KnowBe4 licensing is the set of terms under which KnowBe4, Inc. and its subsidiaries sell access to their security awareness training (KSAT or SAT), simulated phishing, PhishER Plus, the email security products that came with the Egress acquisition, KCM GRC and newer AI products. Almost everything is sold as a cloud subscription for a fixed Subscription Term stated in a Quote. The unit is the User, which price lists call a seat.[1][2] One online contract, the KnowBe4 Terms of Service, governs access to and use of all Subscription Services. The only exception is a customer that has signed a master agreement with KnowBe4.[1] The model is a form of named-user licensing: each seat belongs to an identified person with a unique organizational email address. Seats can move to another person only when the first one leaves the organization.[1]
Editions
KnowBe4’s current price list sells Security Awareness Training at two content levels, SAT Foundation and SAT Advanced. Both are priced per seat per month on a 3-year term.[2] Older subscriptions were sold at four levels (Silver, Gold, Platinum and Diamond), priced per seat per year.[6] Customers renewing an older contract may still see those names on their Quote. Other products are priced separately, per seat:
| Product | What it is (vendor description) | How it is sold |
|---|---|---|
| SAT Foundation | Foundation training library of 200+ items, unlimited phishing security tests, Phish Alert Button, Smart Groups, Real-Time Coaching messaging[2] | Per seat per month, 3-year term, from $2.40 (25-50 seats)[2] |
| SAT Advanced | Adds the 1000+ item Advanced library, AIDA, Security Roles, APIs, third-party integrations and PasswordIQ[2] | From $3.75 per seat per month (25-50 seats)[2] |
| Compliance Plus | Compliance training library add-on for any SAT level[2] | $0.93 per seat per month (101-500 seats); seats must equal KSAT seats[2][13] |
| KnowBe4 Student Edition | Security awareness training for students[2] | $0.17 per seat per month (101-1000 seats)[2] |
| PhishER Plus | Reported-email triage with a crowdsourced blocklist; stand-alone or SAT add-on[3] | $1.50 per seat per month (101-500 seats)[3] |
| Defend | Inbound email security[4] | From $5.30 per seat per month (25-50 seats)[4] |
| Prevent, Prevent Enterprise | Outbound email security; Enterprise adds custom DLP[5] | From $9.58 and $12.92 per seat per month (25-50 seats)[5] |
| KCM GRC | Compliance, policy, risk and vendor risk modules[12] | By user count of administrative roles; price not published[12] |
All prices above are USD MSRP. KnowBe4 publishes no part numbers. The public prices are recorded as catalog SKUs, for example SAT Advanced (25-50 seats). The two SAT levels, the add-ons and the legacy levels are covered in KnowBe4 security awareness training subscriptions. PhishER Plus, the email security products and KCM GRC are covered in KnowBe4 PhishER, email security and GRC licensing.
Metrics
| KnowBe4 term | Catalog row | Where it applies | What KnowBe4 says |
|---|---|---|---|
| User (seat) | User (seat) | SAT, add-ons, PhishER Plus, Defend, Prevent | An individual authorized by the customer, for whom a subscription was bought, with a unique organizational email address on a domain the customer owns.[1] “All of our pricing is based on seats, or in other words, users.”[8] |
| Seat (MSP) | Seat (MSP Agreement) | Managed service providers | The number of Users allowed access to the Subscription Services at any given time.[9] |
| KCM GRC user count | KCM GRC user count | KCM GRC | Administrator and Contributor roles count; Auditors, Vendor Users and Policy Management end users do not.[12] |
| Workspace licence | Workspace licence | Workspace | Active accounts on internally mapped domains. See the product article. |
| Protect licence and credits | Protect licence and credits | Protect bought in the online store | A one-year paid licence, or 25 free credits for free accounts. See the product article. |
The User definition also covers employees, independent contractors and agents of the customer.[1] A contractor enrolled in phishing tests therefore takes a seat.
Counting / floors
Seat cap (Terms of Service s.3.2, last updated 2025-12-16). User-based services may only be used by the number of Users paid for on the Quote. If the number of Users exceeds the purchased seats, the customer must promptly pay for more Users or reduce the number of Users.[1] Additional Users added during the term are co-terminous with the current Subscription Term.[1] Catalog proof: Users must not exceed purchased seats; excess must be paid or removed; Users added mid-term are co-terminous with the current Subscription Term.
No automatic stop. The console does not prevent administrators from adding users beyond the purchased licences. Directory synchronization can therefore push a tenant over its entitlement without any warning.[8] Archiving a user takes the user out of the licensed seat count while keeping the history for reports. Deleting a user removes the user and all phishing and training history.[7] Catalog proof: The console does not block users beyond the purchased quantity; Archived users do not count against licensed seats.
