Cohort 1 · SAT-led legacy

Verified 2026-05-19 · Decays 2027-11-19

Three buyers. Three decks.

Security Leader

The Security Leader

A clear view of whether risk is going up or down — not a Phish-prone Percentage and a stack of training-completion certificates.

Proof

HRI dashboard with Human Resilience Score — drillable from org to department to individual. Three live signals: what people actually do, what threats are targeting the organisation right now, and who each person is. Mapped to NIS2, ISO 27001 A.6.3, DORA. Beyond KSAT's training records and click rates.

Security Builder

The Security Builder

Cross-system signal carried into the SOC stack — not platform-bound click data.

Proof

Sixteen MITRE-aligned risk categories. SCIM 2.0 with risk-attribute reverse-sync into Entra and Okta. Signal Bus into Sentinel, Splunk, Cortex XSOAR. KnowBe4 has SCIM, but not the reverse-sync that makes the IdP risk-aware.

Head of IT

The Head of IT

The inherited program off their plate — not another quarterly campaign cycle to chase.

Proof

Repeat-clicker chase automated. Intervention fires from policy. Board pack assembles overnight. KnowBe4 may be 'the one the auditor accepts', but a Head of IT still administers it weekly.

Pick one before you dial. Don't mix scripts on a multi-stakeholder call.