API Change Log

Use this article to stay up-to-date with changes to KnowBe4's APIs.

Note: Changes may include new, updated, deprecated, or removed endpoints. KnowBe4 reserves the right to terminate access to, use of, and support of features that are included as part of the Subscription Services, which is common with SaaS services as they are constantly changing and improving. This flexibility allows us to adapt to the evolving cybersecurity industry so we can provide current, high-quality services.

Changes for API

See the table below for a list of updates, with the latest updates displayed at the top. These changes include our User Event API, Reporting API, and Graph API.

Release Date	Description
May 2026	May 20, 2026 - The following changes occurred: The account_validation and synthesia_integration enum values were added to the ApiScopes enum. The KMSAT_TEAM_DASHBOARD_DELEGATION_CREATED and KMSAT_TEAM_DASHBOARD_DELEGATION_REVOKED enum values were added to the AuditLogActivities enum. The following enum values were added to the AuditLogChangeFields enum: TEAM_DASHBOARD_DELEGATION_DELEGATE TEAM_DASHBOARD_DELEGATION_DELEGATE_EMAIL TEAM_DASHBOARD_DELEGATION_DELEGATE_ID TEAM_DASHBOARD_DELEGATION_MANAGER TEAM_DASHBOARD_DELEGATION_MANAGER_ID TEAM_DASHBOARD_DELEGATION_REVOKED_AT The following enum values were removed from the AuditLogChangeFields enum: ACCOUNT_FEDRAMP_ANSWER ACCOUNT_FEDRAMP_PROMPT_STATUS ACCOUNT_FEDRAMP_STATUS_SET_BY TRAINING_CAMPAIGN_NOTIFICATION_NOTIFY_SECOND_LEVEL_MANAGER The team_dashboard enum value was added to the AuditLogObjectCategories enum. The team_dashboard_delegation enum value was added to the AuditLogObjectTypes enum. The AidaCampaign field was added to the AuditLogResource type. The INDIVIDUAL_LEADERBOARD, LEARNER_BADGES, and TEAM_DASHBOARD enum values were added to the DownloadablesTypes enum. The FailureRemovedMetadata type was added. The ORCHESTRATOR enum value was added to the PhishingCampaignTypes enum. The kmsat_campaign_failure_removed enum value was added to the TimelineEventTypes enum. The expiresOn field on the ApiToken type, the NewApiToken type, and the NewKey type changed from ISO8601Date to ISO8601DateTime. The syncCompletions field was removed from the WorkdayIntegrationAttributes input. The synthesiaValidated field was added to the Account type. The enabled field was added to the AccountEecSettingsAttributes input. The scanDayOfMonth field on the AccountEecSettingsAttributes input changed from required to optional. The following fields were added to the AccountLearnerExperienceSettingsAttributes input and the AccountSettingsLearnerExperience type: teamDashboardDelegationEnabled teamDashboardDelegationHierarchyOnly teamDashboardExportEnabled The respectUserTimezone input field was added to the AccountPhishingSettingsAttributes input and the AccountSettingsPhishing type. The following types were added: AidaCampaign AidaCampaignSetting AidaTriggerEvent ContentSources FailureRemovedMetadata ReportsEnrollmentsTimeframeCriteria ReportsTimeframe The CampaignRuleInput input was added. The ReportsTimeframeRelativeUnits enum was added. The ReportsTimeframeTypes enum was added. The following fields were added to the CursorPaginationCursorAttributes input and the CursorPaginationCursor type: sortField text The following fields were added to the NotificationAttributes input and the Notification type: additionalRecipients notifySecondLevelManager The enableLeaderboards field was added to the PhishalertSettingAttributes input and the PhishalertSetting type. The respectUserTimezone field was added to the PhishingCampaignRun type. The aidaCampaign field was added to the Query type. The ruleIds input field on SecurityCoachArgument was deprecated. The rules field was added to the SecurityCoachArgument input. The learningPaths field was added to the SecurityRolePermissionAttributes input and the SecurityRolePermission type. The hasAidaEnrollments field was added to the StorePurchase type. The following fields were added to the User type: learnerMessagesUnreadCount teamDashboardDelegationEnabled teamDashboardDelegationHierarchyOnly teamDashboardExportEnabled
April 2026	April 8, 2026 - The following changes occurred: The teamDashboardHardStartDate field was added to the AccountLearnerExperienceSettingsAttributes input. The teamDashboardRollingWindowMonths field was added to the AccountLearnerExperienceSettingsAttributes input. The teamDashboardHardStartDate field was added to the AccountSettingsLearnerExperience type. The teamDashboardRollingWindowMonths field was added to the AccountSettingsLearnerExperience type. The teamDashboardHardStartDate field was added to the User type. The teamDashboardRollingWindowMonths field was added to the User type. April 6, 2026 - The following changes occurred: The COMMUNITY enum value was removed from the EmailTemplateTypes enum. The COMMUNITY enum value was removed from the PhishingTemplateTypes enum. The PHISHING_COMMUNITY enum value was removed from the TemplateTopicTypes enum. April 6, 2026 - The following changes occurred on the EqEmailSecurityOptions enum: The defend enum value was added The virtru enum value was removed
March 2026	March 23, 2026 - The following changes occurred: The type for the nextCursor field on the Pagination type changed from Int to BigInt. The type for the cursor argument changed from Int to BigInt on the following queries: allowedDomains apiTokens assessmentDomains assessmentIndustryBenchmarks auditLogObjectSearch callbackPhishingGreetingTemplateLanguages callbackPhishingGreetingTemplates callbackPhishingResponseTemplateLanguages callbackPhishingResponseTemplates callbackPhishingTemplates dkimConfig dmiConfigs enrollments groupRiskScoreHistories groups hostedImages industries industryBenchmarks ipRanges landingDomains landingPages ldapSyncReportItems ldapSyncReports notificationTemplates phishDomains phishingCampaignRecipients phishingCampaignRuns phishingCampaigns phishingTemplates physicalQrCampaignResults physicalQrCampaigns physicalQrTemplates policies reportPermissionGroups riskScoreHistories secondChanceDevices secondChanceDomains secondChancePostActions secondChanceUrls secondChanceUsers securityRoles storePurchase storePurchases templateLanguages templateTopics trainingCampaigns usbCampaigns users March 20, 2026 - The following changes occurred: The following types were added: Argument Assessments BreachEvent Course CustomEvent CustomEventDefinition Ever GroupCriterion GroupsSaveCriterionsPayload Latest PasswordIqEvent PasswordIqState PhishEvent PhishFlipEvent PostTrainingEvent Range Relative SecurityCoach SecurityCoachRealTimeCoaching SmartRiskAgent Timeframe Training UserDate UserField UserFieldValue The following inputs were added: AssessmentDomainArgument AssessmentsArgument BreachEventArgument CustomEventArgument CustomEventDefinitionArgument GroupCriterionAttributes PasswordIqEventArgument PasswordIqStateArgument PhishEventArgument PhishFlipEventArgument PostTrainingArgument SecurityCoachArgument SecurityCoachRealTimeCoachingArgument SmartRiskAgentArgument TimeframeArgument TrainingArgument TrainingCourseArgument UserDateArgument UserFieldArgument UserFieldValueArgument The following enums were added: Booleans BreachEvents Comparisons CourseTypes DateFields DateUnits DetectionTypes