What Training Modules Does KnowBe4 Offer? Topics, Formats, and How They Compare to AI-Generated Training (2026)

Key takeaways

• As of November 2026, KnowBe4's Public ModStore listed about 300 items for the Security Awareness Training (SAT) Foundation plan and nearly 1,660 for SAT Advanced, across eight content types: training modules, mobile-first modules, videos, games, audiocasts, newsletters, and posters.
• KnowBe4's first-campaign best practices guide, updated September 2026, recommends assigning the 45-minute version of the annual KnowBe4 Security Awareness Training course to all users and enrolling new users automatically.
• The Starter Curriculum Map is a 12-month sequence of one all-staff module per month and one role module per quarter for finance, help desk, and executive teams.
• KnowBe4 ModStore modules give every customer the same ready-made content for baseline, compliance, and multilingual training. In contrast, AI-generated awareness training builds modules from an organization's own policies for role-specific and current-threat scenarios.
• For security teams that need employees to practice against impersonation attacks, Adaptive Security creates deepfake voice, video, SMS, and email simulations based on an organization's own executives and workflows.

Want more from Adaptive in your Google results?

As of October 2026, KnowBe4's Security Awareness Training Library page reports that the company added more than 200 modules in 2026. The KnowBe4 ModStore, the storefront in the KnowBe4 platform that holds all KnowBe4 training content, offers more than 1,000 modules, videos, and games.

KnowBe4 training modules cover topics from phishing and social engineering to compliance, AI risks, and role-based training. The ModStore sorts that content into eight content types, including interactive modules, mobile-first microlearning, videos, games, newsletters, and posters.

The KnowBe4 training library supplies ready-made content for recurring topics. AI-generated awareness training serves a different need: it builds modules on demand from an organization's own policies for role-specific scenarios and emerging cyberthreats.

What Is the KnowBe4 ModStore?

The KnowBe4 ModStore is the storefront in the company’s platform that holds all available training content. Administrators open it from the console's ModStore tab to find content and assign it to employees, according to KnowBe4's ModStore and Library Guide (updated October 2026).

Four features shape how administrators use the ModStore.

• Full catalog view: Administrators can browse every item in the catalog, including content not covered by their organization's subscription.
• Subscription-based assignment: Administrators can assign only content included in the organization's subscription to employees.
• Catalog filters: Filters narrow the catalog by topic, language, duration, subscription level, and content features, such as modules that include a quiz or a Knowledge Refresher.
• Campaign delivery: Administrators assign content through training campaigns, which can send employees welcome and reminder notifications.

How Many Training Modules Does KnowBe4 Have in 2026?

As of November 2026, the Public ModStore listed around 1,660 items in the KnowBe4 training library for the Security Awareness Training (SAT) Advanced plan and around 290 for SAT Foundation. The Public ModStore is KnowBe4's catalog, which anyone can browse without an account. Those counts include newsletters, documents, posters, and artwork, as well as modules, videos, games, audiocasts, and assessments.

KnowBe4 launched SAT Foundation and SAT Advanced as its two current plans on May 5, 2026. According to KnowBe4's pricing page, SAT Advanced includes the full Foundation library plus premium content, such as additional games and live-action video.

KnowBe4 added more than 200 new modules to the catalog in 2026 and updates it monthly, according to its Security Awareness Training Library page as of October 2026.

What Formats Do KnowBe4 Training Modules Come In?

KnowBe4 training modules and supporting materials come in eight content types, according to the Public ModStore's content filter. KnowBe4's ModStore and Library Guide, updated October 2026, describes seven of them.

• Training Module: Interactive modules on cybersecurity topics, which organizations can download as Sharable Content Object Reference Model (SCORM) packages for their own learning management system (LMS).
• Mobile-First Module: Interactive modules built for viewing and completing on a phone, also SCORM-compliant.
• Video Module: MP4 videos that employees can watch in a browser or download to a device.
• Game: SCORM-compliant interactive games that reinforce training.
• Audiocast: Short audio lessons designed for listening on the go.
• Newsletters and Documents: PDF files on cybersecurity topics that organizations print or share digitally to reinforce training.
• Posters & Artwork: Images and PDF files that organizations display in the office or share digitally as reminders.

