marketing automation
Business Wire
Published on : Mar 20, 2026
Cybersecurity has long treated employees as the weakest link—but also the hardest to scale. Now, KnowBe4 is betting that AI agents can finally fix that imbalance.
The company has introduced AIDA Orchestration, a new autonomous agent within its Artificial Intelligence Defence Agents (AIDA) suite, designed to automate and personalize phishing simulations and security awareness training at the individual level.
It’s a notable shift away from static, one-size-fits-all campaigns toward continuous, adaptive human risk management.
Traditional security awareness programs typically run on scheduled campaigns—quarterly phishing tests, annual training modules, and broad user segmentation.
The problem? Threats don’t operate on schedules, and neither do users.
AIDA Orchestration replaces that model with an always-on system that continuously assesses individual risk and dynamically adjusts training. Instead of grouping employees into broad categories, the platform tailors phishing simulations and learning paths based on real-time behavior.
That means a user who repeatedly clicks suspicious links might receive more frequent, targeted interventions, while lower-risk users are trained differently.
One of the biggest selling points is operational efficiency.
Security teams often spend hours designing campaigns, segmenting users, and scheduling training. AIDA Orchestration automates those workflows entirely—generating, deploying, and managing programs in seconds rather than hours.
The system operates autonomously but within defined “Plans,” allowing administrators to set high-level policies and guardrails while the AI handles execution.
That balance—automation with oversight—is becoming a recurring theme in enterprise AI deployments.
AIDA Orchestration doesn’t operate in isolation. It connects with other agents in KnowBe4’s AIDA suite, including those focused on phishing template generation and remedial training.
Together, they form a coordinated system designed to:
Simulate increasingly sophisticated phishing attacks
Deliver targeted remediation based on user behavior
Continuously refine training strategies using real-time data
The goal is to create a feedback loop where training evolves alongside both user performance and emerging threats.
The timing of this launch is no coincidence.
According to KnowBe4’s own research, nearly half of cybersecurity leaders now rank AI-powered threats as their top concern. Generative AI has made it easier for attackers to craft highly convincing, personalized phishing messages at scale—removing many of the traditional red flags users relied on.
That escalation is forcing organizations to rethink human risk management. Static training programs can’t keep pace with dynamic, AI-driven threats.
By introducing continuous, adaptive training, KnowBe4 is aligning its platform with how modern attacks actually behave.
KnowBe4 has long been a leader in security awareness training, competing with platforms like Proofpoint and Cofense.
What sets this launch apart is the move toward agentic AI.
While many vendors incorporate AI into content generation or analytics, KnowBe4 is pushing toward autonomous systems that manage entire workflows—from simulation to remediation—without human intervention.
That’s a more ambitious vision, and one that reflects a broader shift in cybersecurity tooling toward automation at scale.
KnowBe4’s framing of “human risk management” is also evolving.
Rather than treating training as a compliance requirement, the company is positioning it as a continuous system—one that integrates data, behavior, and AI to reduce risk over time.
In that sense, AIDA Orchestration is less about training delivery and more about risk optimization.
AIDA Orchestration signals a turning point in how organizations approach the human side of cybersecurity.
By automating personalized training and making it continuous, KnowBe4 is attempting to close the gap between rapidly evolving AI threats and slower, manual defense strategies.
If it works as advertised, the result could be fewer successful phishing attacks—and a lot less manual effort for already stretched security teams.
Get in touch with our MarTech Experts.