This FAQ answers common questions about the KnowBe4 Platform, the new home for KnowBe4 products. It covers what the Platform is, what changes for customers who are migrating, and how the Platform will expand over time. To learn how to migrate, see our KnowBe4 Platform Migration Scheduler article. If your question isn't covered here, contact your KnowBe4 Customer Success team or review our The New KnowBe4 Platform Experience article.
In this FAQ:
- About the KnowBe4 Platform
- Existing Customers: Availability and Approach
-
For Customers Who Are Migrating
- What should I do before migrating?
- How do I schedule my migration?
- Can my Customer Success Manager schedule the migration for me?
- Will I be reminded about my migration after I schedule?
- Will migration cause downtime?
- What changes when my organization migrates?
- What stays the same?
- What do my users need to do?
- What do my administrators need to do?
- Will my sign-in methods change?
- Will existing MFA setups still work?
- Can users still self-register?
- Will my Security Roles carry over?
- I use signed SAML requests. What do I need to do?
- What happens to my PhishER admins?
- Are any features unavailable after migration?
- Can we go back to the classic console after migration?
- Will my Risk Score change when I migrate?
- Who do I contact with migration questions?
- Future of the Platform
- Security and Authentication
About the KnowBe4 Platform
What is the KnowBe4 Platform?
The fully agentic KnowBe4 Platform delivers a unified console experience where your KnowBe4 products live. It brings together security awareness training, phishing simulation, email and collaboration security, and agent security in one console, with one sign-in and one place to see your workforce's security posture. It also provides a unified Risk Score dashboard that shows your organization's security health in one place, with drill-downs by security area, history, contributing factors and recommendations for what to do next. The platform is not a separate product you buy, but how KnowBe4 products and your unified Risk Score are delivered to you.
Who is the Platform for?
The KnowBe4 Platform is built for IT administrators, security analysts, InfoSec teams, compliance managers, and training specialists who manage security awareness and workforce risk, from small businesses to large enterprises.
What can I do in the Platform today?
The Platform offers single sign-on across KnowBe4 products. Currently, SAT Foundation, SAT Advanced, and PhishER are supported. Defend and Prevent will be coming soon.
The Platform also includes a redesigned side navigation that makes every product easier to find, Dark Mode, and a unified Risk Score dashboard.
SAT Foundation and Advanced customers also have access to Real-Time Coaching, which is included at no additional charge as of August 2026.
What is the Risk Score?
The Risk Score dashboard shows your organization's security health in one place, with drill-downs by security area, history, and contributing factors, and includes targeted recommendations for what to do next to lower your risk. At launch, the unified Risk Score reflects security awareness training, PhishER, and Agent Risk Manager security data.
As more KnowBe4 products join the Platform (Email & Collaboration Security), the Risk Score will expand to include data from those products if they are part of your subscription. See the Future of the Platform section below for details.
What is AIDA?
AIDA is KnowBe4's family of AI Defense Agents. These agents help automate tasks such as creating phishing simulations, generating training content, delivering coaching, and recommending next steps. AIDA is available only to accounts with SAT Advanced. To learn about the agents included with your SAT Advanced subscription, see our Get Started with AIDA article.
Is Agent Security available?
Agent Security helps organizations see and govern AI agents and shadow AI in use across the workforce. Agent Risk Manager (ARM) is currently in an early access and complimentary preview for customers with SAT Advanced or SAT Foundation. See our ARM Quickstart Guide or ARM Early Adopter Program articles for details.
What is the Onboarding Wizard?
The Onboarding Wizard is a guided, step-by-step setup in your KnowBe4 Platform that gets your organization, Security Awareness Training, and PhishER configured with recommended best practices, in less time and with less guesswork. For more information, see the Onboarding Wizard section of our The New KnowBe4 Platform Experience article.
Existing Customers: Availability and Approach
How is the Platform rolling out to existing customers?
The Platform will roll out to existing customers in phases, based on the products they are currently subscribed to. Upon becoming eligible, customers will receive an email and an in-platform notification to schedule their migration.