The table below shows how many items of each type the Public ModStore listed for each plan on October 19, 2026.

KnowBe4 Microlearning: Short Mobile-First Modules

KnowBe4 offers microlearning through its Mobile-First Module format. Most of these modules are short: in November 2026, most mobile-first modules in SAT Advanced fell in the Public ModStore's 0-to-5-minute duration filter. The KnowBe4 Studios Roadmap also lists Micro-Modules for Quick Learning among content planned for July through December 2026 and notes that the roadmap is not a guarantee.

KnowBe4 Training Videos and Story-Driven Series

Video Modules are the largest content type in KnowBe4's SAT Advanced library, with 437 items listed in the Public ModStore in October 2026. Most are short security awareness training vídeos, fell in the ModStore's 0-to-5-minute duration filter.

KnowBe4 also produces story-driven video series, including Chameleon and The Inside Man. KnowBe4's Security Awareness Training Library page describes The Inside Man as a cybersecurity thriller in which a reformed hacker races against time. KnowBe4's pricing page lists the series among the premium content in SAT Advanced, which SAT Foundation does not include.

KnowBe4 Games and Gamified Training

KnowBe4 offers gamified training in two forms: interactive games in the ModStore and leaderboards and badges in its learner experience. In Spot the Vish, which KnowBe4 announced in June 2026 as its 35th interactive game, players choose whether to end a suspicious call, verify the caller, or comply.

KnowBe4's Learner Experience Guide, updated October 2026, describes the leaderboards as optional. Group leaderboards track training completion, while individual leaderboards rank users by the share of simulated phishing emails they report with the Phish Alert Button, KnowBe4's button for reporting suspicious email, and by how quickly they report them.

KnowBe4 Studios and Third-Party Publisher Content

As of October 2026, the Public ModStore's Publisher filter lists four publishers of content in the KnowBe4 catalog. KnowBe4 Studios produces KnowBe4's own modules and video series, and the other three are third-party providers: Secure Code Warrior, APIsec University, and Bisk. KnowBe4's Security Awareness Training Library page describes the Bisk partnership as a source of professional development content.

What Topics Does the KnowBe4 ModStore Cover?

As of October 2026, KnowBe4 training topics in the ModStore span eight main areas, from core security awareness subjects to compliance and role-based content.

• Phishing: Recognizing and reporting phishing emails, plus related channels such as SMS phishing (smishing) and QR code phishing.
• Social engineering: Spotting manipulation red flags, including attacks that start with a text message and end in account takeover.
• Passwords: Everyday password security, delivered as short mobile-first content.
• Compliance: Compliance and ethics courses in the Compliance Plus add-on.
• Remote work: Securing the home networks that employees use outside the office.
• Data protection and insider threats: Handling sensitive data and recognizing insider risk.
• AI threats: Deepfakes, AI voice cloning, and shadow AI, the unapproved workplace use of AI tools.
• Role and industry content: Content for roles such as finance staff, IT staff, and executives, and for specific industries, which administrators find through the Targeted Training filter.

KnowBe4 Compliance Training Modules in Compliance Plus

KnowBe4 compliance training modules sit in Compliance Plus, a library of compliance and ethics courses that requires its own subscription, according to KnowBe4's Compliance Training Library page as of October 2026. Its course topics include business ethics, privacy, employment law, harassment, workplace safety, and ESG (environmental, social, and governance) issues.

The privacy courses cover regulations such as the Health Insurance Portability and Accountability Act (HIPAA), the General Data Protection Regulation (GDPR), and Payment Card Industry (PCI) requirements. A HIPAA privacy course can support the HIPAA Privacy Rule's duty to train workforce members on privacy policies and procedures. The HIPAA Security Rule adds a separate duty: a security awareness and training program for all workforce members, including management.