EventComparisons EventTypes PhishEvents PhishFlipEvents RangeTypes SmartRiskAgentFields TimeframeTypes TrainingAssessmentInclusions TrainingCourseInclusions TrainingEvents Types UserFields The criterions field was added to the Group type. The groupSaveCriterions mutation was added. March 19, 2026 - The ALLOWED_DOMAIN_DOMAINABLE_TYPE enum value was removed from the AuditLogChangeFields enum. March 19, 2026 - The following changes occurred: The courseId field was removed from the PurchasedCourse type. The storePurchase field was added to the PurchasedCourse type. March 19, 2026 - The following changes occurred: The defaultLandingDomain field on the LandingDomain type is no longer non-nullable. The following enum values were added to the AuditLogActivities enum: KMSAT_ALLOWED_DOMAINS_IMPORTED KMSAT_ALLOWED_DOMAIN_CREATED KMSAT_ALLOWED_DOMAIN_DELETED KMSAT_ALLOWED_DOMAIN_VERIFIED The following enum values were added to the AuditLogChangeFields enum: ALLOWED_DOMAIN_DOMAINABLE_TYPE ALLOWED_DOMAIN_NAME ALLOWED_DOMAIN_VERIFICATION_STATUS EDKIM_CONFIG_ACCOUNT_ID The DKIM_CONFIG_CONFIGURABLE_ID enum value was removed from the AuditLogChangeFields enum. The DKIM_CONFIG_CONFIGURABLE_TYPE enum value was removed from the AuditLogChangeFields enum. The configurableId argument was added to the dkimConfig query. The DkimConfigurableTypes field was added to the configurableType argument on the dkimConfig query. The partnerPhishingDkimConfigs field was added to the Account type. The partnerTrainingDkimConfigs field was added to the Account type. The domainableId field was added to the AllowedDomain type. The domainableType field was added to the AllowedDomain type. The following fields were added to the DkimConfig type: The configurableId configurableType source The custom field was deprecated on the DkimConfig type. The following fields were added to the DkimConfigAttributes input: configurableId DkimConfigurableTypes on the configurableType argument DkimConfigSource on the source argument The DkimConfigSource enum was added. The DkimConfigurableTypes enum was added. March 18, 2026 - The fullKrn field was added to the Account type. March 18, 2026 - The following changes occurred: The locked field was added to the Enrollment type. The sequentialContent field was added to the TrainingCampaign type. The sequentialContent field was added to the TrainingCampaignAttributes input. March 17, 2026 - The following changes occurred: The PhishalertVersions enum was added to the defaultVersion argument on the accountCreatePabInstance mutation. The MS_TEAMS_PAB enum value was added to the PhishalertVersions enum. The msTeamsArtifact field was added to the PhishalertSetting type. March 11, 2026 - The following changes occurred: The workdayIntegration field was added to the AccountAttributes input. The WorkdayIntegrationAttributes input was added. March 3, 2025 - We’ve added more values for the factor field in the Post New Event(s) endpoint of the User Event API. Using these values, you can manually input risk factors and impact your Risk Score. Training completion factors have a positive impact, and all other factors have a negative impact. For more information about Risk Score, see our SmartRisk Agent™ and Risk Score Guide. March 2, 2025 - The following changes occurred: The GAMIFICATION_LEADERBOARD_TIME_WINDOW enum value was removed from the AuditLogChangeFields enum. The leaderboardTimeWindow field was removed from the Gamification type. The leaderboardTimeWindow field was removed from the GamificationAttributes input.
February 2026	February 27, 2026 - The following fields on the Account type are no longer non-nullable: phishPronePercentage ppp February 27, 2026 - The following changes occurred: The leaderboardTimeWindowGroup field was added to the Gamification type. The leaderboardTimeWindowIndividual field was added to the Gamification type. The leaderboardTimeWindowGroup field was added to the GamificationAttributes input. The leaderboardTimeWindowIndividual field was added to the GamificationAttributes input. February 26, 2026 - The following changes occurred: The cursor argument was added to the following queries: allowedDomains apiTokens assessmentDomains assessmentIndustryBenchmarks auditLogObjectSearch callbackPhishingGreetingTemplateLanguages callbackPhishingGreetingTemplates callbackPhishingResponseTemplateLanguages callbackPhishingResponseTemplates callbackPhishingTemplates dkimConfig dmiConfigs enrollments groupRiskScoreHistories groups hostedImages industries industryBenchmarks ipRanges landingDomains landingPages ldapSyncReportItems ldapSyncReports notificationTemplates phishDomains phishingCampaignRecipients phishingCampaignRuns phishingCampaigns phishingTemplates physicalQrCampaignResults physicalQrCampaigns physicalQrTemplates policies reportPermissionGroups riskScoreHistories secondChanceDevices secondChanceDomains secondChancePostActions secondChanceUrls secondChanceUsers securityRoles storePurchase storePurchases templateLanguages templateTopics trainingCampaigns usbCampaigns users The nextCursor field was added to the Pagination type. February 25, 2026 - We’ve updated our Product, User Event, and Reporting API tokens to include a five-year expiration limit. Any existing tokens without an expiration limit will now expire in five years. February 25, 2026 - The following changes occurred: The scalar on the expiresOn field on the ApiToken type changed from ISO8601DateTime to ISO8601Date. The expiresOn argument was added to the userEventApiCreateKey mutation. The scalar on the expiresOn field on the NewApiToken type changed from ISO8601DateTime to ISO8601Date. The description was updated on the expiresOn field on the ApiTokenAttributes input. The expiresOn field was added to the NewKey type. February 23, 2026 - The following fields were added to the AccountEecSettingsAttributes input and the AccountSettingsEec type: ignoreBreachesOlderThanYears ignoredEmails resolvedBreaches February 18, 2026 - The following changes occurred: The KMSAT_TEMPLATE_TOPIC_EXCLUDED enum value was added to the AuditLogActivities enum. The TEMPLATE_TOPIC_EXCLUDED enum value was added to the AuditLogChangeFields enum. The TRAINING_INTERACTIONS_BY_ASSESSMENT enum value was added to the DownloadablesTypes enum. The TRAINING_INTERACTIONS_BY_ASSESSMENT_BY_GROUP enum value was added to the DownloadablesTypes enum. The piq_ad_user_aes_encryption_not_set enum value was added to the PiqTimelineEventTypes enum. The AR enum value was removed from the PublishedLanguages enum. The usesManualSetTimezone field was added to the Account type. The usesManualSetTimezone field was added to the AccountAttributes input. The markAllMessagesEnabled field was added to the AccountSettingsLearnerExperience type. The markAllMessagesEnabled field was added to the AccountLearnerExperienceSettingsAttributes input. The customSapa field was added to the KnowledgeRefresher type. The templateTopicExclude mutation was added. The customSapa field was added to the PurchasedCourse type. The excluded field was added to the TemplateTopic type. The TemplateTopicExcludedAttributes input was added. The TemplateTopicsExcludePayload type was added The markAllMessagesEnabled field was added to the User type. February 16, 2026 - We removed the passwordIqCsv mutation.

