Keepnet
AI-powered human risk management: multi-channel phishing simulation, adaptive security awareness training and automated phishing response in one platform.
By Keepnet Labs · HQ London, UK · 4.7/5 Value-Position score (estimate)
Positioning guardrails
Best for
- Security teams running phishing simulation and security awareness training for 250+ employees
- MSSPs and MSPs delivering managed security awareness and phishing simulation to their clients
- Organizations that need multi-channel simulation: email, SMS, voice, QR code, callback and MFA phishing
- Buyers consolidating awareness training, employee phishing reporting and phishing incident response on one platform
- Multi-site or multi-language workforces needing automated user provisioning and repeatable campaigns
Ideal size: 250–5,000 employees people · Mid-market to enterprise with a dedicated security awareness or SOC function
Not for
- Companies wanting a fully self-serve, credit-card checkout with a published list price
- Very small organizations (under 25 seats) with no security awareness budget
- Teams that only need a basic annual compliance training module and no simulations
- Buyers looking for technical email gateway or endpoint protection rather than human risk training
Value metrics scorecard
Time-to-Value
2–4 weeks
~21 days to first production value
Total Cost of Ownership
$5,600/yr
Starts at $540 · Per user, per month, billed annually; extra discounts on three-year terms; volume-based discounts and pay-as-you-go options available.
Implementation Friction
2/5
Engineering + admin effort required
Value-Position score
out of 5 · model estimate
Full cost breakdown
Mandatory implementation fee
None
Seat tiers
Headcount bands 25–50, 51–100, 101–500, 501–1000 and 1000+; under 50 employees quoted individually.
Add-on costs
- Compliance 360 — optional add-on, roughly $0.83–$1.04 per user/month by volume band
- Agentic AI — optional add-on, roughly $0.72–$1.04 per user/month by volume band
- Incident Responder — optional add-on, roughly $0.72–$1.40 per user/month by volume band
- Individual products (Phishing Simulator, Vishing or Smishing Simulator) can be bought standalone without the training library
Company & support
Who is behind Keepnet, and how your team gets help once it is live.
Company
- Founded
- 2017 · 9 yrs in business
- Headquarters
- London, UK
How you get support
- PhoneNot listed
- EmailNot listed
- Live chatNot listed
- Support portal / ticketsNot listed
- Community forumNot listed
- Help centre / docsNot listed
- Dedicated account managerEnterprise only
- In person / on-siteNot listed
- Hours
- Not recorded
- Response time
- Not stated
Pricing page states enterprise customers get dedicated customer success and support teams, with SLA terms agreed commercially; no 24/7 coverage or published response time is stated.
“Not listed” means the vendor’s public pages don’t mention that channel, not that it is unavailable. Ask about it during evaluation.
Market position
Where Keepnet sits against its closest alternatives. Pick any two of cost, speed, friction and buyer score, and up to 9 companies to compare.
Quadrant view
Typical annual cost × Time-to-value
The lines cross at the median of the solutions shown, so about half sit on each side of each line.
Companies on the chart 6 / 10
- Keepnet
- HYCU
- Contractbook
- Ketch
- Josys
- Virtru
Add or change companies
Up to 10 companies including Keepnet. Listed closest first.
Stack fit signal
Compatibility with standard B2B ecosystems.
No supported MCP path today, so it cannot be driven from an AI client.
AI & MCP readiness
What Keepnet ships in AI, and what it asks of your ecosystem.
AI features shipped
Agentic AI (an optional add-on on every plan) has AI agents that continuously create and scale simulations and training by role, risk, language and regulation; the platform also runs AI-driven phishing analysis and adaptive training paths. No source states the model provider, whether keys are customer-supplied, or any AI activity logging or export.
Your data & models
- Trains on your data
- Never trains on your data
- Runs on
- Not recorded
- AI pricing
- Paid add-on
In your ecosystem
- AI connection
- Not supported
- Model key
- Not recorded
- AI usage audit
- Not recorded
Compliance attestations
* IAPP AIGP certifies individuals, not products. It means named staff hold the credential — not that the platform does.
Bottom line
Keepnet is an AI-assisted human risk management platform from Keepnet Labs, founded in London in 2017. It combines multi-channel phishing simulation (email, SMS, voice, QR, callback, MFA), adaptive security awareness training, one-click phishing reporting and automated phishing response. Per-user pricing starts around $1.80 per user/month at 25-50 seats on a three-year term, and the vendor cites 4,000 organizations including Vodafone and Pegasus Airlines. AI agents are an optional add-on; the vendor states customer data is never used to train AI models.
Frequently asked questions
How is Keepnet priced?
Keepnet prices per user, per month, with annual payment and additional discounts for three-year terms. Published monthly rates run from about $1.80 per user at 25–50 seats to about $3.15 per user for the Enterprise tier, with volume-based discounts and pay-as-you-go options for one-time campaigns. Four tiers (Essentials, Plus, 360, Enterprise) cover progressively more simulation channels, and Compliance 360, Agentic AI and Incident Responder are optional add-ons. Organizations under 50 employees are asked to contact Keepnet for custom pricing, and there is no self-serve checkout.
How long does implementation take?
Keepnet is a cloud platform hosted on Microsoft Azure with SSO/SAML, SCIM-based user provisioning for 50+ identity solutions and REST APIs, so most work is configuration rather than deployment. Customer evidence shows large rollouts, such as a hospitality group scaled to roughly 32,000 employees, that mainly involved replacing manual user imports with automated workflows. A first simulation campaign can typically be live within a few weeks; no vendor-published implementation timeline or mandatory professional services fee is stated.
Which certifications and compliance standards does Keepnet hold?
The vendor states SOC 2 Type II compliance and ISO 27001, ISO 27017, ISO 27018 and ISO 42001:2023 certifications, with the platform hosted on Microsoft Azure in the EU, UK, US and UAE. Compliance 360 supports role-based regulatory training, and the platform is positioned to help customers evidence requirements such as GDPR, PCI, SOX and industry frameworks. Buyers should request the current audit reports and the sub-processor list before signing, since certification scope and hosting regions differ by contract.
Does Keepnet use customer data to train AI models?
No. The privacy policy states that customer data — the content customers and their users submit to the service — is used only to provide the service and resolve reported issues, and is not used to train artificial intelligence or machine learning models, whether Keepnet's own or a third party's. Providers such as AI assistants and support platforms act as sub-processors and are contractually prohibited from doing so. Data obtained through Google Workspace APIs is likewise excluded from AI or machine learning training.
What integrations does Keepnet support?
Built-in integrations cover email clients and gateways (Outlook Desktop, Microsoft 365, Google Workspace, Microsoft Exchange), identity and user management (Okta SCIM, Microsoft Azure AD, OneLogin, Ping Identity, Active Directory), threat detection services (VirusTotal, IBM X-Force, VMRay, Forti Sandbox), CRMs (Salesforce, HubSpot, Pipedrive), SIEM/SOAR platforms (Splunk, IBM QRadar, ArcSight, Cortex XSOAR, IBM Resilient) and email providers including Amazon SES and custom SMTP. The vendor reports 20+ integrations used for automated phishing response.
Can we buy only the phishing simulator without the training library?
Yes. Keepnet states that every product can be purchased on its own — for example only the Phishing Simulator, Vishing Simulator or Smishing Simulator — without buying the security awareness training library, which is how many teams start when training is already handled internally or by another vendor. Pricing is based on the number of employees, so there is no single list price for a standalone product; you provide headcount and required products and receive a quote. Deepfake simulation is included in the awareness packages rather than sold separately.