May 7, 2025: We’ve added a new cursor pagination parameter to our Reporting API.

April 11, 2025: The following fields were added to the LdapSyncReport type in the KSAT Graph API:

• currentStep
• currentStepStartedAt
• progress
• summary

April 11, 2025: The DEDUPED_EVENTS enum value was added to the DownloadablesTypes enum in the KSAT Graph API.

April 10, 2025: The following changes occurred on the KSAT Graph API:

• The userBulkMerge mutation was added.
• The UsersBulkMergePayload type was added.

April 2, 2025: The following changes occurred in the KSAT Graph API:

• The defaultVersion field was added to the PhishalertSetting type.
• The description for the enableTnidValidation field on the PhishalertSetting type was changed.
• The PhishalertVersions enum was added.

April 2, 2025: The following changes occurred in the KSAT Graph API:

• The XLARGE enum value was added to the BenchmarkCompanySize enum.
• The YEAR2 enum value was added to the BenchmarkTimeframes enum.
• The YEAR3 enum value was added to the BenchmarkTimeframes enum.
• The year2 field was added to the IndustryBenchmark type.
• The year3 field was added to the IndustryBenchmark type.
• The description for the large field on the IndustryBenchmarkSizes type was updated.
• The description for the medium field on the IndustryBenchmarkSizes type was updated.
• The description for the small field on the IndustryBenchmarkSizes type was updated.
• The xlarge field was added to the IndustryBenchmarkSizes type.

April 2, 2025: The SECURITY_COACH_UNMAPPED_IDENTIFIERS_CSV enum value was added to DownloadablesTypes enum in the KSAT Graph API.

April 1, 2025: The failedDmiTypes field was added to the account query in the KSAT Graph API.

March 31, 2025: The description for the enablePstTokenHeader field in the account query was updated in the KSAT Graph API.

March 31, 2025: We’ve added a new Graph API for SecurityCoach! Now, you can use GraphQL to call and interact with your SecurityCoach data. For more information, see our KnowBe4 Graph API Overview article.

March 31, 2025: We’ve added a new PasswordIQ Graph API. Now, you can use GraphQL to call and interact with your PasswordIQ data. For more information, see our KnowBe4 Graph API Overview.

March 25, 2025: The following changes occurred in the KSAT Graph API:

• The public_piq enum value was added to the ApiScopes enum.
• The value public_piq_readonly enum was added to the ApiScopes enum.

March 25, 2025: The QUEUED enum value was added to the LdapSyncReportStatuses enum in the KSAT Graph API.

March 24, 2025: The SIGN_UP_REPORTS enum value was added to the DownloadablesTypes enum in the KSAT Graph API.

March 20, 2025: The KPI_REPORT enum value was added to the EmailTemplateTypes enum in the KSAT Graph API.

March 19, 2025: The PolicyTypes argument was added to the policies query in the KSAT Graph API.

March 17, 2025: The following changes occurred in the KSAT Graph API:

• The public_security_coach enum was added to the ApiScopes enum.
• The public_security_coach_readonly enum was added to the ApiScopes enum.

March 17, 2025: The following changes occurred in the KSAT Graph API:

• The messageReportNonPhishing field was added to the PhishalertLanguage type.
• The timeoutReportNonPhishing field was added to the PhishalertLanguage type.
• The enableTnidValidation field was added to the PhishalertSetting type.

March 14, 2025: The LeaderboardPeriods field in the Gamification field is no longer required on the KSAT Graph API.

March 12, 2025: The ApiScopes argument was added to the ApiToken query on the KSAT Graph API.

March 4, 2025: The following changes occurred in the KSAT Graph API:

• The ALL_JOB_TITLE enum was added to the UserSearchTypes enum.
• The hasDirectReports field was added to the user type.

March 4, 2025: The passingScore field was removed from the Enrollment type on the KSAT Graph API.

February 28, 2025: The following changes occurred in our KSAT Graph API:

• The emailTemplateTranslationUuid field was added to the PhishingCampaignAttributes type.
• The nextRun field was added to the PhishingCampaignAttributes type.
• The templateSelection field was added to the PhishingCampaignAttributes type.
• The emailTemplateTranslationUuid field was added to the PhishingCampaign type.
• The templateSelection field was added to the PhishingCampaign type.
• The PhishingCampaignTemplateSelections enum was added.

February 26, 2025: The following changes occured on the KSAT Graph API:

• The PAST_DUE enum value was added to the EnrollmentStatuses enum.
• The landingPage field was added to the PhishingTemplate type.

February 26, 2025: The following changes occurred on the KSAT Graph API:

• The ZIPPED_FILE enum value was added to the DownloadFileTypes enum.
• The BULK_DOWNLOAD_CERTIFICATE enum value was added to the DownloadablesTypes enum.

