

KnowBe4 and Sophos Phish Threat are competing products in the security awareness training and phishing simulation space. KnowBe4 has the upper hand in pricing and customer service, while Sophos Phish Threat is praised for its comprehensive features, making it a worthy contender.
Features: KnowBe4 provides an extensive library of training content, customizable phishing templates, and a user-friendly approach, enhancing flexibility and effectiveness. Sophos Phish Threat offers sophisticated reporting, behavioral analysis tools, and detailed phishing readiness insights.
Room for Improvement: KnowBe4 could improve its analytical tools, advanced reporting capabilities, and scalability for large enterprises. Sophos Phish Threat might benefit from easier deployment procedures, more intuitive usability for non-technical users, and enhanced integration options with other security systems.
Ease of Deployment and Customer Service: KnowBe4 is recognized for its straightforward implementation process and responsive customer service, favoring quick deployment. Sophos Phish Threat, though slightly more complex to deploy, is valued for its robust support system and comprehensive documentation.
Pricing and ROI: KnowBe4 is viewed as cost-effective, offering clear ROI through structured pricing plans. Sophos Phish Threat, despite higher initial setup costs, provides significant ROI due to its advanced features. KnowBe4 offers a balance of cost and value, while Sophos Phish Threat justifies its pricing through rich features.
We learned extensively about cybersecurity with the training, and the automated trainings are very convenient and feasible for us.
This soft ROI shows value within the company and how security and data are being protected.
The solution proved valuable for audit reporting and successfully raised awareness while reducing phishing click rates.
Their support is very quick and informative.
We have escalated questions to KnowBe4's technical support, and it has been quite helpful in guiding us, especially when we request feature edits or face buggy issues.
The content is regularly updated to reflect current threats.
They call whenever you have an incident and keep calling to assist until you solve the issue.
I would evaluate the scalability of KnowBe4 as quite scalable, giving it an 8.5 on a scale of one to ten.
The product is pretty much scalable.
KnowBe4 works without interruptions and is very stable.
In terms of stability, KnowBe4 is stable; based on the training we are receiving, I would rate it at nine out of ten.
During the last downtime, it caused significant disruption as users couldn't access the system.
KnowBe4 could educate people about OWASP Top 10 in web security testing and API security.
KnowBe4 should focus more on these issues and provide guidance on dealing with links received from individuals who attempt to manipulate our emotions, particularly on social media platforms such as Facebook and LinkedIn.
The more complicated things they do about phishing, AI, and social engineering are very important, and the way they do it is very structured and good.
The catalog is very small compared with products such as Terranova or KnowBe4.
It's about five dollars a seat per month.
The solution was considered expensive, particularly in government contexts.
As an exceptional product, they are relatively expensive, but it is worth it because compared to offline education with hired dedicated people, it would be much more expensive and not obviously more efficient.
The cost of Sophos Phish Threat is very reasonable for customers as they charge based on usage only.
Modern phishing emails appear authentic, as if from friends. This enables full-blown ATP operations using AI to generate convincing phishing emails, making it crucial to focus on AI-based detection against AI-generated threats.
This is the biggest benefit to raise caution in the digital world, making people aware of the importance of verifying the sources of information.
I appreciate the training methodology. It is detailed with videos and real examples about handling phishing emails and dealing with social media links received through WhatsApp, email, or other platforms.
The integration with Sophos Central benefits us for the management of the phishing campaign by being very user-friendly.
| Product | Market Share (%) |
|---|---|
| KnowBe4 | 16.6% |
| Sophos Phish Threat | 4.0% |
| Other | 79.4% |

| Company Size | Count |
|---|---|
| Small Business | 5 |
| Midsize Enterprise | 3 |
| Large Enterprise | 10 |
| Company Size | Count |
|---|---|
| Small Business | 9 |
| Midsize Enterprise | 3 |
| Large Enterprise | 2 |
KnowBe4 provides a comprehensive platform for security awareness and compliance training, empowering organizations to fortify their defenses against cyber threats through AI-driven learning and simulations.
KnowBe4's platform enhances cybersecurity by transforming employees into an effective line of defense against cyber threats. The AI-driven Human Risk Management platform offers personalized training and automated phishing simulations that adapt to individual behaviors. With an award-winning library available in 35 languages, it covers diverse areas like cloud email security, anti-phishing, and compliance. Organizations benefit from continuous intelligence and real-time coaching, fostering a proactive security culture and significantly reducing human risk.
What are the most important features of KnowBe4?KnowBe4's solutions are widely applied across industries such as finance, healthcare, and retail for enhancing security awareness and compliance. Companies deploy interactive modules and phishing simulations to educate employees about phishing, smishing, and vishing threats, fostering an environment of proactive defense and improved detection skills. This contributes to reduced risk and ensures compliance with industry regulations.
Sophos Phish Threat emulates a range of phishing attack types to help you identify areas of weakness in your organization’s security posture, and empower users through engaging training to strengthen your organizations defenses.
We monitor all Security Awareness Training reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.