Reassignment. Seats may be reassigned only on normal workforce attrition, meaning a User leaves or the customer ends its contract with that User. All other reassignments need KnowBe4’s written approval.[1] Catalog proof: Seats may be reassigned only on normal workforce attrition.
Floors. Published SAT price bands start at 25 seats. Add-on bands and PhishER Plus start at 101 seats, and 1001+ seats are quoted.[2] Compliance Plus must be bought for the same number of seats as KSAT, including seats added during the term.[13] Quantities cannot be decreased during a Subscription Term.[1] Seat counting, true-up and renewal are covered in KnowBe4 Terms of Service, seats and renewal.
Virtualization & partitioning
KnowBe4 licenses people, not devices or processors. The Terms define no device, core or host metric, and none of the retrieved documents contains a virtualization or partitioning rule.[1] The processor and core concepts used by infrastructure vendors do not apply.
Cloud / BYOL
The Subscription Services are hosted by KnowBe4 or its agents as Web Hosted Services. Downloadable Software and Training Content, such as SCORM packages for a customer’s own learning management system, are licensed, not sold.[1] Content hosted in a customer’s or third party’s LMS must be removed after the term ends.[1] The SAT price page also offers purchase through AWS Marketplace and describes it as suited to organizations of up to 500 users. It does not publish separate marketplace terms.[2] A FedRAMP Moderate environment for KSAT and PhishER is available at an additional cost. It applies to the whole account.[10] Catalog proof: FedRAMP authorization applies to the whole account and is charged from renewal.
Programs
- Managed Service Provider program. MSPs buy Subscription Services per seat and sell them with their managed services under the Terms of Service. They may not interchange Seats between customers, and KnowBe4 may audit their compliance.[9] The MSP bulk subscription shares one seat pool across managed accounts.
- Reseller program. Customers who buy through a Channel Partner pay on the partner’s payment terms. Their subscriptions still renew under the Terms of Service.[1]
- Limited Access Account. Trials run for 30 days unless the activation email sets another date. They are for internal evaluation only.[1]
- FedRAMP-authorized environment. A separate contract line, discussed at renewal and applied only if the customer opts in.[10]
- Online store licence. One-year Protect licences sold online with manual renewal. See KnowBe4 PhishER, email security and GRC licensing.
Partner rules are covered in KnowBe4 Terms of Service, seats and renewal.
Contract terms
- Commitment. A signed Quote, a payment, or a missed non-renewal notice commits the customer to the full purchase, whatever the payment schedule. All sales are final.[1]
- Auto-renewal. Unless the Quote says otherwise, subscriptions renew automatically for a period equal to the prior term. The customer must give written notice at least 30 days before the end of the term to stop renewal.[1] Catalog proof: Subscriptions auto-renew for the prior term unless notice is given 30 days before the end.
- Early exit. The customer may terminate on 30 days’ notice, but without relief from future payments. On a fixed-term Quote, the remaining recurring fees become immediately due.[1] Catalog proof: Termination for convenience does not release future fees.
- Changes to the Terms. KnowBe4 may update the Terms, and continued use after a change counts as acceptance.[1]
- Service levels. KnowBe4 uses commercially reasonable efforts to meet a 99.9% monthly availability target. Service credits are measured in days.[14]
- Egress products. Egress subscriptions entered into from 2025-01-01 are on the KnowBe4 Terms of Service. Earlier ones keep the Egress Master Subscription Agreement version in force at their start date until renewal.[11]
Audits and compliance
The Terms do not give KnowBe4 an on-site audit right. They do reserve the right to monitor the customer’s usage, to issue usage reports, and to require the customer to certify compliance with the seat provisions on request.[1] Because usage is measured in KnowBe4’s own platform, the evidence for a compliance review is the console user list. Archived users are excluded from it.[7] Partner agreements contain an explicit audit right over the partner.[9] See software license audit and true-up for the general practice. Catalog proof: KnowBe4 may monitor usage and require a compliance certification.
Out of scope
- Negotiated master agreements, non-profit and competitive-upgrade discounts, and prices for 1001+ seats, which are quoted individually.[2]
- Free tools, such as the Phish Alert Button download and password tests, which are governed by a separate free tools EULA not analysed here.
- Agent Risk Manager, which is in technical preview without a published commercial metric.
- Data protection terms (the Global Data Processing Addendum, Business Associate Agreement) and security certifications other than FedRAMP.