February 25, 2025: The following changes occurred in the KSAT Graph API:

• The KMSAT_CAMPAIGN_RUN_DELETED enum value was added to the AuditLogActivities enum.
• The KMSAT_CAMPAIGN_RUN_STOPPED enum value was added to the AuditLogActivities enum.
• The ACCOUNT_HAS_SECOND_CHANCE enum value was removed from the AuditLogChangeFields enum.
• The CAMPAIGN_RUN_STATUS enum value was added to the AuditLogChangeFields enum.
• The phishing_campaign_run enum value was added to the AuditLogObjectTypes enum.
• The PhishingCampaignRun field was added to the AuditLogResource type.

February 25, 2025: The graphManifest field was removed from the PhishalertSetting type on the KSAT Graph API.

February 18, 2025: The type field was added to the TrainingCampaign type on the KSAT Graph API.

February 12, 2025: The community attribute was added to the SecurityRolePermission type on the KSAT Graph API.

February 6, 2025: The enum value AUDIOCAST was added to enum StoreItemTypes in the KSAT Graph API.

January 29, 2025: The following changes occurred:

• The callback enum value was added to the

  AidaPhishingTemplateAttackVectors

  enum.
• The isAida field was added to the

  CallbackPhishingTemplate

  attribute.
• The aidaPhishingTemplateSettings field was added to the

  CallbackPhishingTemplate

  attribute.

January 27, 2025: The following KSAT Graph API mutations that require the File scalar now have example files in their descriptions:

• gpabCsvEmail
• groupBulkDelete
• phishingCampaignRunBulkChange
• secondChanceImportDomains
• trainingCampaignBulkChange
• trainingCampaignCsvEnroll
• userBulkArchive
• userBulkDelete
• userCsvImport

January 23, 2025: The following changes occurred on the KSAT Graph API:

• The TrainingCampaignAttributes.startCampaignAtDate field ISO8601Date is now required.
• The TrainingCampaignAttributes.startCampaignAtTime field Time is now required.
• The TrainingCampaignAttributes.timeZone field TimeZones is now required.

January 22, 2025: The phishingCampaignRunCount field was added to the PhishingCampaign query on the KSAT Graph API.

January 17, 2025: The alreadyEnrolled field was removed from the user object type in our KSAT Graph API.

January 16, 2025: The following changes occurred on the KSAT Graph API:

• The enum value KMSAT_TEMPLATE_TOPICS_REORDERED was added to the enum AuditLogActivities.
• The field PhishingTemplateCategoryTypes changed to PhishingTemplateTypes.
• The type PhishingTemplateCategoryTypes was removed.
• The PhishingTemplateCategoryTypes argument changed to PhishingTemplateTypes on the phishingTemplateCategories query.
• The templateTopicReorder mutation was added.
• The ordering field was added to the TemplateTopic object type.
• The TemplateTopicsReorderAttributes type was added.
• The TemplateTopicsReorderPayload type was added.

January 15, 2025: We added the following enum values to the AuditLogChangeFields enum in our KSAT Graph API:

• ACCOUNT_SETTINGS_REPORTS_CONFIGURATION_RISK_SCORE_V2_API_ENABLED
• ACCOUNT_SETTINGS_REPORTS_CONFIGURATION_RISK_SCORE_V2_ENABLED
• ACCOUNT_SETTINGS_REPORTS_CONFIGURATION_STANDARDIZED_CSV_ENABLED

October 16, 2024 - We’ve released our KSAT Graph APIs! Our KSAT Graph APIs allow you to utilize complex queries and mutations to perform most functions of the supported KnowBe4 products via API. For more information, see our KSAT Graph API documentation.

August 26, 2024 - We've updated our reporting APIs to allow you to return the store purchase ID for each training enrollment, to exclude the ‘completion_percentage’ field from the response to greatly speed up response time, and to return a specific employee number. For more information, see the Training section of our Reporting API documentation.

• We've updated our reporting APIs to include a query parameter for returning the campaign ID for training enrollments. For more information, see the Training section of our KSAT Reporting APIs documentation.

• We've updated our reporting APIs to include queries for callback phishing campaigns on our phishing endpoints. For more information, see the Phishing section of our KSAT Reporting APIs documentation.

• We've made security improvements for our User Event, Product, and Reporting APIs. Now API tokens will be visible only when they are first created. Afterward, only the last 10 digits of the API tokens will be visible in the KSAT console. For the Reporting API, we’ve also added support for multiple tokens. For more information, see our KnowBe4’s User Event API, KnowBe4’s Product API, and KnowBe4’s Reporting API articles.

