KnowBe4, Microsoft partner to enhance email security with AI

KnowBe4 has announced a strategic integration with Microsoft, aimed at improving email security for organisations using Microsoft 365.

The announcement details that KnowBe4 Defend will work alongside Microsoft Defender for Office 365, specifically integrating with its quarantine functionality. This collaboration is part of Microsoft's Integrated Cloud Email Security (ICES) initiative, and it marks the first such partnership in the programme, establishing a new approach for security vendors to work together.

Integrated strategy

According to KnowBe4, the Defend platform is designed to complement Microsoft 365's existing protections by introducing agentic AI methods for advanced inbound threat detection. The integration is intended to allow organisations to retain their investment in Microsoft's security tools while benefiting from an additional, purpose-built layer of threat identification and response.

"This new collaboration is driving meaningful innovation in cybersecurity. By combining Microsoft's email and collaboration security infrastructure with KnowBe4's leadership in human risk management and robust threat detection capabilities, organizations can now capitalize on a truly integrated defense strategy that benefits from the unique strengths of both platforms. We look forward to offering this to our global customers to help them enhance their security efforts," said Stuart Clark, VP of Product Strategy, KnowBe4.

Detection and response

The integration creates multiple concurrent layers of analysis, which KnowBe4 states will increase the likelihood of detecting and preventing threats from reaching end users. The combined capability draws on Microsoft Defender for Office 365's quarantine processes and KnowBe4 Defend's AI-based detection mechanisms. The set-up is intended to support existing investments in Microsoft security while enhancing the breadth and depth of threat analysis.

Beyond improving threat identification at the point of entry, the combined platforms provide unified Security Operations Centre (SOC) tools. These are designed to speed up incident investigation, support root cause analysis and enable tactical responses, ultimately offering organisations greater visibility and control over email threats targeting their workforce.

Focus on human risk management

KnowBe4 positions itself as focused on human risk management in the cybersecurity sector. The company states it supports organisations in strengthening their security cultures and managing risks associated with human behaviour. Its AI-driven Human Risk Management platform includes modules for training, compliance, real-time coaching, crowdsourced anti-phishing, and AI-based defence agents, all aimed at empowering employees to make better security decisions.

The company claims to be working with over 70,000 organisations globally, delivering a suite of security tools designed to adapt and respond to evolving cybersecurity threats. The HRM+ platform aims to transform end users into effective components of an organisation's overall security posture through education and active participation in identifying threats.

The ICES ecosystem

The strategic partnership with Microsoft places KnowBe4 as the first vendor to join Microsoft's ICES vendor ecosystem, which seeks to foster collaborations with select security firms. The ICES programme is intended to offer Microsoft 365 customers a broader set of defence capabilities by encouraging interoperability between Microsoft's platforms and specialist security vendors.

With this integration, customers can continue to use Microsoft 365 and Defender for Office 365 services, while having the option to add an extra layer of AI-powered detection and response without duplicating existing resources or disrupting their operational processes.

The collaboration is expected to provide a model for future integration between Microsoft and other security companies within the ICES framework. Both companies have emphasised that the approach is focused on building collective defences to mitigate the risks posed by sophisticated email-based threats.