Frame Security, Immersive, Jericho Security and KnowBe4

About Immersive

Immersive sells Immersive One, which tests how people, AI-enabled workflows, security teams, and agents perform under pressure. Immersive One turns AI-era cyber readiness into evidence. Immersive One shows where risk is changing and where capability must improve. The Immersive One Platform provides realistic simulations and hands-on cybersecurity labs to evaluate individual and team capabilities across the entire workforce. Immersive One Cyber Drills recreate real incidents across people, process, and technology. Immersive unifies labs, ranges, simulations, agent harnesses and reporting in a loop that runs continuously: Prove, Improve, Benchmark, Report. Access to Immersive One capabilities is determined by the customer’s agreed scope and deployment model.^[3][4][5]

Immersive supports creating, tailoring and routing practical learning experiences that build cyber and AI readiness. Immersive provides realistic scenarios for rehearsing technical, operational, workforce, supply-chain, and crisis response. Immersive validates safe AI adoption, AI-assisted development, AI red-team activity, and agent behavior before production use. Immersive turns activity, assessment, pathway, and exercise evidence into readiness insight for teams. Immersive uses live-fire environments to test people, workflows and agents against real adversary behavior. Every run is scored against the customer's peers, the customer's history, and a baseline of humans versus agents. Immersive generates evidence from the same system that ran the test.^[5][7]

A hands-on cybersecurity lab from Immersive is a browser-based environment where an individual completes a real security task against live systems and tooling. Immersive supports self-paced journeys for SOC, AppSec, CloudSec, AI, OT, OffSec, and wider workforce roles. The Immersive threat research team publishes hands-on content in response to emerging vulnerabilities and active campaigns. Immersive lets customers build and customize practical labs around proprietary code, emerging threats, and organization-specific security requirements. Immersive trains technical and non-technical teams to identify AI-specific risks and practice secure use and secure build workflows. Immersive lets customers test configurable AI analyst archetypes against realistic SIEM data and security workflows before allowing them to operate in production environments.^[6][7]

A cyber range is a virtual environment designed to simulate real-world cyber threats, allowing individuals and teams to practice cybersecurity skills, test defenses, and improve incident response. A Cyber Drill exercise is a simulated cyber attack that tests an organization's ability to detect, respond to, and recover from threats. Cyber Range Exercises and Dynamic Threat Range are typically run with technical and SOC teams, and Cyber Drills extend to business functions such as legal and comms. Offensive AI Ranges and Developer AI Ranges benchmark model performance against attack scenarios and MITRE ATT&CK/ATLAS coverage, and validate whether AI-assisted development introduces security risk.^[7]

Immersive exercises people through scenarios in which they interact with AI threat actors and dynamic social, chat, and video feeds. Immersive builds realistic crisis simulations around an organization using its systems, playbooks, risks, and threats. Business risk exercising is the practice of measuring and reducing the risk an organization's people introduce. Immersive uses practical exercising and capability validation to help expose supply chain risk.^[8]

Immersive offers a Resilience Score that quantifies an organization's ability to detect, respond to, and recover from cyber threats. Immersive's Resilience Score combines nine measured factors into a single value benchmarked against industry peers. Immersive measures workforce capability against the NIST NICE framework. Immersive maps defensive capabilities against real-world adversary tactics across the MITRE ATT&CK framework.^[3][6][9]

A Resilience Pathway from Immersive is a structured, role-based development journey that maps an individual's or team's current capability to the skills a role requires. Custom Goals let customers define organization-specific capability targets. AI Knowledge Pass validates a person's AI-related knowledge before they're granted access to AI tools.^[10]

Immersive AppSec brings together practical labs and dynamic range exercises that embed security into developer workflows. Developers use labs and interactive range exercises to demonstrate practical skills in identifying and mitigating vulnerabilities. Immersive hands-on cyber labs simulate threats across offensive, defensive, and application security domains. Immersive offers content that helps workforces prepare for Operational Technology (OT)-related attacks. Immersive One includes Red and Blue Team labs, secure coding, cloud security, and more. Immersive delivers its hands-on cybersecurity training, team exercises, and cyber drills in a single Enterprise platform.^{[2][4][5][6][7][9][10][11][12][13]}