Is the Platform a new product?
No, the KnowBe4 Platform isn't a separate product or add-on, and there's nothing extra to buy. It's the environment that your KnowBe4 products run on, so when you purchase a KnowBe4 product, you get access to the Platform as part of that subscription. Your subscription and pricing don't change.
Can I join the Platform early?
Eligible customers may be invited to an Early Adopter program. Early Adopter participants receive guided onboarding from KnowBe4's Product and Engineering teams and help shape the Platform before general access. Ask your Customer Success Manager whether your organization is eligible.
For Customers Who Are Migrating
What should I do before migrating?
Confirm that every administrator's email address is current, and let your IT team know that the Platform migration is happening. If you share self-registration links with your users or use signed SAML requests, see the Before You Migrate section of our KnowBe4 Platform Migration Scheduler article.
How do I schedule my migration?
As customers become eligible to migrate, they can choose a migration date using the self-service Migration Scheduler. Most customers can manage their own dates. If you need to change your date, you can postpone your migration up to three times. After that, contact your Customer Success Manager. Your migration will be completed within the advance-notice window provided by KnowBe4.
Can my Customer Success Manager schedule the migration for me?
Yes, your Customer Success Manager can schedule the migration for you. Contact your CSM for more information.
Will I be reminded about my migration after I schedule?
You'll receive reminders seven days, 48 hours, and one hour before your scheduled migration. All admins will be notified about the migration.
Will migration cause downtime?
No. Training, phishing simulations, and integrations continue to run while the Platform migrates in the background. Some features in the classic console are set to read-only during the migration. If you're signed in to the classic console when the migration runs, you'll be redirected to the KnowBe4 Platform and asked to sign in again.
What changes when my organization migrates?
You will see a redesigned side navigation that puts all your KnowBe4 products into a single, consistent menu, plus Dark Mode, which is available to users from day one. An upgraded Risk Score dashboard is the first thing you see when you sign in. For a full list of changes, see the What Changes section of our KnowBe4 Platform Migration Scheduler article.
What stays the same?
Your configuration and data move with you. Single sign-on (SAML), SCIM, GUP, and Active Directory provisioning settings migrate without changes, so your identity provider and user sync continue to work. Smart Groups, phishing simulations, training assignments, training history, completion records, and phishing results all carry over.
What do my users need to do?
Users who sign in with SAML single sign-on do not need to take any action. They sign in through your identity provider as they do today. Users who sign in with a username and password will set a new password once, at their first sign-in after migration. Passwords must be at least 12 characters. This takes about 30 seconds. End users are not required to set up MFA.
What do my administrators need to do?
Before migration, confirm that every administrator's email address is current. When administrators sign in to the Platform with their email address for the first time, they will be prompted to configure multi-factor authentication (MFA). MFA is required for all administrators. Administrator MFA adds an extra layer of protection to admin accounts. End users are not affected. One-time passcodes (OTP) and passkeys meet this requirement. Passkeys are coming in a future update.
We recommend letting your IT team know that the Platform migration is happening. No changes to SSO, SCIM, or your integrations are required. If you use signed SAML requests, see I use signed SAML requests. What do I need to do?
Will my sign-in methods change?
Passwordless Login links from the classic console are being retired for security reasons. After migration, Passwordless Login users are redirected to the sign-in page. From there, they can have a code emailed to them or set a password through a registration email. Administrators who use SAML bypass will need to reset their manual password after migration. Their password in your identity provider doesn't change.
Will existing MFA setups still work?
Yes. Existing MFA setups continue to work after migration.
Can users still self-register?
No. Self-registration isn't available on the KnowBe4 Platform. Admins must add all users manually, by CSV file, or through user provisioning. Self-registration links from the classic console stop working after migration.
Will my Security Roles carry over?
Some Security Role permissions, such as User Management and Account Settings, are Platform-level permissions on the KnowBe4 Platform. At migration, users who have these permissions through a Security Role are given the matching Platform role.