Release Date	Description
November 2025	November 4, 2025 - The following changes occurred: The HUMAN_RISK_PROFICIENCY_ASSESSMENT_SCORE_BY_KNOWLEDGE_AREA enum value was added to the DownloadablesTypes enum. The USER_COUNT_BY_HUMAN_RISK_PROFICIENCY_ASSESSMENT enum value was added to the DownloadablesTypes enum. The reportsHumanRiskProficiencyAssessment field was added to the SecurityRolePermissionAttributes input. The reportsHumanRiskProficiencyAssessment field was added to the SecurityRolePermission type. November 3, 2025 - The following fields were added to the User type: otpCode otpSecretKey qrCodeImageData
October 2025	October 29, 2025 - The krn field was added to the Account type. October 29, 2025 - The enrollViaCsv field was removed from the TrainingCampaignAttributes input. October 27, 2025: The BUILDING enum value was added to the PhishingCampaignRunStatuses enum. October 24, 2025 - The following changes occurred: The following arguments were added to the phishingCampaignRuns query: endTime sortDirection sortField startTime The PhishingCampaignRunsSortFields enum was added. October 24, 2025 - The following changes occurred: The id attribute changed from Int to ID on the environmentSurveyAssessmentPublish mutation. The questionsIds argument was removed from the environmentSurveyAssessmentPublish mutation. The EnvironmentSurveyAssessmentUnpublishPayload type was added. The environmentSurveyAssessmentSave mutation was added. The environmentSurveyAssessmentUnpublish mutation was added. October 17, 2025 - The description for the per argument was changed on the following queries: allowedDomains apiTokens assessmentDomains assessmentIndustryBenchmarks auditLogObjectSearch callbackPhishingGreetingTemplateLanguages callbackPhishingGreetingTemplates callbackPhishingResponseTemplateLanguages callbackPhishingResponseTemplates callbackPhishingTemplates dkimConfig dmiConfigs enrollments groupRiskScoreHistories groups industries industryBenchmarks ipRanges landingDomains landingPages ldapSyncReportItems ldapSyncReports notificationTemplates phishDomains phishingCampaignRecipients phishingCampaignRuns phishingCampaigns phishingTemplates physicalQrCampaignResults physicalQrCampaigns physicalQrTemplates policies reportPermissionGroups riskScoreHistories secondChanceDevices secondChanceDomains secondChancePostActions secondChanceUrls secondChanceUsers securityRoles storePurchase storePurchases templateLanguages templateTopics trainingCampaigns usbCampaigns users October 16, 2025: The following changes occurred - The following enum values were added to the AuditLogActivities enum: KMSAT_ORCHESTRATOR_DISABLED KMSAT_ORCHESTRATOR_ENABLED KMSAT_ORCHESTRATOR_OPTED_IN KMSAT_ORCHESTRATOR_POLICIES_REORDERED KMSAT_ORCHESTRATOR_POLICY_CREATED KMSAT_ORCHESTRATOR_POLICY_DELETED KMSAT_ORCHESTRATOR_POLICY_UPDATED The following enum values were added to the AuditLogChangeFields enum: ACCOUNT_SETTINGS_ORCHESTRATION_STATUS ORCHESTRATOR_POLICY_DEFAULT_POLICY ORCHESTRATOR_POLICY_KNOWLEDGE_REFRESHERS_ENABLED ORCHESTRATOR_POLICY_KNOWLEDGE_REFRESHER_NOTIFY_ENABLED ORCHESTRATOR_POLICY_KNOWLEDGE_REFRESHER_TIMING ORCHESTRATOR_POLICY_NAME ORCHESTRATOR_POLICY_ORDER_IMPORTANCE ORCHESTRATOR_POLICY_PHISHING_FAILURE_LIMIT_BEFORE_REMEDIAL_TRAINING ORCHESTRATOR_POLICY_PHISHING_FREQUENCY ORCHESTRATOR_POLICY_STATUS ORCHESTRATOR_POLICY_TRAINING_FREQUENCY The orchestrator enum value was added to the AuditLogObjectCategories enum. The orchestrator_policy enum value was added to the AuditLogObjectTypes enum. The following enum values were added to the DownloadablesTypes enum: AIDA_ORCHESTRATION_PST_DETERMINATIONS AIDA_ORCHESTRATION_SAT_DETERMINATIONS AIDA_ORCHESTRATION_UNASSIGNED_USERS The AO_PST_AGENT enum value was added to the EmailTemplateTypes and PhishingTemplateTypes enums. The excludingGroups argument was added to the users query. The orchestrator field was added to the SecurityRolePermissionAttributes input. The orchestrationSettings field was added to the Account type. The AccountSettingsOrchestration type was added. The hasOrchestratorPolicyGroups field was added to the Group type. The OrchestratorStatus enum was added. The displayName field was added to the User type. October 13, 2025 - The ACCOUNT_TRIAL_SUBSCRIPTION_ID enum value was removed from the AuditLogChangeFields enum. October 13, 2025 - The following changes occurred: The enableDefendIntegration field was added to the AccountPhishingSettingsAttributes input. The DIRECT_TO_INBOX enum value was added to the PhishalertDispositions enum. The value GRAYMAIL enum was added to the PhishalertDispositions enum. The enableDefendIntegration field was added to the PhishalertSettingAttributes input. The enableDefendIntegration field was added to the PhishalertSetting type. October 8, 2025: The following changes occurred: The archived enum value was added to the EnvironmentSurveyAssessmentStatus enum. The scalar type for the id argument on the environmentSurveyAssessmentArchive mutation changed from Int to ID. October 7, 2025: The capMaxEnrollments argument was added to the percentComplete field on the TrainingCampaign type.
September 2025	September 25: We've added a new factor field to the Post New Event(s) endpoint in the User Event API. This field allows you to record the completion of security training across different security types, which are factored into the SmartRisk Agent™ and Risk Score calculation. September 23, 2025: The following changes occurred: The following enum values were added to the AuditLogActivities enum: KMSAT_AIDA_CAMPAIGN_DISABLED KMSAT_AIDA_CAMPAIGN_ENABLED KMSAT_AIDA_CAMPAIGN_UPDATED The following enum values were added to the AuditLogChangeFields enum: AIDA_CAMPAIGN_ALLOW_PAST_DUE_COMPLETIONS AIDA_CAMPAIGN_ALLOW_SURVEYS AIDA_CAMPAIGN_ALL_USERS AIDA_CAMPAIGN_AUTO_ENROLL AIDA_CAMPAIGN_ENROLLMENT_DURATION AIDA_CAMPAIGN_ENROLLMENT_DURATION_TYPE AIDA_CAMPAIGN_KNOWLEDGE_REFRESHERS_DELAY_IN_DAYS AIDA_CAMPAIGN_KNOWLEDGE_REFRESHERS_ENABLED AIDA_CAMPAIGN_KNOWLEDGE_REFRESHERS_NOTIFY AIDA_CAMPAIGN_SELECTED_GROUPS AIDA_CAMPAIGN_SETTING_REQUIRED_FAILURES AIDA_CAMPAIGN_START_CAMPAIGN_AT AIDA_CAMPAIGN_STATUS AIDA_CAMPAIGN_TRACK_SCORES AIDA_CAMPAIGN_TYPE The enum value aida_campaign was added to the AuditLogObjectTypes enum September 18, 2025: The following changes occurred: The id attribute was added to the EnvironmentSurveyAssessmentAttributes input. The EnvironmentSurveyAssessmentArchivePayload type was added. The EnvironmentSurveyAssessmentPublishPayload type was added The environmentSurveyAssessmentArchive mutation was added. The environmentSurveyAssessmentPublish mutation was added. September 17, 2025: The atLeastOneAnswered field was added to the environmentQuestionnaire type in the KSAT Graph API. September 15, 2025: The RISK_BOOSTER enum value was removed from the following enums: GroupSortFields UserSortFields September 11, 2025: The following changes occurred in the KSAT Graph API: The EnvironmentSurveyAssessmentStatus string changed to an enum. The EnvironmentSurveyAssessmentPublishPayload type was removed. The environmentSurveyAssessmentPublish mutation was removed. The EnvironmentSurveyAssessmentUpdatePayload type was added. The environmentSurveyAssessmentUpdate mutation was added. September 3, 2025: The following were added on the KSAT Graph API: The EnvironmentSurveyAssessmentAttributes input The EnvironmentSurveyAssessmentsSavePayload type The environmentSurveyAssessmentsSave mutation The EnvironmentSurveyAssessmentPublishPayload type The environmentSurveyAssessmentPublish mutation
