The KnowBe4 alternative built for Australian MSPs.

KnowBe4 documents its branding options clearly. Admins can upload a company logo that replaces KnowBe4's at the top of the Learner Experience, set a brand colour, point phishing templates and training notifications at a logo URL, and upload a custom certificate template. A subset of ModStore modules is flagged "brandable" and can carry the organisation's logo.

That's where it stops. Learners sign in on KnowBe4's own training instances - training.knowbe4.com and regional equivalents - not a domain the MSP controls. Per KnowBe4's own support article, getting a company logo insidetraining modules beyond the brandable subset is available at additional cost with a minimum of 1,000 seats. And across KnowBe4's partner page, MSP agreement and MSP standards of engagement, we found no mention of white-labeling at all.

Cyber Aware carries the MSP's own logo and domain across every touchpoint by default - portal, notification emails, phishing simulations, completion certificates and reports - with no Cyber Aware branding visible to end clients.

KnowBe4 publishes its pricing, which deserves credit in a category full of quote-only vendors. SAT Foundation lists from $2.40 per user per month and SAT Advanced from $3.75 at the 25-50 seat band, scaling down with volume - with list prices built on 3-year terms.

The MSP-specific terms are where small-client economics get tight. KnowBe4's Managed Service Provider Standards of Engagement set out two models: per-customer subscriptions, or bulk subscriptions available only to pre-approved bulk MSP partners - and bulk MSPs may only offer the top two subscription levels to their customers. Seats can't be moved between customers, seat overages must be trued up within 48 hours, and the MSP agreement auto-renews each subscription for a period equal to the prior term unless written notice lands at least 30 days before renewal, with fees that "may be subject to increase."

Cyber Aware publishes one per-seat rate with no seat minimums, no multi-year list terms and no true-up clauses - the number on the card is the number, for an 8-seat client or an 800-seat one.

KnowBe4's platform breadth is real, but it's sold in pieces. Compliance Plus (the compliance training library), SecurityCoach (real-time coaching driven by security-stack signals) and PhishER Plus (inbox triage and SOAR) are all separately priced add-ons on KnowBe4's own pricing pages - SecurityCoach additionally requires an existing SAT Advanced subscription. AIDA, the AI-agent suite KnowBe4 has built its recent marketing around, is an add-on for Diamond-level customers.

The gating extends to plumbing an MSP might assume is standard: KnowBe4's Reporting APIs are restricted to Platinum, Diamond and current SAT-tier customers, and the User Event API to Platinum and Diamond. We also found no native ConnectWise or Autotask PSA integration in KnowBe4's published integration materials - notable for a platform sold heavily through the channel.

Cyber Aware ships training, Auto Phish, branded gap assessments, reporting and API access at a single per-seat rate, so quoting a client doesn't start with a tier-and-add-on matrix.

KnowBe4's Australian presence is genuine: a Melbourne office in Southbank, a local phone line, and AUD pricing published on its own pricing page. For brand-name recognition in an enterprise boardroom, that footprint counts for something.

What's missing is Australian substance in the product. We found no Essential 8 or SMB1001 content anywhere on knowbe4.com - the Essential 8 pairings you'll see in the wild are built by Australian resellers around KnowBe4, not by KnowBe4 itself. And KnowBe4's own data-storage documentation lists instances in the US, EU, UK, Canada and Germany - no Australian region - while noting personal data is generally processed in the United States regardless of storage choice. For clients with data-sovereignty questions, that's a conversation the MSP has to have.

Cyber Aware's training and gap assessments map to Essential 8 and SMB1001 directly, so the evidence an Australian client hands an auditor is framework-specific from the first report - under the MSP's brand, not ours.