KnowBe4 Languages: Localized and AI-Translated Training Content

KnowBe4 offers training content in 47+ languages, according to its Security Awareness Training Library page. KnowBe4's language support page lists 12 of those languages as the most requested and with the broadest content, so modules vary by language.

KnowBe4's September 2026 content update announced AI Translations, the company's machine translation feature, which launched in October 2026. It translates training modules, mobile-first modules, video modules, and audiocasts into more than 50 languages, according to a KnowBe4 post from October 6, 2026. KnowBe4's ModStore and Library Guide state that a human translator does not review these translations.

For a multilingual workforce, check language coverage module by module. Organizations comparing KnowBe4 with alternatives should run that check and decide whether machine translations without human review meet their accuracy standard.

How KnowBe4 Handles Employee Training for AI Risks

In the ModStore, KnowBe4 delivers AI risk training through mobile-first modules and videos. The content covers AI-enabled attacks, such as deepfakes and voice cloning, and unapproved workplace AI use, known as shadow AI. Two recent videos focus on AI: AI Agents: From Answers to Actions (August 2026) and AI Voices! (September 2026).

KnowBe4 Training for Law Firms, Healthcare, and Financial Institutions

KnowBe4 sorts industry training with the Public ModStore's Targeted Training filter, which narrows content by industry, role, and region. KnowBe4 lists the following content for law firms, healthcare organizations, and financial institutions.

• Law firms: The Legal industry filter lists 85 items, led by regulatory topics such as the EU NIS2 Directive, the EU Data Act, and sanctions. KnowBe4's legal industry page names shadow AI and rising social engineering among law firms' key challenges and cites American Bar Association (ABA) Model Rules 1.1 (Comment 8) and 1.6(c).
• Healthcare organizations: KnowBe4's December 2025 content release added Social Engineering Awareness for Health Care, a mobile-first module for healthcare professionals. The module covers phishing scams that lead to ransomware and data theft. HIPAA courses sit in the Compliance Plus add-on.
• Financial institutions: KnowBe4 recently released BSA Basics (Bank Secrecy Act) and Fraud Prevention. The Targeted Training filter's Finance Staff role category covers topics such as CEO fraud and the Gramm-Leach-Bliley Act (GLBA).

Which KnowBe4 Modules and Courses Should New Employees Take?

Among KnowBe4 courses, new employees should start with the annual KnowBe4 Security Awareness Training course, which KnowBe4's first-campaign best practices guide recommends assigning to all users in its 45-minute version. Control AT-2 in NIST SP 800-53 Revision 5 also calls for security and privacy literacy training as part of initial training for new users.

Four further practices, drawn from KnowBe4's guide, NIST, and HIPAA, complete a new-employee training plan.

• Automatic enrollment: KnowBe4's guide recommends enrolling new users automatically so employees added after launch also receive the course.
• Completion window: The guide suggests giving each user two, three, or four weeks to finish, counted from the day they are enrolled.
• Role-based training before duties: NIST SP 800-53 control AT-3 calls for role-based training before employees in designated roles gain system access or perform assigned duties. New hires in those roles therefore take a role-specific module before starting that work.
• HIPAA timing: The HIPAA Privacy Rule requires HIPAA-covered entities to train each new workforce member within a reasonable period after the person joins the workforce.

How Does KnowBe4 Personalize and Automate Training Assignments?

KnowBe4 personalizes cybersecurity training by automating which employees receive which modules. According to KnowBe4's pricing page as of October 2026, SAT Foundation includes a limited number of Smart Groups. SAT Advanced includes unlimited Smart Groups and the AI Defense Agents (AIDA).

KnowBe4 automates personalized assignments in four ways.