This is a one-time copy. After migration, Security Roles and Platform roles don't stay in sync. If you give a user one of these Security Roles later, you'll also need to assign them the matching Platform role.
I use signed SAML requests. What do I need to do?
If the Sign SP AuthnRequest setting is turned on in your classic console, you must turn it off before you migrate. Your migration can't start while this setting is on. SAML single sign-on continues to work while signing is off.
Before you migrate, follow the steps below:
- In your identity provider, turn off the setting that requires signed requests. In Microsoft Entra ID, this setting is Require verification certificates.
- In your classic console, clear the Sign SP AuthnRequest check box.
After you migrate, you can turn signed SAML requests back on. The KnowBe4 Platform uses a different certificate from the classic console. To turn signed requests back on, follow the steps below:
- In your KnowBe4 Platform SAML settings, select Sign SAML Request. A Current Request Certificate will appear.
- Copy the certificate and add it to your identity provider's verification certificates.
- In your identity provider, turn the setting that requires signed requests back on.
What happens to my PhishER admins?
PhishER admins sign in to PhishER through the KnowBe4 Platform. After your migration, PhishER runs a sync that creates any missing PhishER admins. To check your admins, use the Last Login column on the PhishER Users screen.
Are any features unavailable after migration?
Admins can no longer impersonate users. The User Merge feature and the option to require MFA for all users aren't available at launch.
Can we go back to the classic console after migration?
No. Once an account moves to the Platform, it cannot return to the classic console. Please review this with your team before you schedule your migration.
Will my Risk Score change when I migrate?
At migration, you will see the same Risk Score you see today, but with a new Risk Score dashboard featuring Risk Score Explainability that lets you quickly see why your Risk Score changed.
Who do I contact with migration questions?
We are here to support you every step of the way during the migration process. If you have questions about the migration, contact our migration support chat. The chat is available 24 hours a day, 7 days a week. You can also contact your Customer Success Manager for general questions.
If you have technical issues with the Platform after your migration, you can submit a support ticket in the Resource Hub.
Future of the Platform
What is coming in future release groups?
The second release brings Defend, Prevent, and PhishER-only customers onto the Platform. It moves the Platform toward a single, unified experience across all three areas of our Platform: Attack Simulation & Training, Email & Collaboration Security, and Agent Security. Customers in future release groups will have the opportunity to migrate when the required functionality is ready, rather than at renewal, and will be notified of their eligibility to migrate when this happens.
How will the Risk Score change with additional release groups?
At launch, the unified Risk Score reflects security awareness training, PhishER, and Agent Risk Manager security data.
As more KnowBe4 products join the Platform (Email & Collaboration Security), the Risk Score will expand to include data from those products if they are part of your subscription.
With the second release group, the Risk Score will also incorporate signals from our Email & Collaboration security products (Defend and Prevent), so one score reflects risk across training, email and collaboration security, and agent security. Scores may shift as new data sources are included.
The score becomes more accurate as it sees more of your environment, and your KnowBe4 team will help you understand changes before they happen.
Will products share information with each other?
Not yet. Functionality and connected workflows, such as a threat detected by one product becoming a simulation or coaching moment in another, will continue to develop alongside future integrations.
What does the Platform look like over time?
We're building a Platform where AI agents help you understand and act on risk, not just report it. You decide the agentic approach: fully automate reviews and tasks with configured guardrails, or use it only where you need it, to streamline your administrative processes.
Security and Authentication
How do customers sign in?
The Platform is web-based and requires authentication. Customers can use a username and password with multi-factor authentication (MFA), or single sign-on (SSO).
- Admins must sign in with a username and password with MFA or SSO.
- End users can sign in with a username and password with or without MFA (depending on their configuration) or SSO.
Can users reset their own passwords?
Yes. Users can reset their passwords themselves.
Where can I learn more?
Read our The New KnowBe4 Platform Experience and KnowBe4 Platform Migration Scheduler articles. More resources will be available soon.
You can also learn more about Platform and share ideas and feedback in the KnowBe4 Community.