August 2025	August 28, 2025: The IN_PROGRESS enum value was added to the EnrollmentCompletionStatuses enum in the KSAT Graph API. August 28, 2025: The following changes occurred in the KSAT Graph API: The certification field was added to the Account type. The AccountCertificationTypes enum was added. August 18, 2025: The status field was added to the EnvironmentSurveyQuestionnaireAttributes type in the KSAT Graph API. August 15, 2021: The hasEnvironmentSurveyAssessments field was added to the Account type in the KSAT Graph API. August 12, 2025: The following changes occurred on the KSAT Graph API: The GCC_HIGH_MR_PAB enum value was added to the PhishalertVersions enum. The gccHighMrManifest field was added to the PhishalertSetting type. August 5, 2025: The following changes occurred in the KSAT Graph API: The environmentSurveyQuestionnaire field was added to the account query. The environmentSurveyQuestionnaire type was added. The EnvironmentSurveyQuestionnaireAttributes input was added. The EnvironmentSurveyQuestionnaireClearPayload type was added. The EnvironmentSurveyQuestionnaireResult type was added. The EnvironmentSurveyQuestionnaireResultAttributes input was added. The EnvironmentSurveyQuestionnaireSavePayload type was added. The environmentSurveyQuestionnaireClear mutation was added. The environmentSurveyQuestionnaireSave mutation was added. The environmentSurveyQuestionnaire query was added. August 4, 2025: The userInLeaderboardGroup field was added to the Gamification type in the KSAT Graph API. August 1, 2025: The academy field was added to the SecurityRolePermission type in the KSAT Graph API.
July 2025	July 31, 2025: The following fields were added to the SavedReport type in the KSAT Graph API: creatorChangedAt originalCreatorEmail July 28, 2025: The following changes occurred in the KSAT Graph API: The topicIds argument was added to the physicalQrTemplatesCopy mutation. The physicalQrTemplatesCopy mutation description was updated. The description for the uuids argument on the physicalQrTemplatesCopy mutation was updated. The physicalQrTemplatesTopicsAdd mutation was added. The physicalQrTemplatesTopicsRemove mutation was added. The description for the nodes field on the PhysicalQrTemplatesCopyPayload mutation was updated. The PhysicalQrTemplatesTopicsAddPayload type was added. The PhysicalQrTemplatesTopicsRemovePayload type was added. July 25, 2025: The CCM_COURSE_TOPIC_ID enum value was added to the AuditLogChangeFields enum in the KSAT Graph API. July 24, 2025: The following fields were added to the SchMetadata type in the KSAT Graph API: deliveredMediaLocale deliveredTextLocale July 14: The KMSAT_USER_REMOVED_FROM_GROUPS enum value was added to the AuditLogActivities enum. July 9, 2025: The following changes occurred in the KSAT Graph API: The following enum values were added to the AuditLogActivities enum: KMSAT_MESSAGES_TEMPLATE_CLONED KMSAT_MESSAGES_TEMPLATE_CREATED KMSAT_MESSAGES_TEMPLATE_SOFT_DELETED KMSAT_MESSAGES_TEMPLATE_TOPIC_ADDED_TO KMSAT_MESSAGES_TEMPLATE_TOPIC_REMOVED_FROM KMSAT_MESSAGES_TEMPLATE_UPDATED The following enum values were removed from the AuditLogChangeFields enum: MESSAGES_CAMPAIGN_CUSTOM_TEMPLATE_UUID MESSAGES_CAMPAIGN_RECURRING_DAY_OF_WEEK The following values were added: MessagesOrPhishingTemplate MessagesTemplate MessagesTemplateAttributes MessagesTemplateTypes MessagesTemplatesCreatePayload MessagesTemplatesUpdatePayload The following mutations were added: messagesTemplateCreate messagesTemplateUpdate The cloneAsType attribute was added to the phishingTemplatesCopy mutation. The withMessages attribute was added to the phishingTemplatesTopicsAdd mutation. The withMessages argument was added to the phishingTemplatesTopicsRemove mutation. The PhishingTemplate node changed to MessagesOrPhishingTemplate for the PhishingTemplatesCopyPayload type. The MESSAGES_USER enum value was added to the TemplateTopicTypes enum. July 3, 2025: The following changes occurred in the KSAT Graph API: The cornerstoneIntegration field was added to the AccountAttributes input. The CornerstoneIntegration input was added. July 7, 2025: The following fields were added to the lxContinueLearning field for the User type: page per search
June 2025	June 23, 2025: The search argument was added to the phishingCampaigns query and to the following fields in the phishingCampaignRun query: recipientCount totalAttachmentOpen totalBounced totalCallbackDataEntered totalCalled totalClicked totalDataEntered totalDelivered totalDropped totalIgnored totalMacroEnabled totalOpened totalQrCodeScanned totalReplied totalReported totalScheduled June 19, 2025: The following changes occurred in the KSAT Graph API: The EnrollmentUpdateActions enum was added. The EnrollmentUpdatePayload type was added. The enrollmentUpdate mutation was added. June 16, 2025: The storePurchaseUuid argument was added to the enrollments query. June 16, 2025: The following changes occurred in the KSAT Graph API: The securityCoachNotifications field was added to the SecurityRolePermissionAttributes input. The securityCoachNotifications field was added to the SecurityRolePermission type. June 9, 2025: The customTermAttributes field was removed from the PurchasedContentOptionsAttributes input in the KSAT Graph API. June 4, 2025: The following changes occurred in the KSAT Graph API: The enableGccHighPabs field was added to the AccountPhishingSettingsAttributes input. The following enum values were removed from the AuditLogChangeFields enum: SCHEDULED_REPORT_ORIGINAL_CREATOR_ID SCHEDULED_REPORT_ORIGINAL_CREATOR_TYPE The following types were removed: GpabCsvEmailPayload GroupsBulkDeletePayload PhishingCampaignRunsBulkChangePayload SecondChanceImportDomainsPayload TrainingCampaignsBulkChangePayload TrainingCampaignsCsvEnrollPayload UsersBulkArchivePayload UsersBulkDeletePayload UsersBulkMergePayload UsersCsvImportPayload The following mutations were removed: gpabCsvEmail groupBulkDelete phishingCampaignRunBulkChange secondChanceImportDomains trainingCampaignBulkChange trainingCampaignCsvEnroll userBulkArchive userBulkDelete userBulkMerge userCsvImport The GCC_HIGH_HYBRID enum value was added to the PhishalertVersions enum. The following changes occurred for the ScheduledReport type: The originalCreator field was removed The originalCreatorEmail field was added The gccHighHybridManifest field was added to the PhishalertSetting type.
May 2025	May 21, 2025: The following changes occurred in the KSAT Graph API. The following enum values were added to the DownloadablesTypes enum: DEDUPED_EVENTS TRAINING_CONTENT_REPORTS The topicIds attribute was added to the callbackPhishingTemplatesCopy mutation. The following attributes are no longer required for the Pagination field: page pages totalCount The following fields were added to the phishingCampaign query: isSeiEnabled isHideLocked The following enum values were added to the PublishedLanguages enum: AR_MOD NB_NO The following changes occurred for the enrollments query: The dateField attribute was removed The dateRangeEndDate attribute was added The dateRangeField attribute was added The dateRangeStartDate attribute was added The endDateRange attribute was removed EnrollmentStatuses added The isSeiEnabled attribute was added to the phishingCampaigns query. The autoUnenroll field was removed from the trainingCampaign query. The purchasedSkus field was added to the Account type. The AccountPurchaseStatuses enum was added. The AccountPurchasedSku type was added. The lastUsedAt field was added to the apiToken type. The EnrollmentDateRangeFields type was added. The following fields were added to the LdapSyncReport type: currentStep currentStepStartedAt progress summary The lastUsedAt field was added to the NewApiToken type. The following fields were added to the SchMetadata type: detectionId isSeiRtc seiPreviewUrl The groupNamesConcat field was added to the User type. May 19, 2025: You can now use the Try Me function for EU, UK, CA, and DE instances on the KnowBe4 Graph API. May 7, 2025: We've added a new cursor pagination parameter to our Reporting API.
