Absolute trash. Getting in trouble for links I never clicked. I am fighting vociferously for our workplace to get rid of this sleazy company's scammy software.
TR
Thiago R.
Knowb4 is killing me inside
Jesus christ, it's so frustrating that a lot of companies are using this shit nowadays, it's so bad...
TV
Tyler V.
KnowBe4 is valueless
KnowBe4 constantly flags users who have not fallen for phishing attacks. They are lazy, worthless leeches who provide no value for the nonsense they require.
JA
James
False positives put employee's jobs at risk
Joke of a company. My employer uses them to test us on Phishing Attempts and I wish they used a different security platform. Not only are the tests painfully obvious (them sending from an internal email while the header says "external", using a name from ex-manager who hasn't been with the company for over a year). In addition to this, I have been flagged for two false positives so far this year! Both times I avoided clicking the link and simply used the "Report Phishing" button in outlook. Yet I still would receive emails stating that I "failed" and that I need to take a training module (due by the end of same day which is also ridiculous had I been out of office). I ended up having to email my security team and manager both times to let them know so that there was no trail of my false positives and that I was not at risk of disciplinary action! Imagine how hard it is to find work in this job economy, meanwhile I could be constantly at risk of losing my job due to this awful system thinking that I don't know how to identify the most obvious phishing attempts I've ever seen. Please, if you are an employer, spare yourselves and your employees the headache and do not use this platform!
Response from KnowBe4Jul 23, 2026
Thank you for taking the time to share this feedback, and we're sorry to hear about the frustration you've experienced.
A couple of technical notes that may explain what you're seeing, and that your IT/security admin can address:
On the "external" header showing on internal-looking emails: This typically happens when simulated phishing emails aren't fully whitelisted in your organization's mail environment. Without proper whitelisting (SPF/DKIM records, mail flow rules, and safe sender configuration per our recommended setup steps), some mail systems will tag simulated messages as external even when the sender name looks internal. This is a configuration step on the admin side, not something we can adjust per employee.
On the false positives from using Outlook's native "Report Phishing" button: This is the key issue. Outlook's built-in reporting button is a Microsoft feature that doesn't automatically communicate with the KnowBe4 platform. The KnowBe4 PhishAlert Button (PAB) is our purpose-built add-in for reporting suspicious emails. When you report a simulated phishing email through PAB instead, it logs correctly as a successful report, and you won't be flagged as a phishing failure or assigned remedial training. For an even more seamless experience, your admin can deploy the Microsoft Ribbon PAB, which places the KnowBe4 button directly in Outlook's native "Report" section so there's a single, correct button to click.
One more note: remedial training deadlines are set by your organization's admin, not by KnowBe4.
We'd strongly encourage raising both of these with your organization's security/IT admin. Proper whitelisting and deploying PAB (instead of relying on Outlook's native reporting) should resolve the exact issues you described.
JB
John B.
Absolute AI slop
Absolute AI slop. Every video is fake to the point of being insulting. You can't even focus on the content because you're distracted by how repetitive, stilted, and artificial the "actors" and scenarios are.
CO
Consumer
What a shame in 2026 to see (season 2…
What a shame in 2026 to see (season 2 episode 9 of the inside man, the mandatory training video) the "big boss" character portrayed (cultural dress, smoking shisha and some of the language used) very old-fashioned stereotyping. In todays context it felt uncomfortable to watch.
KD
Kevin D.
Sends relentless phishing emails that…
Sends relentless phishing emails that only have only ONE single tell, instead of the factors they supposedly educate the user to look out for.
AW
Adam W.
Scam
Scam. If you use AI phishing verifications, this site reacts as if you visited the site
