Keepnet

The implementation of Keepnet’s platform is designed to be streamlined, modular, and scalable, allowing organizations to deploy it quickly and efficiently. Here's a breakdown of the typical steps:

1. Initial Setup & Access

• Account provisioning: Admins receive credentials and access to the Keepnet dashboard.
• Deployment options: Choose between cloud, on-premise, or hybrid deployment models.

• Integration: Connect with identity providers (e.g., Azure AD, Okta, LDAP) and email systems (e.g., Microsoft 365, Google Workspace).

2. Configuration

• User import: Sync users via directory services or CSV upload.
• Role assignment: Define roles for HR, IT, SOC, and compliance teams.

• Language settings: Set default or user-specific languages (30+ supported, including Arabic).

3. Module Activation

• Activate relevant modules:
  • Phishing Simulator
  • Awareness Educator
  • Threat Intelligence
  • Incident Responder
  • Phishing Reporter

• Customize simulation templates and training paths.

4. Pilot Testing

• Run a pilot phishing simulation and training campaign with a small group.

• Analyze results and adjust configurations.

5. Full Rollout

• Launch full-scale simulations and training across the organization.

• Enable automated training triggers based on user behavior and risk scores.

6. Monitoring & Reporting

• Use the dashboard to monitor:
  • Click rates
  • Report rates
  • Training completion
  • Risk scores

• Generate compliance reports (e.g., GDPR, ISO 27001).

7. Ongoing Optimization

• AI adapts training paths based on user performance.

• Admins can schedule recurring simulations and refresh training content.

Implementation Timeline

• Initial setup: 1–2 days
• Configuration & integration: 2–5 days
• Pilot testing: 1 week
• Full deployment: 1–2 weeks
• Total time: Typically 2–3 weeks for full implementation, depending on organization size and complexity.

Keepnet Labs software is highly customizable to meet the unique needs of different organizations. Here are the key customization capabilities:

• Customizable Training Content:
  • Organizations can tailor training modules to reflect internal policies, industry-specific threats, and compliance requirements.

  • Includes editable micro-learnings, videos, posters, and gamified modules.

• Flexible Simulation Templates:
  • Phishing simulations can be customized by attack type (email, SMS, voice, QR, MFA, callback).

  • Templates can be localized by language, region, and employee role.

• Modular Platform Design:
  • Organizations can activate only the modules they need (e.g., Threat Intelligence, Awareness Educator, Incident Responder).

  • Supports integration with 20+ identity providers and email systems.

• Scalable Deployment:
  • Available in cloud, on-premise, or hybrid formats.

  • Suitable for SMEs, enterprises, and MSSPs.

• Custom Reporting & Dashboards:
  • Admins can configure dashboards to track KPIs relevant to HR, IT, SOC, and compliance teams.

Keepnet Labs uses a custom pricing model, and while exact figures vary, here are the known cost components:

• Setup Fees:
  • Typically included in the initial license fee.

  • No separate onboarding fee for standard deployments.

• Maintenance Costs:
  • Basic enterprise support and software upgrades are included in the license fee.

  • For customized appliances, an annual fee of 20% of the original development cost is charged for continuous upgrades.

• Support Charges:
  • Standard support is included.

  • Premium support or dedicated account management may incur additional costs depending on the service level agreement (SLA).

• Optional Add-ons:

  • AI Ally (an AI-driven learning manager) is available as an optional paid feature.

• Discounts:
  • Volume-based discounts for large organizations.
  • Pay-as-you-go options for short-term or pilot use.

Keepnet Labs provides a comprehensive onboarding and support ecosystem designed to help new users quickly adopt and maximize the platform:

Training Resources

• Interactive Documentation: Step-by-step guides for each module (Phishing Simulator, Awareness Educator, Threat Intelligence, etc.).
• Tutorials & Articles: Covering setup, configuration, campaign management, and reporting.
• Security Awareness Training Program:
  • Personalized sessions based on employee risk profiles.
  • Includes gamified modules, nudges, and micro-learnings.
  • Covers phishing, malware, social engineering, and compliance topics.