• We’ve added an Egress integration to the KSAT console. This integration allows you to send your KSAT data to Egress to help you prepare for phishing attacks and data breaches. For more information, see Egress’s KnowBe4 integration documentation.
• We've added the new Enable Webhook Failure Notifications check box for webhooks! This option sends recipients an email notification when a webhook receives 50 percent of the allowed failed responses in an hour. A second notification will be sent if the webhook exceeds the allowed number of failed responses in an hour and is deactivated. For more information, see our Webhooks in Your KSAT Console article.
• We’ve added course durations to users' training certificates! The duration is the estimated time needed to complete the course. For more information, see our How to Download or Print Your Training Certificate article.
• We've added the ability to preview how your executive reports will look as a PDF file! While previewing a report, you'll have the option to adjust your widgets as needed. For more information, see our KSAT Executive Reports Overview article.

For information about the latest ModStore content releases, visit our ModStore Content Releases article.

• We’ve fixed a bug that was causing some API endpoints to incorrectly return a 200 success with a payload of [] when an invalid ID was used. Now the affected API endpoints will return the correct 404 error, which states that the resource was invalid and could not be found.

• We’ve added a webhook API for your phishing and training events. You can use this feature to send real-time data to the other applications you use. For more information, see our How to Create Webhooks in Your KSAT Console article.

• Phishing endpoints:
  • Two legacy failures types will be removed from the responses vulnerable_plugin_count and exploited_count.
• Training Campaign endpoints:
  • The modules array will be removed. Training module data will still be available in the content array.
• Users, Groups, and Phishing Recipient endpoints:
  • The current adi_guid and active_directory_guid field names will be updated to provisioning_guid. The current adi_manageable field name will be updated to provisioning_managed.
• Users and Groups endpoints:

  • The current group_type value for a provisioning-managed group will be updated from adi_managed_group to provisioning_managed_group. On November 3rd, we made the following updates to our Reporting API:

• On November 3rd, we are making the following updates to our Reporting API:
  • Phishing endpoints:
    • Two legacy failures types will be removed from the responses vulnerable_plugin_count and exploited_count.
  • Training Campaign endpoints:
    • The modules array will be removed. Training module data will still be available in the content array.
  • Users, Groups, and Phishing Recipient endpoints:
    • The current adi_guid and active_directory_guid field names will be updated to provisioning_guid. The current adi_manageable field name will be updated to provisioning_managed.
  • Users and Groups endpoints:

    • The current group_type value for a provisioning-managed group will be updated from adi_managed_group to provisioning_managed_group.

• We have updated our Reporting API to include new Risk Score History endpoints for Account, Users, and Groups. For more information, see our API Documentation.

• We added a new burst limit to our APIs. The burst limits are 50 requests per minute and will start around five minutes from the first API request. For more information, see our API Documentation.
• We have improved the way that our API results are returned. The returned results are now listed in sequence with the request's response when the per_page parameters and page numbers are the same. For more information, see our API Documentation.
• We created a Cybersecurity Awareness Month video series with tips on how to develop and improve your organization's security awareness program. To watch these videos, see our How to Develop a Successful Security Awareness Program article.
• The Training Status by Campaign report received two new columns, Campaign Started and Campaign Complete.
• Under Reporting, the column labeled Failed % has been changed to Clicked % to better reflect your reporting data. This change will apply to the Reporting interface as well as downloaded PDF and CSV files.
• You can now save reports to be viewed at a later time or send saved reports to other users. You can also choose to schedule reports to be generated and sent at a set frequency. For more information, see our How to Save and Send Reports guide.
• When creating or editing an email template under My Templates, you can now indicate what language that template was written in. Custom templates with a language selected can then be used in localized phishing campaigns. See our Localization Guide for more information.
• We have created the new ASAP Profile page, which lists the information used to generate your program. Your ASAP Profile includes organizational information and the responses provided when your ASAP questionnaire was originally completed.
• New items were added to the ModStore:
  • Twist & Shout
    • 6 videos for the new series "Clickbait"
    • 6 videos for season 2 of "Restricted Intelligence HIPAA Edition"
  • Popcorn
    • 8 newsletters and security docs
    • 2 training modules
    • 4 posters
  • El Pescador
    • 4 posters
    • 2 newsletters and security docs
  • The Security Awareness Company
    • 5 newsletters and security docs
    • 5 videos
    • 3 Mobile-First modules
    • 2 training modules
    • 1 game
    • 3 posters
  • MediaPro
    • 5 Compliance Plus Mobile-First modules
  • KnowBe4
    • 7 Compliance Plus modules
    • 1 Compliance Plus Mobile-First module
    • 2 Compliance Plus posters
    • 3 Compliance Plus newsletters and docs
    • 4 training modules
    • 2 Mobile-First modules

