KnowBe4

Overview

KnowBe4 is a security awareness training (SAT) platform: simulated phishing campaigns, training campaigns, and per-user risk scoring. The Bumblebee integration wraps KnowBe4's Reporting API, which is entirely read-only — Bumblebee can report on training progress, phishing test results, and risk scores, but cannot change anything in your KnowBe4 console. This integration is currently a research preview.

Typical questions Bumblebee can answer with this integration:

• "What's the completion percentage of our Q2 security training campaign?"
• "Which users haven't finished their assigned training?"
• "Who clicked in the last phishing security test?"
• "How has this client's risk score trended over the last six months?"

Prerequisites & Setup

Before setting up the KnowBe4 integration, you need:

• A KnowBe4 account with a Platinum, Diamond, SAT Foundations, or SAT Advanced subscription (required for API access)
• Admin access to Account Settings in the KnowBe4 console

Generate a Reporting API Key

1. Sign in to your KnowBe4 console (e.g. training.knowbe4.com)
2. Click your email address in the top-right corner and select Account Settings
3. Open the API section (Account Integrations → API)
4. Under Reporting API, enable API access and generate a new key
5. Copy the key immediately

Important: KnowBe4 has two APIs with separate keys. Generate a Reporting API key — a User Event API key will not work for this integration.

Vendor documentation: Reporting API Overview

Identify Your Region

The API base URL depends on where your KnowBe4 account is hosted. Match your console URL to a region:

Console URL	Region
training.knowbe4.com	us
eu.knowbe4.com	eu
ca.knowbe4.com	ca
uk.knowbe4.com	uk
de.knowbe4.com	de

Configure in Bumblebee

1. Go to the Integrations page in Bumblebee
2. Select KnowBe4
3. Paste your Reporting API Key
4. Enter your Region (defaults to us if left blank)
5. Save the configuration and run a test request (e.g. get account) from the validation card

Available Tools

All tools are read-only. List tools support pagination (per_page up to 500, cursor-based).

Tool	Description
get_account	Account and subscription data, current risk score
get_risk_score_history	Risk score history for the account, a user, or a group
list_users / get_user	Users with phish-prone percentage and risk scores
list_groups / get_group / list_group_members	Groups and their membership
list_phishing_campaigns / get_phishing_campaign	Phishing campaigns
list_phishing_security_tests / get_phishing_security_test	Phishing security tests (PSTs) with delivered/opened/clicked/reported counts
list_phishing_security_test_recipients	Per-recipient phishing test results
list_training_campaigns / get_training_campaign	Training campaigns with completion percentage
list_training_enrollments	Per-user training enrollment status (the core training-progress tool)
list_training_store_purchases	Purchased training content
list_training_policies	Uploaded policies for policy-acknowledgement training

API Limits

KnowBe4's Reporting API allows 2,000 requests per day (plus your licensed user count), 4 requests per second, and a burst limit of 50 requests per minute.

Note: Accounts with anonymization enabled return no user-level data through the API.