April 2025	April 11, 2025: The following fields were added to the LdapSyncReport type in the KSAT Graph API: currentStep currentStepStartedAt progress summary April 11, 2025: The DEDUPED_EVENTS enum value was added to the DownloadablesTypes enum in the KSAT Graph API. April 10, 2025: The UsersBulkMergePayload type was added on the KSAT Graph API. April 2, 2025: The following changes occurred in the KSAT Graph API: The defaultVersion field was added to the PhishalertSetting type. The description for the enableTnidValidation field on the PhishalertSetting type was changed. The PhishalertVersions enum was added. April 2, 2025: The following changes occurred in the KSAT Graph API: The XLARGE enum value was added to the BenchmarkCompanySize enum. The YEAR2 enum value was added to the BenchmarkTimeframes enum. The YEAR3 enum value was added to the BenchmarkTimeframes enum. The year2 field was added to the IndustryBenchmark type. The year3 field was added to the IndustryBenchmark type. The description for the large field on the IndustryBenchmarkSizes type was updated. The description for the medium field on the IndustryBenchmarkSizes type was updated. The description for the small field on the IndustryBenchmarkSizes type was updated. The xlarge field was added to the IndustryBenchmarkSizes type. April 2, 2025: The SECURITY_COACH_UNMAPPED_IDENTIFIERS_CSV enum value was added to DownloadablesTypes enum in the KSAT Graph API. April 1, 2025: The failedDmiTypes field was added to the account query in the KSAT Graph API.
March 2025	March 31, 2025: The description for the enablePstTokenHeader field in the account query was updated in the KSAT Graph API. March 31, 2025: We've added a new Graph API for SecurityCoach! Now, you can use GraphQL to call and interact with your SecurityCoach data. For more information, see our KnowBe4 Graph API Overview article. March 31, 2025: We've added a new PasswordIQ Graph API. Now, you can use GraphQL to call and interact with your PasswordIQ data. For more information, see our KnowBe4 Graph API Overview. March 25, 2025: The following changes occurred in the KSAT Graph API: The public_piq enum value was added to the ApiScopes enum. The value public_piq_readonly enum was added to the ApiScopes enum. March 25, 2025: The QUEUED enum value was added to the LdapSyncReportStatuses enum in the KSAT Graph API. March 24, 2025: The SIGN_UP_REPORTS enum value was added to the DownloadablesTypes enum in the KSAT Graph API. March 20, 2025: The KPI_REPORT enum value was added to the EmailTemplateTypes enum in the KSAT Graph API. March 19, 2025: The PolicyTypes argument was added to the policies query in the KSAT Graph API. March 17, 2025: The following changes occurred in the KSAT Graph API: The public_security_coach enum was added to the ApiScopes enum. The public_security_coach_readonly enum was added to the ApiScopes enum. March 17, 2025: The following changes occurred in the KSAT Graph API: The messageReportNonPhishing field was added to the PhishalertLanguage type. The timeoutReportNonPhishing field was added to the PhishalertLanguage type. The enableTnidValidation field was added to the PhishalertSetting type. March 14, 2025: The LeaderboardPeriods field in the Gamification field is no longer required on the KSAT Graph API. March 12, 2025: The ApiScopes argument was added to the ApiToken query on the KSAT Graph API. March 4, 2025: The following changes occurred in the KSAT Graph API: The ALL_JOB_TITLE enum was added to the UserSearchTypes enum. The hasDirectReports field was added to the user type. March 4, 2025: The passingScore field was removed from the Enrollment type on the KSAT Graph API.
February 2025	February 28, 2025: The following changes occurred in our KSAT Graph API: The emailTemplateTranslationUuid field was added to the PhishingCampaignAttributes type. The nextRun field was added to the PhishingCampaignAttributes type. The templateSelection field was added to the PhishingCampaignAttributes type. The emailTemplateTranslationUuid field was added to the PhishingCampaign type. The templateSelection field was added to the PhishingCampaign type. The PhishingCampaignTemplateSelections enum was added. February 26, 2025: The following changes occured on the KSAT Graph API: The PAST_DUE enum value was added to the EnrollmentStatuses enum. The landingPage field was added to the PhishingTemplate type. February 26, 2025: The following changes occurred on the KSAT Graph API: The ZIPPED_FILE enum value was added to the DownloadFileTypes enum. The BULK_DOWNLOAD_CERTIFICATE enum value was added to the DownloadablesTypes enum. February 25, 2025: The following changes occurred in the KSAT Graph API: The KMSAT_CAMPAIGN_RUN_DELETED enum value was added to the AuditLogActivities enum. The KMSAT_CAMPAIGN_RUN_STOPPED enum value was added to the AuditLogActivities enum. The ACCOUNT_HAS_SECOND_CHANCE enum value was removed from the AuditLogChangeFields enum. The CAMPAIGN_RUN_STATUS enum value was added to the AuditLogChangeFields enum. The phishing_campaign_run enum value was added to the AuditLogObjectTypes enum. The PhishingCampaignRun field was added to the AuditLogResource type. February 25, 2025: The graphManifest field was removed from the PhishalertSetting type on the KSAT Graph API. February 18, 2025: The type field was added to the TrainingCampaign type on the KSAT Graph API. February 12, 2025: The community attribute was added to the SecurityRolePermission type on the KSAT Graph API. February 6, 2025: The enum value AUDIOCAST was added to enum StoreItemTypes in the KSAT Graph API.
January 2025	January 29, 2025: The following changes occurred: The callback enum value was added to the AidaPhishingTemplateAttackVectors enum. The isAida field was added to the CallbackPhishingTemplate attribute. The aidaPhishingTemplateSettings field was added to the CallbackPhishingTemplate attribute. January 27, 2025: The following KSAT Graph API mutations that require the File scalar now have example files in their descriptions: gpabCsvEmail groupBulkDelete phishingCampaignRunBulkChange secondChanceImportDomains trainingCampaignBulkChange trainingCampaignCsvEnroll userBulkArchive userBulkDelete userCsvImport January 23, 2025: The following changes occurred on the KSAT Graph API: The TrainingCampaignAttributes.startCampaignAtDate field ISO8601Date is now required. The TrainingCampaignAttributes.startCampaignAtTime field Time is now required. The TrainingCampaignAttributes.timeZone field TimeZones is now required. January 22, 2025: The phishingCampaignRunCount field was added to the PhishingCampaign query on the KSAT Graph API. January 17, 2025: The alreadyEnrolled field was removed from the user object type in our KSAT Graph API. January 16, 2025: The following changes occurred on the KSAT Graph API: The enum value KMSAT_TEMPLATE_TOPICS_REORDERED was added to the enum AuditLogActivities. The field PhishingTemplateCategoryTypes changed to PhishingTemplateTypes. The type PhishingTemplateCategoryTypes was removed. The PhishingTemplateCategoryTypes argument changed to PhishingTemplateTypes on the phishingTemplateCategories query. The templateTopicReorder mutation was added. The ordering field was added to the TemplateTopic object type. The TemplateTopicsReorderAttributes type was added. The TemplateTopicsReorderPayload type was added. January 15, 2025: We added the following enum values to the AuditLogChangeFields enum in our KSAT Graph API: ACCOUNT_SETTINGS_REPORTS_CONFIGURATION_RISK_SCORE_V2_API_ENABLED ACCOUNT_SETTINGS_REPORTS_CONFIGURATION_RISK_SCORE_V2_ENABLED ACCOUNT_SETTINGS_REPORTS_CONFIGURATION_STANDARDIZED_CSV_ENABLED