About Jericho Security

Jericho Security sells a cybersecurity awareness training platform and phishing simulations for employees. Jericho Security is designed to protect against email, SMS and deepfake threats. Jericho Security says its platform learns about a business and uses generative AI to create simulations. Jericho Security's single platform tests across internal roles and external vendors and surfaces dark web data. Jericho Security's training platform escalates difficulty, tailors content and rewards users.^[1][2][3][4]

Jericho Security's phishing simulator is used to build and launch custom simulated phishing emails through multiple-choice selections. Phishing simulations from Jericho Security include conversational phishing and deepfake phishing simulation scenarios. Recipients in the phishing email simulator can be individuals, groups or whole contact lists. Attack types in the phishing simulator include clicking a link, opening an attachment or entering personal information. Pretexts in the phishing simulator include LinkedIn requests, urgent proposals and gift card offers. After a campaign, the phishing simulator shows metrics such as email opens, clicks and form submissions. When an employee clicks a link or submits information in a simulated phishing email, Jericho Security can redirect that employee to targeted training content. Jericho Security describes a deepfake phishing simulation as one that uses AI-generated audio or video to impersonate a trusted person, such as a CEO or manager.^[3]

Jericho Security's cybersecurity dashboard is used to create and run phishing simulations, deliver custom training and monitor employee performance. Campaigns in the dashboard can be created from templates or built as dynamic emails from scratch. Jericho Security's platform supports the generation of cybersecurity risk assessment reports. The training library in the dashboard features cybersecurity topics including deepfakes, social engineering and mobile security. Employees can be added to the dashboard, grouped by categories and assigned targeted training based on their roles or previous performance in security assessments. Jericho Security provides analytics on open rates, click rates, fail rates and report rates for each employee or department. After reviewing the data, custom cybersecurity training can be assigned to employees who need extra help.^[1][5]

Jericho Security delivers custom video content within 72 hours. Jericho Security's custom training covers threats including phishing, malware, social engineering and ransomware. Jericho Security's training modules are video-based. Employees can access Jericho Security's training modules on demand. Jericho Security describes operating from a centralized hub to track, assign and resolve incidents. Jericho Security's phishing triage solution is designed to help organizations detect, prioritize and respond to phishing threats in real time. Jericho Security describes a triage solution as one that automates threat analysis, response workflows and remediation.^[7][8]

Jericho Security designs training modules after an assessment of an organization's current vulnerabilities, addressing its unique risks. Jericho Security's program continuously updates its training modules to reflect the latest attack methods. Jericho Security tracks employee progress in real time and supports personalized training modules. Jericho Security's anti-phishing training covers email spoofing, malicious attachments and fraudulent links. Jericho Security trains employees in plant operations, engineering and facilities management against scenarios attackers use to target their roles. Jericho Security maps training modules to NERC CIP, IEC 62443 and NIST 800-82 frameworks with automated compliance reporting. Jericho Security's compliance-aligned modules are described as helping organizations meet NERC CIP, IEC 62443, NIST 800-82 and DOD CMMC requirements. Jericho Security gives employees who are deceived immediate, contextual training. Jericho Security says every simulation generates behavioral data on who was deceived, how and why.^{[2][9][10][11]}

Jericho Security offers customized cybersecurity training for small businesses. Jericho Security notes that small businesses often do not have a dedicated IT team to handle cybersecurity threats. Jericho Security's small business training involves real-world simulations, such as phishing attempts, malware attacks and password security scenarios. Jericho Security offers enterprise cybersecurity training for teams facing AI-driven cyber threats. Jericho Security's centralized training platform provides consistent instruction. Jericho Security states that every organization can benefit from cybersecurity awareness training, regardless of size or industry.^{[2][5][12][13]}

Jericho Security describes tools designed for the public sector and solutions tailored to financial services. Jericho Security describes solutions for the needs of state and local governments and for the information of students and staff. Jericho Security describes security solutions for patient data and for production lines and intellectual property. Jericho Security also describes cybersecurity protection for online businesses.^{[1][5][7][10]}

About KnowBe4

KnowBe4 sells attack simulation and training, email and collaboration security, and agent security through the KnowBe4 Platform. KnowBe4 says it protects humans, and now their AI agents too. KnowBe4 says its platform uses 15 years of behavioral data against threats including social engineering, prompt injection and shadow AI. KnowBe4 says it serves more than 70,000 organizations worldwide.^[6]