• We added a new placeholder for use within the source code of phishing templates, training notifications, and landing pages. The [[brand_color]] placeholder populates the hex code of your organization's brand color that was set in Account Settings.For more information see our article titled How do I Use the Branded Landing Pages, Training Notifications, and Email Templates?
• We've added a new Placeholders feature under the Branding section of your Account Settings. This feature can be used to create a custom banner or signature block that you can add to your phishing emails, as well as adding custom colors for phishing templates, training notifications, and landing pages. For more information, see our How to Edit Your Account Settings article.
• To better support learners during training, you can now customize the Need Help? button and the Help Desk link in the Learner Experience. This option can be enabled in the new Learner Assistance section of your Account Settings. Once enabled, enter the URL or contact email of your choosing. For more information, see our Learner Experience Guide
• We are happy to announce that the admin console has been localized in six more languages! The new available languages are:
  • German
  • French (Europe)
  • French (Canada)
  • Chinese (Mandarin) - Simplified
  • Spanish (Europe)
  • Spanish (Latin America)
  For more information and the full list of available languages, see our Localization Guide.
• New items were added to the ModStore:
  • The Security Awareness Company
    • 2 newsletters and security docs
    • 3 Mobile-First module
    • 1 training module
  • El Pescador
    • 1 training module
  • Popcorn
    • 1 training module
  • MediaPro
    • 1 Compliance Plus module
  • KnowBe4
    • 1 training module
    • 1 Mobile-First module
    • 1 Compliance Plus module

• We released our new PhishER APIs to allow you to evaluate all of the suspicious emails that make it through to your users' inboxes. For more information, visit our KnowBe4 API Reference Guide and our KnowBe4 PhishER API article

January 21, 2025: We updated the response limit for the exclude_percentages=false query parameter of the Get all Training Campaigns endpoint. If this parameter is set to anything other than true, the response limit will be set to 10.

January 17, 2025: The depreciation process has started for the PhishingCampaignRun field on the KSAT Graph API. Instead, use the phishingCampaignRuns query. The PhishingCampaign.runs field will be no longer be available after April 31, 2025.

April 2, 2025: The following changes occurred:

• The defaultVersion field was added to the PhishalertSetting type.
• The description for the enableTnidValidation field on the PhishalertSetting type was changed.
• The PhishalertVersions enum was added.

April 2, 2025: The following changes occurred:

• The XLARGE enum value was added to the BenchmarkCompanySize enum.
• The YEAR2 enum value was added to the BenchmarkTimeframes enum.
• The YEAR3 enum value was added to the BenchmarkTimeframes enum.

April 1, 2025: The failedDmiTypes field was added to the account query.

March 31, 2025: The description for the enablePstTokenHeader field in the account query was updated.

March 20, 2025: The KPI_REPORT enum value was added to the EmailTemplateTypes enum.

March 17, 2025: The enableTnidValidation field was added to the PhishalertSetting type.

March 13, 2025: The sfidUsedByChildren field was added to the Partner type.

March 4, 2025: The following changes occurred:

• The ALL_JOB_TITLE enum was added to the UserSearchTypes enum.
• The hasDirectReports field was added to the User type.

February 28, 2025: The following changes occurred:

• The emailTemplateTranslationUuid field was added to the ManagedPhishingCampaignAttributes type.
• The nextRun field was added to the ManagedPhishingCampaignAttributes type.
• The templateSelection field was added to the ManagedPhishingCampaignAttributes type.
• The emailTemplateTranslationUuid field was added to the ManagedPhishingCampaign type.
• The templateSelection field was added to the ManagedPhishingCampaign type.
• The PhishingCampaignTemplateSelections enum was added.

February 26, 2025: The landingPage field was added to the PhishingTemplate type on the KSAT Graph API for partners.

February 25, 2025: The graphManifest field was removed from the PhishalertSetting type on the KSAT Graph API for partners.

February 18, 2025: The type field was added to the TrainingCampaign type on the KSAT Graph API for partners.

February 6, 2025: The following fields are no longer required on the Pagination type on the KSAT Graph API for partners:

• page
• pages
• totalCount

February 6, 2025: The enum value AUDIOCAST was added to enum StoreItemTypes in the KSAT Graph API for partners.

January 29, 2025: The callback enum value was added to the AidaPhishingTemplateAttackVectors enum.

January 17, 2025: The alreadyEnrolled field was removed from the user object type in our KSAT Graph API for partners.

January 16, 2025: The following changes occurred on the KSAT Graph API for partners:

• The field PhishingTemplateCategoryTypes changed to PhishingTemplateTypes.
• The type PhishingTemplateCategoryTypes was removed.
• The PhishingTemplateCategoryTypes argument changed to PhishingTemplateTypes on the phishingTemplateCategories query.
• The ordering field was added to the TemplateTopic object type.