Release Date	Description
October 2024	October 16, 2024 - We've released our KSAT Graph APIs! Our KSAT Graph APIs allow you to utilize complex queries and mutations to perform most functions of the supported KnowBe4 products via API. For more information, see our KSAT Graph API documentation.
August 2024	August 26, 2024 - We've updated our reporting APIs to allow you to return the store purchase ID for each training enrollment, to exclude the ‘completion_percentage' field from the response to greatly speed up response time, and to return a specific employee number. For more information, see the Training section of our Reporting API documentation.
April 2024	We've updated our reporting APIs to include a query parameter for returning the campaign ID for training enrollments. For more information, see the Training section of our KSAT Reporting APIs documentation.
January 2024	We've updated our reporting APIs to include queries for callback phishing campaigns on our phishing endpoints. For more information, see the Phishing section of our KSAT Reporting APIs documentation.

Release Date	Description
October 2023	We've made security improvements for our User Event, Product, and Reporting APIs. Now API tokens will be visible only when they are first created. Afterward, only the last 10 digits of the API tokens will be visible in the KSAT console. For the Reporting API, we've also added support for multiple tokens. For more information, see our KnowBe4's User Event API, KnowBe4's Product API, and KnowBe4's Reporting API articles.
August 2023	We've added an Egress integration to the KSAT console. This integration allows you to send your KSAT data to Egress to help you prepare for phishing attacks and data breaches. For more information, see Egress's KnowBe4 integration documentation. We've added the new Enable Webhook Failure Notifications check box for webhooks! This option sends recipients an email notification when a webhook receives 50 percent of the allowed failed responses in an hour. A second notification will be sent if the webhook exceeds the allowed number of failed responses in an hour and is deactivated. For more information, see our Webhooks in Your KSAT Console article. We've added course durations to users' training certificates! The duration is the estimated time needed to complete the course. For more information, see our How to Download or Print Your Training Certificate article. We've added the ability to preview how your executive reports will look as a PDF file! While previewing a report, you'll have the option to adjust your widgets as needed. For more information, see our KSAT Executive Reports Overview article. For information about the latest ModStore content releases, visit our ModStore Content Releases article.
June 2023	We've fixed a bug that was causing some API endpoints to incorrectly return a 200 success with a payload of [] when an invalid ID was used. Now the affected API endpoints will return the correct 404 error, which states that the resource was invalid and could not be found.

