Praxis Navigator + KnowBe4: Measure What Training Changes

KnowBe4 is the world's largest security awareness training platform, delivering content, phishing simulations and human risk scoring to organizations worldwide. Praxis Navigator adds a different layer: independent, read-only evidence of whether employees' real-world security behavior is actually changing. This page shows what KnowBe4's reporting can tell you, what it can't, and how the two combine to produce the behavioral evidence NIS2, DORA and GDPR now ask for.

KnowBe4: The Industry Standard in Security Awareness Training

KnowBe4 is the most widely deployed security awareness training platform in the world, trusted by over 70,000 organizations. Founded by Stu Sjouwerman, it is consistently ranked a Leader in G2's Grid Report for Security Awareness Training.

Source: KnowBe4 (company site and G2 Grid Report) · Verified July 2026

What KnowBe4 delivers:

Massive content library — Thousands of training modules across security awareness, compliance, and social engineering topics, available in 35+ languages
Simulated phishing — Customizable phishing campaigns that test employee responses to realistic attack scenarios
HRM+ platform — KnowBe4's expanded Human Risk Management suite, including AI Defense Agents, real-time coaching, and cloud email security
Compliance training — Modules mapped to regulatory frameworks including GDPR, HIPAA, PCI-DSS, and SOX
User risk scoring — Individual risk scores based on training completion, phishing test results, and security awareness assessments
Reporting — Dashboards tracking training progress, phishing susceptibility trends, and program participation

KnowBe4 is particularly well-suited for organizations that need comprehensive training content, phishing simulation at scale, and a mature platform backed by a global support infrastructure.

What KnowBe4's reporting can't show

Here's the challenge every organization running KnowBe4 eventually faces:

KnowBe4's reporting shows:

Who completed their training modules
Who clicked on a simulated phishing email
Phishing susceptibility percentages over time
Training participation rates by department
Individual user risk scores based on platform activity

KnowBe4's reporting can't show:

Whether employees are actually handling real emails more securely
How file sharing behaviors have changed since training started
Whether MFA adoption is improving or declining across the organization
What security behaviors look like across Exchange Online, SharePoint, OneDrive, and Teams — day by day
Whether the training investment is producing measurable behavioral change in the real work environment

KnowBe4's own evolution toward Human Risk Management signals that the industry recognizes this gap. Training metrics and simulated phishing results measure platform activity — what employees do inside the training environment. They can't measure what employees do after they close the training module and go back to work.

That gap between "training completed" and "behavior changed" is exactly what Praxis Navigator was built to close. See the difference between activity metrics and behavioral evidence.

Peer-reviewed field research

29–55%

of the variation in phishing susceptibility is attributable to organizational-level factors, not individual ones.

Measured across 83,269 employees in 510 organizations, using their real responses to phishing campaigns.

Petrič, G., & Roer, K. (2022). The impact of formal and informal organizational norms on susceptibility to phishing. Telematics and Informatics, 67, 101766. Licensed under CC BY 4.0.

Read the research

What KnowBe4 reports — and what NIS2, GDPR and DORA still ask for

KnowBe4's reporting is strong evidence that a training program ran. The effectiveness regimes ask a narrower, harder question: did it work? That is a different measurement, taken from a different place.

What KnowBe4 reports — and what NIS2, GDPR and DORA still ask for
What your reports show	What the regulation asks for	What closes the gap
Training completion rates and simulated-phishing click rates	NIS2 CIR Annex §8.1.3 — awareness and training programs must be assessed for effectiveness, not simply delivered	Behavioral evidence of whether real-world security behavior actually changed
Individual user risk scores calculated from training-platform activity	GDPR Art 32(1)(d) — a process for regularly testing, assessing and evaluating the effectiveness of security measures	An organizational behavioral baseline and trend, independent of the training platform
Phishing susceptibility percentages tracked inside KnowBe4	NIS2 CIR Annex §7 — the effectiveness of risk-management measures, technical and organizational, must be evaluated	Before-and-after behavioral comparison across the workforce, read from Microsoft 365

KnowBe4's reporting shows the program ran. The clause asks whether it worked — and that is a different measurement, taken from a different place.

See what NIS2 asks you to evidence

How Praxis Navigator measures it instead

Praxis Navigator connects to your Microsoft 365 environment via the Graph API and monitors actual employee security behaviors across five data sources: Exchange Online, SharePoint, OneDrive, Teams, and Entra ID. Instead of measuring what employees learned, Praxis Navigator measures what employees do.

Behavioral baselines — how employees handle security before any intervention, calculated from historic Microsoft 365 data available from day one
20+ behavior indicators — real security behaviors across email, file sharing, collaboration, and identity management
Intervention tagging — tag when you roll out a KnowBe4 campaign, policy change, or any other intervention
Before/after comparison — automatic behavioral comparison showing whether each intervention produced measurable change
Security culture scoring — quantified culture maturity metrics based on the Security Culture Framework adopted by ENISA
Stakeholder reports — board-ready evidence that your security investments are working. See how Impact Proof turns this into board-ready evidence

Setup takes 15 minutes. No agents, no endpoint software, no data export. You see historic behavioral data from day one — no waiting months to build a baseline.

How KnowBe4 and Praxis Navigator work together

Baseline — Connect Praxis Navigator to Microsoft 365 and see your current behavioral baseline.

Train — Roll out a KnowBe4 training campaign or phishing simulation.

Tag — Tag the KnowBe4 campaign as an intervention in Praxis Navigator.

Compare — See automatic before/during/after behavioral comparison.

Prove — Generate stakeholder reports showing whether the training produced measurable behavior change.

