Change Logs and Release Notes

Share

Is this article helpful?

Last updated:

SecurityCoach Change Log

Use this article to stay up-to-date with changes to KnowBe4's SecurityCoach product.

Note:Changes to SecurityCoach may include new, updated, deprecated, or removed features. KnowBe4 reserves the right to terminate access to, use of, and support of features that are included as part of the Subscription Services, which is common with SaaS services as they are constantly changing and improving. This allows us to adapt to the evolving cybersecurity industry so we can provide current, high-quality services.

See the table below for a list of updates, with the latest updates displaying at the top.

Release Date Description
April 2026
  • April 29, 2026 - We’ve added a new Splunk integration feature for Microsoft Edge for Business! Now, you can send Microsoft Edge for Business event data from Splunk to SecurityCoach for use in your real-time coaching campaigns. For more information, see our Splunk Integrations Guide for SecurityCoach.
March 2026
  • March 18, 2026 - We’ve added a new Splunk integration feature for Fortigate Cloud! Now, you can send Fortigate Cloud event data from Splunk to SecurityCoach for use in your real-time coaching campaigns. For more information, see our Splunk Integrations Guide for SecurityCoach.
  • March 16, 2026 - We’ve added a new Splunk integration feature for Carbon Black! Now, you can send Carbon Black event data from Splunk to SecurityCoach for use in your real-time coaching campaigns. For more information, see our Splunk Integrations Guide for SecurityCoach.
February 2026
  • Feburary 24, 2026 - We’ve added a new Splunk integration feature for Malwarebytes! Now, you can send Malwarebytes event data from Splunk to SecurityCoach for use in your real-time coaching campaigns. For more information, see our Splunk Integrations Guide for SecurityCoach.
  • February 17, 2026 - The security vendor Trend Micro is now TrendAI! We have updated your SecurityCoach console and our Knowledge Base documentation to reflect this change. For more information, see our TrendAI Integration Guide for SecurityCoach.
January 2026
December 2025
  • December 18, 2025 - We’ve added new SecurityTip text templates for your real-time coaching campaigns! Now, you can send your users positive SecurityTip text for good behavior, such as passing a phishing test. For more information, see our Real-Time Coaching Campaigns Guide.
  • December 8, 2025 - We’ve added a new Splunk integration feature for Mimecast! Now, you can send Mimecast event data from Splunk to SecurityCoach for use in your real-time coaching campaigns. For more information, see our Splunk Integrations Guide for SecurityCoach.
  • December 4, 2025 - We’ve added a Trend Micro integration! Now, you can use data from Trend Micro in real-time coaching campaigns. We’ve also added Splunk integration features, so you can send Trend Micro event data from Splunk to SecurityCoach. For more information, see our Trend Micro Integration Guide for SecurityCoach.
November 2025
  • November 25, 2025 - We’ve updated our recommended API token configuration for Netskope to align with Netskope’s best practices and ensure integration security. Existing Netskope integrations are not affected by this change. To set up a new Netskope integration, follow the steps in our Netskope Integration Guide for SecurityCoach.
  • November 19, 2025 - We’ve added a new Splunk integration feature for Google IAM! Now, you can send Google IAM event data from Splunk to SecurityCoach for use in your real-time coaching campaigns. For more information, see our Splunk Integrations Guide for SecurityCoach.
  • November 12, 2025 - We’ve added a new Splunk integration feature for Okta! Now, you can send Okta event data from Splunk to SecurityCoach for use in your real-time coaching campaigns. For more information, see our Splunk Integrations Guide for SecurityCoach.
October 2025
  • October 8, 2025 - We’ve updated two SecurityCoach report types to Svelte: Detection Rules Activity Reports and Real-Time Coaching Activity Reports! This update changes the appearance of both report types in the SecurityCoach tab, enhancing user navigation and enabling easier report filtering and downloading. To learn more, see our Detection Rules Activity Reports article and our Real-Time Coaching Activity Reports article.
September 2025
  • September 22, 2025 - We’ve added a new Splunk integration feature for Zscaler! Now, you can send Zscaler event data from Splunk to SecurityCoach for use in your real-time coaching campaigns. For more information, see our Splunk Integrations Guide for SecurityCoach.
  • September 11, 2025 - We’ve added a new Splunk integration feature for Sophos! Now, you can send Sophos Capture Client event data from Splunk to SecurityCoach for use in your real-time coaching campaigns. For more information, see our Splunk Integrations Guide for SecurityCoach.
  • September 2, 2025 - We’ve added a new Splunk integration feature for SentinelOne! Now, you can send SentinelOne event data from Splunk to SecurityCoach for use in your real-time coaching campaigns. For more information, see our Splunk Integrations Guide for SecurityCoach.
  • September 1, 2025 - We’ve added a new Splunk integration feature for Google! Now, you can send Google event data from Splunk to SecurityCoach for use in your real-time coaching campaigns. For more information, see our Splunk Integrations Guide for SecurityCoach.
August 2025
  • August 6, 2025 - We’ve added a new Splunk integration feature for Cisco Umbrella! Now, you can send Cisco Umbrella event data from Splunk to SecurityCoach for use in your real-time coaching campaigns. For more information, see our Splunk Integrations Guide for SecurityCoach.