• Attribute-based assignment: Smart Groups sort users by criteria such as department, manager, location, training status, and risk score so that each group can receive its own modules.
• New-hire enrollment: Smart Groups can enroll new hires in training automatically as they're added to the KnowBe4 console.
• Personalized phishing training: Smart Groups can use phishing simulation results and the Phish-prone Percentage, KnowBe4's measure of how often users fail simulated phishing tests, to assign remedial training automatically.
• AI orchestration: The AIDA Orchestration Agent includes sub-agents for ongoing training, phishing, and remedial training.

The Starter Curriculum Map: A 12-Month Module Sequence by Role

The Starter Curriculum Map is a 12-month sequence of security awareness modules for all staff, plus finance, help desk, and executive teams. Each slot lists an example KnowBe4 ModStore module as of October 2026. The map works on any training platform, since any module on the same topic can fill a slot.

How the Starter Curriculum Map Works

The Starter Curriculum Map runs on six design rules that set its cadence, role coverage, and room for new cyberthreats.

• Monthly all-staff module: Every employee takes one module per month, 5 to 15 minutes long, except the month 1 baseline course, which runs 15 to 45 minutes. NIST SP 800-53 control AT-2 leaves ongoing training frequency to each organization, and the map chooses monthly.
• Quarterly role module: Finance, help desk, and executive teams each take one role module per quarter, in months 2, 5, 8, and 11. New hires in those roles take an opening module before starting role duties.
• Current-threat slots: Months 6 and 10 hold current-threat modules, which an administrator swaps whenever a newer module or public warning appears.
• Company-specific scenario: Each role gets one scenario per year built on the organization's own people and processes, which a fixed library cannot supply. Administrators build it with uploaded custom content or AI-generated content.
• Compliance on top: Compliance training sits on top of the map wherever a regulation sets its own training requirements.
• Plan-dependent examples: Whether an organization can assign a KnowBe4 example depends on its subscription level.

Starter Curriculum Map for All Staff

The table below lists the all-staff track of the Starter Curriculum Map, with the topic, format, and an example KnowBe4 module for each month as of October 2026.

Starter Curriculum Map Tracks for Finance, Help Desk, and Executives

The table below lists the role-based training tracks of the Starter Curriculum Map, with an example KnowBe4 module for each slot as of October 2026 and one company-specific scenario per role.

Role-Based Training for AI Threats in the Starter Curriculum Map

Role-based training for AI threats in the Starter Curriculum Map gives finance, help desk, and executive teams one behavior each to counter cloned voices and deepfake video. KnowBe4's ModStore provides role-specific examples for these AI threats, including a deepfake module for executives, a CEO voice-cloning demo assigned to finance, and a caller-verification video for help desk teams. Each behavior depends on a check that does not rely on recognizing a voice or face.

Each of the three role behaviors answers a documented risk.

• Finance teams: Employees refuse any payment change requested by voice, video, or message until a callback to a number in the company directory confirms it. Businesses reported losses of more than $30 million in 2025 to AI-enabled business email compromise (BEC) scams, according to the FBI 2025 Internet Crime Report. The figure counts only losses reported to the FBI's Internet Crime Complaint Center (IC3).
• Help desk teams: Staff verifies a caller's identity with a second factor before any multifactor authentication (MFA) or password reset, no matter how familiar the voice sounds. A CISA advisory on Scattered Spider, revised in July 2025, reports that the group used voice calls to convince help desk personnel to reset passwords and MFA tokens. In December 2025, the FBI warned that AI voice clones and real voices can sound nearly identical.
• Executive teams: Executives set a code word with their assistants and finance staff for urgent requests, assuming cyberattackers can clone an executive's voice. The FBI warned in December 2024 that criminals generate videos for real-time chats with alleged company executives. That code word adapts advice from the FBI's December 2025 alert on impersonation of senior US officials, which tells families to agree on a secret word.

