000 employees and quoted above that. See the full price list and features.

Employees arrive over SCIM from Entra ID or your own directory, so groups, joiners and leavers stay current. Courses you already own as SCORM can be uploaded and assigned alongside the library.

Whitbread moved to Keepnet from KnowBe4, and now schedules six months of phishing simulations for around 32,000 employees in one go. Read what they did.

Your first campaigns set the baseline, and the before and after reading runs from there.

Each comparison is published in full, with its sources: KnowBe4, MetaCompliance, Hoxhunt, Adaptive Security, Proofpoint.

A vendor’s own comparison is a starting point rather than the verdict. Keepnet Labs has a rating of 4.9 out of 5 based on 104 ratings in the Security Awareness Computer-Based Training market on Gartner Peer Insights as of October 2026, and 5.0 out of 5 based on 46 reviews on Capterra as of October 2026.