KnowBe4 unveils AI tool for autonomous phishing training

KnowBe4 has launched AIDA Orchestration, an autonomous system that runs phishing security tests and security awareness training programmes for individual employees.

The product is part of KnowBe4's AIDA line, short for Artificial Intelligence Defence Agents, and is the eighth agent in the suite. KnowBe4 said AIDA Orchestration creates, schedules and manages personalised phishing simulations and training without manual campaign setup.

Security and risk teams use phishing tests and awareness training to reduce successful email attacks and improve reporting rates. These programmes typically rely on fixed schedules and segmented user groups. KnowBe4 is positioning AIDA Orchestration as a move away from group-based activity towards continuous, adaptive testing and training based on user behaviour.

KnowBe4 said the agent cuts the time needed to set up personalised training from hours to seconds, reducing administrative workload for security teams and changing how training is delivered across an organisation.

Personalised training

AIDA Orchestration runs phishing security tests and training at a "user level", according to KnowBe4. It uses each employee's risk profile and performance data to adjust the content they receive. KnowBe4 said the system monitors engagement and changes its approach without human intervention.

AIDA Orchestration is designed to work within a broader set of tools, drawing on other AIDA agents such as Template Generation and Remedial Training. KnowBe4 described this as an "ecosystem integration" model in which agents share context and data.

KnowBe4 is also offering an administrative framework it calls "Plans", which set constraints for defined user groups. The agent then runs day-to-day training and testing within those guardrails.

AI threat context

KnowBe4 linked the launch to rising concern about AI-driven attacks. Its State of Human Risk Report 2025 found cybersecurity leaders rank AI-powered threats as their top security risk, with 45% citing constantly evolving AI threats as their greatest challenge.

KnowBe4 said AI tools are changing phishing and social engineering by removing traditional warning signs, producing realistic language at scale, and tailoring messages to specific roles, industries and individuals.

That backdrop has increased attention on training models that adapt more frequently than periodic campaigns. Vendors have been adding automation and user-based risk scoring to traditional awareness platforms. KnowBe4 is framing AIDA Orchestration as a fully autonomous approach, with humans providing oversight through policy and constraints rather than direct management of each campaign.

"The launch of AIDA Orchestration represents a fundamental shift in how organisations approach human risk," said Bryan Palma, CEO of KnowBe4.

"By moving from static, one-size-fits-all campaigns to an always-on, autonomous system, we are enabling security teams to deliver the right training at the right time. This saves hours of administrative work and reduces organisational risk by treating every employee as an individual with unique security needs," Palma said.

KnowBe4 said this year marks 10 years since the beta version of AIDA. It said it now has eight specialised agents available on the market and is expanding its focus beyond employees to include "agentic AI" risk.

An existing user also provided feedback in the launch announcement. "AIDA Orchestration is a game changer and time saver!" said an anonymous customer.

KnowBe4 said AIDA Orchestration is available as part of its AIDA suite of AI agents for human risk management, with organisations managing deployment through plan-based controls and ongoing monitoring of user performance.