Want to see the numbers first? Calculate your security training ROI — free, no email required.

Feature comparison

How KnowBe4 and Praxis Navigator divide the work
Capability	KnowBe4	Praxis Navigator	Together
Security awareness training content	Yes	—	KnowBe4 delivers training
Simulated phishing campaigns	Yes	—	KnowBe4 tests phishing recognition
Real-time coaching (HRM+)	Yes	—	KnowBe4 nudges in the moment
Compliance training modules	Yes	—	KnowBe4 covers regulatory awareness topics
Training completion tracking	Yes	—	KnowBe4 tracks participation
User risk scoring (platform-based)	Yes	—	KnowBe4 scores based on training activity
Microsoft 365 behavior monitoring	—	Yes	Praxis measures real daily behavior
Behavioral baseline from historic data	—	Yes	Praxis provides an instant baseline
Intervention impact measurement	—	Yes	Praxis proves what worked
Published pricing, self-serve signup	—	Yes	Praxis is buyable without a sales call
Dedicated environment per customer	—	Yes — dedicated Azure	No pooled tenant data
Evidence independent of the training platform	No	Yes	Measurement that survives a vendor change
Setup time	Hours to days	15 minutes	Both operational quickly

KnowBe4 is a training and simulation platform; Praxis Navigator is a behavior monitoring platform. They serve different functions in a security program.

Pricing you can see

Our prices are published. Use the calculator, see your number, start a trial — no sales call, no qualification, no quote request. Most platforms in this category will not tell you the price without a meeting first.

See the price

Questions security leaders ask

Is Praxis Navigator a replacement for KnowBe4?

No. Praxis Navigator does not deliver security awareness training, phishing simulations, or compliance content. It monitors actual employee security behaviors in Microsoft 365. Organizations use Praxis Navigator alongside KnowBe4 to measure whether training is producing real behavioral change — turning KnowBe4's training metrics into behavioral evidence.

We already have KnowBe4's user risk scoring. Why do we need Praxis Navigator?

KnowBe4's risk scores are based on training platform activity — training completions, phishing test results, and awareness assessments. Praxis Navigator measures something different: how employees actually behave in Microsoft 365 day-to-day. An employee can score well on KnowBe4's assessments but still share files insecurely or ignore MFA prompts. Praxis Navigator reveals what's happening in the real work environment, not the training environment.

Does KnowBe4's HRM+ platform already do what Praxis Navigator does?

KnowBe4's HRM+ expands into real-time coaching, cloud email security, and AI Defense Agents — broadening beyond traditional training. However, HRM+ is built around KnowBe4's own ecosystem of signals (training data, phishing results, email gateway events). Praxis Navigator takes a different approach: monitoring behavioral patterns across the full Microsoft 365 environment (Exchange Online, SharePoint, OneDrive, Teams, Entra ID) through the Graph API, independent of any training platform. The two provide different lenses on the same workforce. HRM+ signals originate in KnowBe4's ecosystem, which is exactly why they cannot serve as independent evidence of KnowBe4's own effectiveness.

Does completing KnowBe4 training satisfy NIS2's requirement to assess training effectiveness?

Not on its own. NIS2's implementing regulation (CIR (EU) 2024/2690, Annex §8.1.3) requires that awareness and training measures be assessed for effectiveness, not simply delivered and completed. KnowBe4's completion records and phishing-simulation results show that the training ran; they do not show whether employees behave differently afterwards in their day-to-day work. Praxis Navigator reads that behavioral evidence from Microsoft 365, independent of the training platform.

How does Praxis Navigator get behavioral data?

Praxis Navigator connects to Microsoft 365 via the Graph API with read-only access. It monitors security-relevant behaviors across Exchange Online, SharePoint, OneDrive, Teams, and Entra ID. No data is exported or stored outside your environment — Praxis uses a zero-storage architecture for maximum data privacy.

How quickly can I see results?

Within 15 minutes of connecting your Microsoft 365 tenant, you'll see your first Employee Pulse with behavioral data. Because Microsoft retains historic activity data, you get a behavioral baseline from day one — no need to wait weeks or months to start measuring.

Does Praxis Navigator work with other training platforms besides KnowBe4?

Yes. Praxis Navigator is training-platform agnostic. It works alongside any SAT solution because it measures behaviors in Microsoft 365, not in the training platform itself. You can tag interventions from any source — KnowBe4 campaigns, MetaCompliance modules, Proofpoint training, internal policy changes, or anything else — and measure the behavioral impact.

Who built Praxis Navigator?

Praxis Navigator is built by Praxis Security Labs, founded by Kai Roer. Roer is the author of Build a Security Culture and co-author of The Security Culture Playbook (Wiley). He created the Security Culture Framework, which has been adopted by ENISA and is used by organizations worldwide to measure and improve security culture.

Already using KnowBe4?

Connect Praxis Navigator to your Microsoft 365 in 15 minutes and see whether your KnowBe4 investment is actually changing employee behavior.

Start your free 30-day trial

No credit card. No commitment. Results in 15 minutes, or don't continue.

See the price — published, no sales call required.

Read what NIS2 requires — training must be assessed for effectiveness, not just delivered.

Related comparisons

Praxis Navigator + MetaCompliance

European awareness and compliance platform, now including Junglemap. See how independent behavioral evidence works alongside it.

Praxis Navigator + Proofpoint

Enterprise email security and ZenGuide training. See what behavioral evidence adds between the threats.

Junglemap is now part of MetaCompliance

If a training platform in your stack is migrating, this is the moment to establish a behavioral baseline you keep.

Compare every platform category

See what each kind of platform measures, and what none of them measure, in one place.