Release Date	Description
November 2022	We've added a webhook API for your phishing and training events. You can use this feature to send real-time data to the other applications you use. For more information, see our How to Create Webhooks in Your KSAT Console article.

Release Date	Description
November 2021	Phishing endpoints: Two legacy failures types will be removed from the responses vulnerable_plugin_count and exploited_count. Training Campaign endpoints: The modules array will be removed. Training module data will still be available in the content array. Users, Groups, and Phishing Recipient endpoints: The current adi_guid and active_directory_guid field names will be updated to provisioning_guid. The current adi_manageable field name will be updated to provisioning_managed. Users and Groups endpoints: The current group_type value for a provisioning-managed group will be updated from adi_managed_group to provisioning_managed_group. On November 3rd, we made the following updates to our Reporting API:
October 2021	On November 3rd, we are making the following updates to our Reporting API: Phishing endpoints: Two legacy failures types will be removed from the responses vulnerable_plugin_count and exploited_count. Training Campaign endpoints: The modules array will be removed. Training module data will still be available in the content array. Users, Groups, and Phishing Recipient endpoints: The current adi_guid and active_directory_guid field names will be updated to provisioning_guid. The current adi_manageable field name will be updated to provisioning_managed. Users and Groups endpoints: The current group_type value for a provisioning-managed group will be updated from adi_managed_group to provisioning_managed_group. We have updated our Reporting API to include new Risk Score History endpoints for Account, Users, and Groups. For more information, see our API Documentation.
September 2021	We added a new burst limit to our APIs. The burst limits are 50 requests per minute and will start around five minutes from the first API request. For more information, see our API Documentation. We have improved the way that our API results are returned. The returned results are now listed in sequence with the request's response when the per_page parameters and page numbers are the same. For more information, see our API Documentation. We created a Cybersecurity Awareness Month video series with tips on how to develop and improve your organization's security awareness program. To watch these videos, see our How to Develop a Successful Security Awareness Program article. The Training Status by Campaign report received two new columns, Campaign Started and Campaign Complete. Under Reporting, the column labeled Failed % has been changed to Clicked % to better reflect your reporting data. This change will apply to the Reporting interface as well as downloaded PDF and CSV files. You can now save reports to be viewed at a later time or send saved reports to other users. You can also choose to schedule reports to be generated and sent at a set frequency. For more information, see our How to Save and Send Reports guide. When creating or editing an email template under My Templates, you can now indicate what language that template was written in. Custom templates with a language selected can then be used in localized phishing campaigns. See our Localization Guide for more information. We have created the new ASAP Profile page, which lists the information used to generate your program. Your ASAP Profile includes organizational information and the responses provided when your ASAP questionnaire was originally completed. New items were added to the ModStore: Twist & Shout 6 videos for the new series "Clickbait" 6 videos for season 2 of "Restricted Intelligence HIPAA Edition" Popcorn 8 newsletters and security docs 2 training modules 4 posters El Pescador 4 posters 2 newsletters and security docs The Security Awareness Company 5 newsletters and security docs 5 videos 3 Mobile-First modules 2 training modules 1 game 3 posters MediaPro 5 Compliance Plus Mobile-First modules KnowBe4 7 Compliance Plus modules 1 Compliance Plus Mobile-First module 2 Compliance Plus posters 3 Compliance Plus newsletters and docs 4 training modules 2 Mobile-First modules
August 2021	We added a new placeholder for use within the source code of phishing templates, training notifications, and landing pages. The [[brand_color]] placeholder populates the hex code of your organization's brand color that was set in Account Settings.For more information see our article titled How do I Use the Branded Landing Pages, Training Notifications, and Email Templates? We've added a new Placeholders feature under the Branding section of your Account Settings. This feature can be used to create a custom banner or signature block that you can add to your phishing emails, as well as adding custom colors for phishing templates, training notifications, and landing pages. For more information, see our How to Edit Your Account Settings article. To better support learners during training, you can now customize the Need Help? button and the Help Desk link in the Learner Experience. This option can be enabled in the new Learner Assistance section of your Account Settings. Once enabled, enter the URL or contact email of your choosing. For more information, see our Learner Experience Guide We are happy to announce that the admin console has been localized in six more languages! The new available languages are: German French (Europe) French (Canada) Chinese (Mandarin) - Simplified Spanish (Europe) Spanish (Latin America) For more information and the full list of available languages, see our Localization Guide.a New items were added to the ModStore: The Security Awareness Company 2 newsletters and security docs 3 Mobile-First module 1 training module El Pescador 1 training module Popcorn 1 training module MediaPro 1 Compliance Plus module KnowBe4 1 training module 1 Mobile-First module 1 Compliance Plus module
July 2021	We released our new PhishER APIs to allow you to evaluate all of the suspicious emails that make it through to your users' inboxes. For more information, visit our KnowBe4 API Reference Guide and our KnowBe4 PhishER API article

Breaking Changes for API

See the table below for a list of breaking changes for our User Event API, Reporting API, and Graph API.

Note:These changes may cause breaks in your integrations.

Release Date	Description
February 2026	February 3, 2026: In July 2026, we’ll be deprecating the page parameter on our REST API. From that date forward, you’ll need to use the per_page or cursor parameters for pagination requests. Cursor pagination improves data accuracy and performance, allows faster database queries, reduces request times, and reduces infrastructure load.

Release Date	Description
September 2025	September 4, 2025: We’ve started the deprecation process for the Get a List of All Events parameters risk_level, risk_decay_mode, and risk_expire_date. These parameters will no longer be available after September 29, 2025.
August 2025	August 27, 2025: The depreciation process has started for the offsetFrom field on the Notification type in the KSAT Graph API. This field will no longer be available after December 31, 2025.
May 2025	May 21, 2025: We've deprecated the following mutations: gpabCsvEmail mutation groupBulkDelete phishingCampaignRunBulkChange secondChanceImportDomains trainingCampaignBulkChange trainingCampaignCsvEnroll userBulkArchive userBulkDelete userCsvImport
January 2025	January 21, 2025: We updated the response limit for the exclude_percentages=false query parameter of the Get all Training Campaigns endpoint. If this parameter is set to anything other than true, the response limit will be set to 10. January 17, 2025: The depreciation process has started for the PhishingCampaignRun field on the KSAT Graph API. Instead, use the phishingCampaignRuns query. The PhishingCampaign.runs field will be no longer be available after April 31, 2025.

Changes for Partner API

See the table below for a list of updates, with the latest updates displayed at the top. These changes include our KSAT Graph API for partners.

Release Date	Description
May 2026	May 20, 2026 - The following changes occurred: The synthesiaValidated field was added to the Account type. The following input fields were added to the ManagedNotificationAttributes input and the ManagedNotification type: additionalRecipients notifySecondLevelManager The enableLeaderboards field was added to the PhishalertSetting type. The following fields were added to the User type: learnerMessagesUnreadCount teamDashboardDelegationEnabled teamDashboardDelegationHierarchyOnly teamDashboardExportEnabled
April 2026	April 8, 2026 - The following changes occurred: The teamDashboardHardStartDate field was added to the User type. The teamDashboardRollingWindowMonths field was added to the User type. April 6, 2026 - The following changes occurred: The COMMUNITY enum value was removed from the EmailTemplateTypes enum. The COMMUNITY enum value was removed from the PhishingTemplateTypes enum. The PHISHING_COMMUNITY enum value was removed from the TemplateTopicTypes enum.
March 2026	March 23, 2026 - The following changes occurred: The type for the nextCursor field on the Pagination type changed from Int to BigInt. The type for the cursor argument changed from Int to BigInt on the following queries: accounts allowedDomains industries landingPages managedPhishingCampaigns managedStorePurchases managedTrainingCampaigns notificationTemplates partnerAdmins partnerApiTokens phishingTemplates templateLanguages templateTopics users March 19, 2026 - The following changes occurred: The partnerId field was added to the allowedDomains query. The domainableId field was added to the AllowedDomain type. The domainableType field was added to the AllowedDomain type. The allowedDomains field was added to the Partner type. March 18, 2026 - The fullKrn field was added to the Account type. March 18, 2026 - The following changes occurred: The sequentialContent field was added to the ManagedTrainingCampaign type. The sequentialContent field was added to the ManagedTrainingCampaignAttributes input. March 17, 2026 - The following changes occurred: The MS_TEAMS_PAB enum value was added to the PhishalertVersions enum. The msTeamsArtifact field was added to the PhishalertSetting type.
February 2026	February 27, 2026 - The following fields on the Account type are no longer non-nullable: phishPronePercentage ppp February 26, 2026 - The following changes occurred: The cursor argument was added to the following queries: accounts allowedDomains industries landingPages managedPhishingCampaigns managedStorePurchases managedTrainingCampaigns notificationTemplates partnerAdmins partnerApiTokens phishingTemplates templateLanguages templateTopics users The nextCursor field was added to the Pagination type. February 25, 2026 - The following changes occurred: The scalar on the expiresOn field on the PartnerApiToken type changed from ISO8601DateTime to ISO8601Date. The description was updated on the expiresOn field on the PartnerApiToken type. February 18, 2026 - The following changes occurred: The ManagedStorePurchasesAddToChildrensLibrariesCcmPayload type is no longer required. The ManagedStorePurchasesAddToChildrensLibrariesPayload type is no longer required. The usesManualSetTimezone field was added to the Account type. The customSapa field was added to the ManagedStorePurchase type. The excluded field was added to the TemplateTopic type. The markAllMessagesEnabled field was added to the User type.