KnowBe4 Training Library Strengths and Gaps in 2026

The KnowBe4 training library's main strengths in 2026 are its size, range of formats, multilingual content, and ready-made compliance and ethics courses. Its main gaps are generic content that cannot reference an organization's own people or processes and a delay before some new attacks get dedicated modules. Features such as the AI Defense Agents and simulated voice phishing (vishing) also require SAT Advanced.

A ModStore module can teach employees the patterns of a payment-fraud call. It cannot use their own executives, approval chain, or vendors, which are the people and processes a cyberattacker would imitate. Organizations fill that gap with uploaded custom content or with AI tools that build modules from their own policies, including KnowBe4's Content Creation Agent.

How Quickly Does KnowBe4 Add Modules on New Cyberthreats?

KnowBe4 has released general content on new cyberthreats around the time of public warnings, and sometimes before. KnowBe4's release posts and Content Releases list show that attack-specific and organization-specific modules take longer. The table below compares those milestones with a public warning or case for four attack types.

Each milestone marks when KnowBe4 released that content. AI-generated training lets organizations build modules around a new attack without waiting for a matching library release.

Does KnowBe4 Offer AI, Deepfake, Vishing, and Smishing Simulations?

As of October 2026, KnowBe4 lists AI-assisted phishing simulations and voice phishing (vishing) simulations, and it offers deepfake training content featuring an organization's own leader. KnowBe4 does not list SMS phishing (smishing) simulations in .its guide to simulated phishing test types, its pricing page (pricing as of May 2026), or its free Attack Simulation Test.

The table below compares KnowBe4's simulation options by channel, with the plan requirement wherever KnowBe4 states one.

KnowBe4 documents email, QR code, callback, and voice phishing simulations, including custom deepfake vishing using AI voice cloning. SMS phishing simulations are not listed in the product materials reviewed.

How Do KnowBe4 Modules Compare With AI-Generated Awareness Training?

KnowBe4 ModStore modules are ready-made content shared with every KnowBe4 customer, suited for baseline, compliance, and multilingual training. An AI tool drafts AI-generated awareness training for one organization based on that organization's policies or a prompt. It supports role-specific and current-threat scenarios. AI risk training is a separate topic: it teaches employees to handle AI threats, whichever tool produced the content.

KnowBe4 offers both approaches. Alongside the ModStore, its Content Creation Agent turns internal policies into Sharable Content Object Reference Model (SCORM) modules in 30 languages, according to KnowBe4's AI-native security awareness training page as of October 2026. Adaptive Security's AI Content Studio builds interactive modules from a policy or a prompt in minutes, with an editable outline.

Library-Based vs. AI-Generated Training Content: Four Criteria Compared

Library-based training content and AI-generated awareness training differ on four criteria: relevance, update speed, personalization, and administrator effort. The table below compares the two approaches on each criterion as of October 2026.

For baseline, compliance, and multilingual training, a large library supplies ready-made content without production work. For role-specific and current-threat scenarios that must reference an organization's own policies and processes, AI-generated content can be built around that material.

A December 2025 preprint by Greco and colleagues, still under review, tested phishing training generated by large language models (LLMs). In its second study of 400 participants in Western Europe, every version produced learning gains, but tailoring the training to psychometric profiles added no measurable benefit over generic AI-generated training. Profile-level personalization therefore cannot be assumed to help, though the study did not test training built from organizational policies.

Adaptive Security vs. KnowBe4 for Security Awareness Training

Adaptive Security lists more than 1,000 training resources, and KnowBe4 lists more than 1,000 pieces of content on its SAT Advanced plan. Both companies offer AI tools that build training from an organization's own policies. They differ most in simulation channels and compliance content.

The table below compares the two platforms on six criteria as of October 2026, using each company's own published materials.

For organizations that need a large, ready-made compliance and ethics catalog, KnowBe4 offers 1,000+ pieces of training content in its Compliance Plus add-on. For organizations that need SMS phishing simulations or deepfake simulations of their own executives, Adaptive Security documents both, including custom deepfake personas. The comparison covers documented features and does not rank effectiveness.