July 2025
  • July 30, 2025 - We’ve updated our API token configurations for Code42 Incydr to align with Code42’s API updates and ensure integration stability. Customers affected by this update will find an alert in their SecurityCoach console with instructions to update their Code42 API permissions by following the steps in our Code42 Integration Guide for SecurityCoach.
  • July 25, 2025 - We’ve improved SecurityCoach data for your users' timelines! Now, SecurityTip previews will display in the target user’s language, so that you can see the exact SecurityTip content that was delivered. For more information, see the User Timeline Subtab section of our User Profile Guide.
June 2025
  • June 25, 2025 - We’ve added new SecurityCoach Notifications and Alerts! Now, admins and Security Role users can subscribe to receive important messages and insights from SecurityCoach. These include notifications for critical alerts, integration health, system detection rules, user management, and real-time coaching campaigns. For more information, see our new Personal Settings Guide.
  • June 20, 2025 - We’ve added a Microsoft Edge for Business integration! Now, you can use data from Microsoft Edge for Business in real-time coaching campaigns. For more information, see our Microsoft Edge for Business Integration Guide for SecurityCoach.
  • June 4, 2025 - We've added a new Splunk integration feature for Crowdstrike! Now, you can send Crowdstrike event data from Splunk to SecurityCoach for use in your real-time coaching campaigns. For more information, see our Splunk Integrations Guide for SecurityCoach.
May 2025
  • May 22, 2025 - We’ve updated our API token configurations for Crowdstrike Falcon Insight to align with Crowdstrike’s API updates and ensure integration stability. Customers affected by this update will find an alert in their SecurityCoach console with instructions to set up a new Crowdstrike integration by following the steps in our Crowdstrike Integration Guide for SecurityCoach.
  • May 20, 2025 - We've added new SecurityTips for reporting phishing simulations! Now, you can use these new SecurityTips to automatically congratulate users for correctly reporting simulated phishing emails, which will help encourage this key security habit. For more information, see our SecurityTips Guide.
  • May 14, 2025 - We've added new SecurityTips to coach your users on their simulated phishing tests! Now, if a user fails a phishing test, you can send a dynamic GIF that will reveal the Social Engineering Indicators they missed for the exact test they received. For more information, see our Real-Time Coaching with Social Engineering Indicators (SEI) article.
  • May 7, 2025 - We've added new Splunk integration features for Microsoft Defender for Cloud Apps, Microsoft Defender for Endpoint, and Microsoft Entra ID Protection! Now, you can send associated vendor event data from Splunk to SecurityCoach for use in your real-time coaching campaigns. For more information, see our Splunk Integrations Guide for SecurityCoach.
  • May 5, 2025 - We’ve updated our API token configurations for Microsoft 365 and Defender for Cloud Apps (formerly MCAS) to align with Microsoft’s API updates and ensure integration stability. Customers affected by this update will find an alert in their SecurityCoach console with instructions to add new API permissions by following the steps in our Microsoft 365 and Microsoft Defender for Cloud Apps Integration Guide for SecurityCoach.
April 2025
  • April 2, 2025 - We've improved and expanded the Unmapped Vendor Data Report (formerly the Unmapped Events Report)! Now, you can use the report to view unmapped vendor data and map the risky activity to your KSAT users. For more information, see our Map Users in SecurityCoach article.
March 2025
February 2025
  • February 25, 2025 - We've added a new Splunk integration feature for Bitdefender GravityZone and Cloudflare Area 1 Email Security! Now, you can send associated vendor event data from Splunk to SecurityCoach for use in your real-time coaching campaigns. For more information, see our Splunk Integrations Guide for SecurityCoach.
  • February 17, 2025 - We've added event metadata to the Real-Time Coaching Activity report! Now, you can view event metadata on the report page to better understand why a SecurityTip was sent. For more information, see our Customize and View the Real-Time Coaching Activity Report article.
  • February 12, 2025 - We've added a new Splunk integration feature for Microsoft 365 and Palo Alto Next-Generation Firewall (NGFW)! Now, you can send associated vendor event data from Splunk to SecurityCoach for use in your real-time coaching campaigns. For more information, see our Splunk Integrations Guide for SecurityCoach.
  • February 10, 2025 - We've added a new system rule for mapping your users! Now, SecurityCoach will automatically connect hostnames received from your integrated vendors to their associated KSAT users. For more information, see the Configuring User Mapping Rules section of our Map Users in SecurityCoach article.
January 2025
  • January 29, 2025 - We've added event metadata to the CSV file version of the Detection Rules Activity Report! Now, when you generate a CSV file for the report, you can view event metadata in the file. For more information, see the Viewing Detection Rules Activity Reports section of our Customize and View Detection Rules Activity Reports article.
Release Date Description
December 2024