Release Date	Description
November 2025	November 3, 2025 - The following fields were added to the User type: otpCode otpSecretKey qrCodeImageData
October 2025	October 29, 2025 - The krn field was added to the Account type. October 29, 2025 - The managedTrainingCampaignCreate description was updated. October 17, 2025 - The description for the per argument was changed on the following queries: accounts allowedDomains industries landingPages managedPhishingCampaigns managedStorePurchases managedTrainingCampaigns notificationTemplates partnerAdmins partnerApiTokens phishingTemplates templateLanguages templateTopics users October 16, 2025: The following changes occurred - The AO_PST_AGENT enum value was added to the EmailTemplateTypes and PhishingTemplateTypes enums. The excludingGroups argument was added to the users query. The displayName field was added to the User type. October 13, 2025 - The following changes occurred: The DIRECT_TO_INBOX enum value was added to the PhishalertDispositions enum. The GRAYMAIL enum value was added to the PhishalertDispositions enum. The enableDefendIntegration field was added to the PhishalertSetting type. October 7, 2025: The capMaxEnrollments argument was added to the percentComplete field on the ManagedTrainingCampaign type.
September 2025	September 15, 2025: The RISK_BOOSTER enum value was removed from the UserSortFields enum.
August 2025	August 28, 2025: The following changes occurred: The certification field was added to the Account type. The AccountCertificationTypes enum was added. August 15, 2021: The hasEnvironmentSurveyAssessments field was added to the Account type. August 12, 2025: The following changes occurred: The GCC_HIGH_MR_PAB enum value was added to the PhishalertVersions enum. The gccHighMrManifest field was added to the PhishalertSetting type.
July 2025	July 25, 2025: The following changes occurred: The uploadedContent field was added to the PartnerAdminPermissionAttributes input. The storeItemSources argument was added to the managedStorePurchases query. The ManagedStorePurchasesAddToChildrensLibrariesCcmPayload type was added. The managedStorePurchaseAddToChildrensLibrariesCcm mutation was added. The PartnerAdminUploadedContentPermissions enum was added. The StoreItemSource enum was added. July 9, 2025: The following changes occurred: The cloneAsType argument was added to the phishingTemplatesCopy mutation. The PhishingTemplate node changed to MessagesOrPhishingTemplate on the PhishingTemplatesCopyPayload type. The MESSAGES_USER enum value was added to the TemplateTopicTypes enum. The following values were added: MessagesOrPhishingTemplate MessagesTemplate MessagesTemplateAttributes MessagesTemplateTypes MessagesTemplatesCreatePayload MessagesTemplatesUpdatePayload The following mutations were added: messagesTemplateCreate messagesTemplateUpdate July 7, 2025: The description for the apiTokensGenerateJit mutation was updated.
June 2025	June 4, 2025: The following changes occurred: The GCC_HIGH_HYBRID enum value was added to the PhishalertVersions enum. The gccHighHybridManifest field was added to the PhishalertSetting type.
May 2025	May 21, 2025: The following changes occurred: The following changes occurred for the ManagedPhishingCampaign type: The overridePhishingLanguages field was added The isHideLocked field was added The overridePhishingLanguages field was added The autoUnenroll field was removed from the ManagedTrainingCampaign type. The following fields are no longer required for the Pagination type: page pages totalCount The autoUnenroll field was removed from the managedTrainingCampaign query. The purchasedSkus field was added to the Account type. The AccountPurchaseStatuses enum was added. The AccountPurchasedSku type was added. The standardizedCsvEnabled field was added to the Partner type. The lastUsedAt field was added to the PartnerApiToken type. The isHideLocked field was added to the managedPhishingCampaign query. The groupNamesConcat field was added to the User type.
April 2025	April 2, 2025: The following changes occurred: The defaultVersion field was added to the PhishalertSetting type. The description for the enableTnidValidation field on the PhishalertSetting type was changed. The PhishalertVersions enum was added. April 2, 2025: The following changes occurred: The XLARGE enum value was added to the BenchmarkCompanySize enum. The YEAR2 enum value was added to the BenchmarkTimeframes enum. The YEAR3 enum value was added to the BenchmarkTimeframes enum. April 1, 2025: The failedDmiTypes field was added to the account query.
March 2025	March 31, 2025: The description for the enablePstTokenHeader field in the account query was updated. March 20, 2025: The KPI_REPORT enum value was added to the EmailTemplateTypes enum. March 17, 2025: The enableTnidValidation field was added to the PhishalertSetting type. March 13, 2025: The sfidUsedByChildren field was added to the Partner type. March 4, 2025: The following changes occurred: The ALL_JOB_TITLE enum was added to the UserSearchTypes enum. The hasDirectReports field was added to the User type.
February 2025	February 28, 2025: The following changes occurred: The emailTemplateTranslationUuid field was added to the ManagedPhishingCampaignAttributes type. The nextRun field was added to the ManagedPhishingCampaignAttributes type. The templateSelection field was added to the ManagedPhishingCampaignAttributes type. The emailTemplateTranslationUuid field was added to the ManagedPhishingCampaign type. The templateSelection field was added to the ManagedPhishingCampaign type. The PhishingCampaignTemplateSelections enum was added. February 26, 2025: The landingPage field was added to the PhishingTemplate type on the KSAT Graph API for partners. February 25, 2025: The graphManifest field was removed from the PhishalertSetting type on the KSAT Graph API for partners. February 18, 2025: The type field was added to the TrainingCampaign type on the KSAT Graph API for partners. February 6, 2025: The following fields are no longer required on the Pagination type on the KSAT Graph API for partners: page pages totalCount February 6, 2025: The enum value AUDIOCAST was added to enum StoreItemTypes in the KSAT Graph API for partners.
January 2025	January 29, 2025: The callback enum value was added to the AidaPhishingTemplateAttackVectors enum. January 17, 2025: The alreadyEnrolled field was removed from the user object type in our KSAT Graph API for partners. January 16, 2025: The following changes occurred on the KSAT Graph API for partners: The field PhishingTemplateCategoryTypes changed to PhishingTemplateTypes. The type PhishingTemplateCategoryTypes was removed. The PhishingTemplateCategoryTypes argument changed to PhishingTemplateTypes on the phishingTemplateCategories query. The ordering field was added to the TemplateTopic object type.

Breaking Changes for Partner API

See the table below for a list of breaking changes for our KSAT Graph API for partners.

Note:These changes may cause breaks in your integrations.

Release Date	Description
August 2025	August 27, 2025: The depreciation process has started for the offsetFrom field on the ManagedNotification type in the KSAT Graph API for partners. This field will no longer be available after December 31, 2025.

Change Logs and Release Notes

Changes for API

Breaking Changes for API

Changes for Partner API

Breaking Changes for Partner API

Categories

Categories

Recent activity

<%= article.title %>

Change Logs and Release Notes

Share

API Change Log

Changes for API

Breaking Changes for API

Changes for Partner API

Breaking Changes for Partner API

Categories

Categories

Recent activity

<%= article.title %>