KnowBe4 describes its personalized education as helping people recognize threats, followed by realistic phishing and vishing simulations. KnowBe4's AI-Native Security Awareness Training gives academic institutions a path to reducing student-driven human risk. Real-Time Coaching sends a contextual SecurityTip to reinforce secure behavior when a student clicks a suspicious link or tries to access restricted content. AIDA automates training assignments, phishing simulations, policy quizzes and knowledge refreshers based on each student's individual risk profile. KnowBe4 says its agent security is powered by AIDA, short for Artificial Intelligence Defense Agents, and a proprietary Risk Score. KnowBe4 says it offers real-time visibility, automated threat detection and active AI agent control to eliminate AI security blind spots.^[5][6]

KnowBe4 Cloud Email Security is a suite of AI-driven products designed to detect and prevent advanced email threats across inbound and outbound communication. Defend detects and blocks phishing, ransomware and business email compromise with behavioral AI and self-learning threat models, and enhances Microsoft 365's built-in security. Prevent monitors outbound email in real time and alerts users to risky behavior, such as accidental sends or misdirected emails. Protect offers policy-based email encryption and automatically enforces an organization's security policies. KnowBe4 says its layered cloud defenses spot and stop phishing, malware and social engineering attacks. KnowBe4 Cloud Email Security delivers contextual banners and prompts at the point of risk, which KnowBe4 says augment security awareness and training through real-time teachable moments.^[5][10]

Defend combines AI-powered detection, real-time user education and actionable insights to protect against phishing threats. Defend inserts color-coded banners when an inbound email is flagged, providing risk explanations and teachable feedback. Defend rewrites links and checks them at time of click. Defend detects QR codes within email to warn users of quishing attempts. Defend includes sender policy verification lookup and validation for SPF, DKIM and DMARC. Defend filters graymail to a separate folder. Defend integrates into MS Outlook apps on Windows Desktop, Mac, iOS and Android, and with MS Safelinks. The KnowBe4 Defend and Microsoft Defender for Office 365 integration delivers threat management through API-based connectivity. Defend has an API that supports integration into a SIEM/SOAR. A Microsoft Sentinel connector is available on Azure marketplace for Native Microsoft customers.^[5][11]

Prevent uses machine learning to analyze emails in real time, focusing on sender behavior, content and recipients. Prevent is integrated with Microsoft Outlook and Office 365. Prevent alerts users when they receive or attempt to interact with domains less than 50 days old. Prevent Enterprise adds misdirected content detection, custom DLP policies and integration with Microsoft Azure Information Protection (Purview). Prevent Enterprise features are customized to an organization's DLP requirements and require Professional Services to implement.^[10][12]

Compliance Plus has a training library of 1000+ items of compliance training content. Compliance Plus offers targeted training for legislative and data privacy requirements, such as HIPAA, PCI and GDPR. With Compliance Plus, organizations can incorporate their own policies and procedures into brandable modules and upload SCORM-compliant training and video content to the KnowBe4 LMS. The KnowBe4 Student Edition enables academic institutions to prepare students to identify and prevent modern cyberattacks. Student Edition training content covers phishing, BYOD risks, password hygiene, social media risks, campus scams and off-campus data security.^[5][13]

BreachSim is a free tool from KnowBe4 to identify network vulnerabilities. BreachSim tests over 12 realistic data exfiltration scenarios following the MITRE ATT&CK framework. The Weak Password Test is a free tool to help IT Administrators know which users have passwords that are easily guessed. The Weak Password Test checks the Active Directory for several types of weak password-related threats and generates a report of users with weak passwords. KnowBe4's Security Culture Benchmarking Analysis Center provides analysis of security culture benchmarking data by industry, organizational size and geographical region.^[14][15][16]

Hood College used Student Edition to see an increase in reported phishing emails and to reduce clicking on phishing campaigns. Bridgewater State University is a KnowBe4 customer. The Mido Foundation equipped young learners to recognize and respond to real-world cyber threats with KnowBe4. One customer says it selected KnowBe4 Defend and Prevent as added security layers in its Microsoft 365 environment. The KnowBe4 CSM team assists in guiding customers through onboarding tasks at no additional cost. KnowBe4 Customer Success Managers work with customers to tailor program requirements based on organizational goals, objectives and desired outcomes. KnowBe4's Customer Success Team spans the globe.^{[3][5][6][10][11][13][17]}