  • December 12, 2024 - We've enhanced the Microsoft Teams integration for SecurityCoach! Now, you can view more details of your user sync, including a downloadable CSV file of any user sync errors. You can also resync your integrated users and teams on demand, allowing you to more quickly adjust your user list and resolve errors. For more information, see our Microsoft Teams Integration Guide for SecurityCoach.
  • December 6, 2024 - We've added PasswordIQ events to SecurityCoach! Now, Diamond-level customers can use PasswordIQ data for weak, breached, or shared passwords in real-time coaching campaigns. For more information, see the KnowBe4 Security Awareness Training (KSAT) section of our System Detection Rules by Vendor article.
October 2024
  • October 30, 2024 - We've added callback phishing events to SecurityCoach! Now, Diamond-level customers can use KnowBe4 Security Awareness Training (KSAT) callback phishing data in real-time coaching campaigns. For more information, see our System Detection Rules by Vendor article.
  • October 23, 2024 - We've enhanced the ingestion of events into SecurityCoach! The SecurityCoach Vendor Events Report has been refined to focus only on coaching events that are linked to detection rules. This new filtering prioritizes the events that are most relevant to your users. To include more events in your report, visit the Creating a Custom Detection Rule section of our Detection Rules Guide to create and link detection rules to the events.
September 2024
  • September 23, 2024 - We've added video content for SecurityTips! Now, you can coach your users about risky behavior by sending SecurityTips with videos. We have over 50 new and exclusive SecurityCoach videos ready for use, including our new ClickBait series! For more information, see our SecurityCoach Product Manual.
  • September 18, 2024 - We've added user feedback for SecurityTips! Now you can allow your users to provide acknowledgment and feedback for any SecurityTips they receive. For more information, see our User Feedback Interactions article.
August 2024
July 2024
  • We've enhanced the metadata passed from the KnowBe4 Security Awareness Training console to SecurityCoach. This metadata now includes the following additional fields:
    • Campaign name of the Phishing Security Test (PST)
    • Client IP address of the failure
    • Email subject of the PST template
    • Event threat category for simulated phishing
    • Sender email address of the PST template
    • Visited domain name of the failure
  • This information can be used to create custom detection rules and SecurityTip placeholders for visited domain names and email subjects.
June 2024
  • We've added a Test Mode feature to SecurityCoach. Now, you can see how your real-time coaching campaign will behave before you begin coaching your users. To learn more about this feature, see our Working with Test Mode Campaigns article.
May 2024
April 2024
  • We've created a learner support article for SecurityCoach so you can show your users what their SecurityTips and training notifications will look like. For more information, see our Learner Support: SecurityCoach Notifications article.
March 2024
February 2024
January 2024
Release Date Description
December 2023
  • You can now configure your user mapping rules on the same page as your vendor integration. For a list of available vendor integrations and their type, see our Vendor Security Types article.
November 2023
October 2023
  • We've improved the setup process for SecurityCoach! Now you'll be guided through the initial SecurityCoach setup in just four easy steps. As you complete each step, you can mark it as complete in the new SecurityCoach Setup section of your dashboard. You can also keep track of your progress using the new setup progress bar at the top of your screen. For more information, see our SecurityCoach Quickstart Guide.
  • We've removed 2 detection rules and added a new detection rule for Microsoft 365. For more information, see our Which Detection Rules Can I Use with My Vendors? article.
September 2023
July 2023
  • We've added alt text to SecurityTips! Now, SecurityTips are accessible for users with screen readers.
June 2023
May 2023
March 2023
  • We've added 2 new topics for SecurityTip graphics: Social Website and Shopping Website. We also updated the Alcohol/Nicotine Website topic to Alcohol/Drug Website.
  • We've added 6 new SecurityTip graphics! These graphics cover a range of topics, including restricted websites and online safety.
  • We've added the Bitdefender GravityZone integration! For more information, see our Bitdefender GravityZone Integration Guide for SecurityCoach.
  • We've added the new Vendor Events Report! You can use this report to view detailed event data from your integrated vendors. For more information, see our SecurityCoach Reporting Overview article.
February 2023
  • We've added 10 new SecurityTip graphics! These graphics cover a range of topics, including cryptomining websites, video streaming websites, cloud permissions, malware, and email safety.
  • We've added new operators that you can use to create criteria for your detection rules! For a full list of available operators, see our Creating and Managing Detection Rules article.
  • We've added the option to update your Netskope integration with a new Tenant Name and API token. For more information, see our Netskope Integration Guide for SecurityCoach.
  • We've added the option to update your Cisco Umbrella integration with a new API key and API secret. For more information, see our Cisco Umbrella Integration Guide for SecurityCoach.
January 2023

Was this article helpful?

67 out of 71 found this helpful

Can't find what you're looking for?

Contact Support