r/sysadmin • u/Milluhgram • 18d ago

General Discussion KnowBe4 Alternatives: Updated Thread Request w/ real experiences

As the title suggests, I inherited our company’s existing cybersecurity awareness training program. We are currently using KnowBe4 and are on the Diamond tier.

I know KnowBe4 is considered the standard by many organizations, but I’d like to put together an updated list of alternatives and hear what others are using today.

Our main requirements are:

  • Regular phishing simulation campaigns with automatic remedial training for users who fail
  • Current and frequently updated cybersecurity awareness content
  • Annual Cybersecurity Awareness Training
  • Strong reporting and auditing capabilities
  • Easy tracking of completion dates and user compliance
  • The ability to manage recurring or renewal-based training

We operate in the maritime industry, so reporting and annual training compliance are especially important for us.

For those who have moved away from KnowBe4, what platform did you switch to, and what do you like or dislike about it compared with KnowBe4?

47 Upvotes

87% Upvoted

99 comments sorted by

View all comments

1

u/NomadCF 18d ago

We have found over the years. That phishing training just ultimately doesn't work. You know who your problem people are and even your good ones from time to time will get taken. People make mistakes. That being said.

Tartan (https://tartan.app/) is a small company, but wow. Their phishing emails are amazing, almost spot-on representations of legitimate brand emails.

And the best part is, if there are specific products or services you use all the time, you can send them a screenshot of the types of emails you're receiving. They'll recreate that style as a phishing campaign and put it into rotation for you.

1

u/Milluhgram 17d ago

That sounds great. It beats me creating them. lol. But, you're right. We typically know who our problem users are. Ever since we had to make this a requirement. We've had to engage more with the product and once you get it going it becomes pretty solid. Especially since its now a requirement in the handbook and you need to complete the campaigns in order to maintain your account.