Adaptive Security is a security awareness training and phishing simulation platform that creates deepfake voice, video, SMS, and email simulations based on an organization's own executives and workflows. For security teams that need custom, role-based training, Adaptive Security's AI Content Studio builds interactive modules from an organization's own policies or a prompt. Administrators can assign those modules by role, department, or risk score.

Frequently Asked Questions About KnowBe4 Training Modules

Does KnowBe4 Use AI for Its Training Videos?

Partly. KnowBe4 Studios produces live-action video content for the KnowBe4 library. As of October 2026, KnowBe4 also offers a Custom AI Video Builder, which creates training videos with AI avatars through an integration with Synthesia, according to KnowBe4's AI-native security awareness training page.

How Much Does KnowBe4 Training Cost?

As of May 2026, KnowBe4's pricing page lists SAT Foundation at $2.40 to $1.63 and SAT Advanced at $3.75 to $2.79 per seat per month on a three-year term. Prices fall as seat counts rise from 25 to 1,000. Organizations with more than 1,000 seats receive a quote, and Compliance Plus is a separate add-on. KnowBe4's pricing page now lists only SAT Foundation and SAT Advanced, though some KnowBe4 pages still refer to the older Silver, Gold, Platinum, and Diamond levels, with one page referring to them as “legacy” plans.

Can Organizations Upload Their Own Training to KnowBe4?

Yes. KnowBe4 customers can upload their own courses as Sharable Content Object Reference Model (SCORM) 2004 packages or as MP4 video files, according to KnowBe4's Custom Content Guide, updated September 2026. An account can hold up to 200 custom courses. Organizations can use these uploads to add company-specific material that the shared ModStore catalog does not contain.

How Long Does KnowBe4 Training Take?

KnowBe4 training length depends on the format. Most SAT Advanced videos and mobile-first modules run five minutes or less, and the annual KnowBe4 Security Awareness Training course comes in 15- and 45-minute versions, and KnowBe4's roadmap adds a 30-minute version for the 2027 edition. Over a year, the Starter Curriculum Map's all-staff track takes about 70 to 210 minutes per employee. That total includes one 15- to 45-minute baseline course and eleven monthly modules, each 5 to 15 minutes.

Is the KnowBe4 ModStore Free to Browse?

Yes. KnowBe4's Public ModStore lists the training catalog without requiring an account, according to KnowBe4's Public ModStore Guide, updated September 2026. Visitors can filter the Public ModStore by content type, topic, language, subscription level, and duration. KnowBe4 also offers a free Training Preview.

Can KnowBe4 Modules Run in Another Learning Management System?

Yes. KnowBe4 content can be exported as Sharable Content Object Reference Model (SCORM) packages, in SCORM 2004 4th Edition or SCORM 1.2, or as MP4 files, according to KnowBe4's Security Awareness Training Library page. Organizations can then host modules in their own learning management system (LMS).

Is KnowBe4 an AI-Powered Security Awareness Platform?

By its own description, yes. KnowBe4 markets its product as AI-native security awareness training. As of October 2026, it describes AI agents for phishing simulations, remedial training, content creation from internal policies, and deepfake training featuring an organization's own leader. The phishing and remedial training agents belong to the AI Defense Agents (AIDA), which KnowBe4's pricing page lists only with SAT Advanced.

Choosing the Right Mix of KnowBe4 Modules and Custom Content

KnowBe4 training modules give organizations a large, multilingual library of ready-made content in eight formats, with access set by plan. That library covers recurring topics and compliance needs, while company-specific scenarios for high-risk roles and new attacks call for uploaded custom content or AI-generated awareness training.

Adaptive Security builds training and simulations from an organization's own policies and executives. Security teams can see how that works in a self-guided tour of Adaptive Security.