KnowBe4 launches AI agents to boost cyber risk management

KnowBe4, a cybersecurity firm, has unveiled a suite of Artificial Intelligence (AI) security agents known as Artificial Intelligence Defense Agents (AIDA) aimed at enhancing human risk management.

AIDA uses a combination of AI technologies to provide personalised and adaptive training for users, with the dual purpose of changing behaviour and automating risk management processes.

The core component of this suite, the SmartRisk Agent, utilises behavioural data from across KnowBe4's range of products to evaluate cyber risks posed by individuals. The agent's multidimensional Risk Scores are intended to assist security professionals by highlighting potential issues across user, group, and organisational levels.

Research conducted by LastPass in 2024 indicates that more than 95% of cybersecurity professionals perceive AI-generated content as complicating the detection of phishing attacks. This technological evolution presents new challenges, as it enables the creation of persuasive social engineering attacks that standard security awareness training may struggle to address.

Stu Sjouwerman, Chief Executive Officer of KnowBe4, commented, "AIDA is not merely the next step in KnowBe4's human risk management, it is a quantum leap forward. It offers a suite of AI-native agents that transform how security professionals approach human risk management. AIDA empowers organisations to stay ahead of AI-based cybersecurity attacks by measuring human risk scores to better understand and mitigate threats within the risk landscape."

The initial release of AIDA includes four distinct agents: the Automated Training Agent, the Template Generation Agent, the Knowledge Refresher Agent, and the Policy Quiz Agent.

The Automated Training Agent utilises AI to assess 316 indicators across 37 factors in seven knowledge areas. By analysing users' learning histories, job roles, risk scores, behaviour patterns, and languages, AIDA is able to assign the most relevant training material automatically.

The Template Generation Agent uses generative AI to create highly convincing phishing templates that align with current attack trends. These templates incorporate red flags based on the National Institute of Standards and Technology's Phish Scale Framework.

The Knowledge Refresher Agent dispenses concise refresher courses at optimal intervals to ensure users retain and apply essential security concepts.

Finally, the Policy Quiz Agent develops intelligent quizzes tailored to an organisation's specific security and compliance policies.

KnowBe4's AIDA suite is offered as an add-on for customers possessing a Diamond level KnowBe4 subscription, marking a significant step in utilising AI for cybersecurity enhancements.

KnowBe4 offers a comprehensive AI-driven best-of-suite platform for Human Risk Management, creating an adaptive defense layer that fortifies user behaviour against the latest cybersecurity threats, the company states. The HRM+ platform includes modules for awareness & compliance training, cloud email security, real-time coaching, crowdsourced anti-phishing, AI Defense Agents, and more.