Support Services

• Self-Service Portal: Access to troubleshooting guides and FAQs.
• Customer Help Desk: Available for technical issues and onboarding support.
• Dedicated Account Managers: For enterprise clients.
• Live Demos & Webinars: Offered during onboarding and periodically for updates.
• Multilingual Support: Available in 30+ languages, including Arabic, French, and Turkish.

Team-Specific Training

• Tailored for HR, IT, SOC, and compliance teams to manage risk and run simulations effectively.

Keepnet Labs employs industry-leading security protocols to protect customer data and ensure platform integrity:

Technical Safeguards

• TLS Encryption: Secures data in transit.
• DNSSEC & Bot Protection: Prevents spoofing and automated attacks.
• Web Application Firewall (WAF): Filters malicious traffic.

• Dedicated IPs & Domains: Used for phishing simulations to ensure ethical testing.

Compliance & Certifications

• ISO 27001: Information Security Management System.
• ISO 27017: Cloud security controls.
• ISO 27018: Protection of personal data in the cloud.

• ISO 42001:2023: AI management and transparency.

Operational Security

• Verified Domain Usage: Phishing campaigns can only be run on verified domains.
• Threat Intelligence Integration: Real-time updates to block malicious domains and IPs.

• Simulation Transparency: Email headers and landing pages include markers to identify simulated phishing.

Legal & Privacy Compliance

• Aligns with GDPR, HIPAA, CCPA, and other global data protection laws.

Keepnet Labs follows a structured and regular update schedule to ensure platform security, stability, and feature enhancements:

Update Frequency

• Weekly scheduled maintenance:
  • Most modules (e.g., Phishing Simulator, Awareness Educator, Smishing, Vishing, Quishing, Callback Simulator) are updated every Saturday from 4:00–6:00 GMT.
  • Other modules like Email Threat Simulator, Threat Intelligence, and Incident Responder are updated every Tuesday from 18:00–20:00 GMT.
• General platform maintenance occurs Saturdays from 6:00–8:00 GMT.

Update Management

• Updates are automated and managed centrally by Keepnet’s engineering team.
• During maintenance windows, there may be brief service interruptions, which are communicated in advance.
• Updates include:
  • Security patches
  • Feature enhancements
  • Bug fixes

  • New phishing templates and training content

AI-Driven Update Awareness

• Keepnet also educates users on the importance of timely updates through its Awareness Educator module.
• This helps reduce risks from unpatched systems, which are a major cause of ransomware attacks.

Keepnet Labs maintains a transparent and customer-centric data policy:

Data Ownership

• Customers retain full ownership of their data.

• Keepnet acts as a data processor, not a data owner, in compliance with GDPR, CCPA, and other global privacy laws.

Data Portability

• Customers can export their data at any time, including:
  • User activity logs
  • Simulation results
  • Training progress
  • Risk scores and reports

• Data is exportable in standard formats (e.g., CSV, PDF) for integration with SIEMs, HR systems, or compliance tools.

Data Protection Measures

• TLS encryption, DNSSEC, WAF, and bot protection are used to secure data in transit and at rest.
• Keepnet complies with ISO 27001, ISO 27017, ISO 27018, and ISO 42001:2023, ensuring best practices in data security and AI governance.

Keepnet Labs offers flexible scalability to accommodate organizations of all sizes and evolving needs:

Scalability Features

• Elastic Infrastructure: Supports millions of emails, SMS, and calls per day for phishing simulations.
• Modular Licensing: Organizations can activate or deactivate modules (e.g., Phishing Simulator, Awareness Educator) based on current needs.
• Seat Reassignment: Allows reassignment of user licenses when employees leave or change roles—no prior approval needed.
• No Hard Limits: Concurrent calls, emails, and training sessions scale automatically with demand.
• Cloud CDN (AWS CloudFront): Ensures low-latency, high-speed delivery of training content globally.

This makes it easy to scale up during onboarding or compliance cycles, and scale down during off-peak periods.

Keepnet’s contract terms are outlined in its End User License Agreement (EULA):

Renewal Terms

• Contracts automatically renew for successive one-year terms unless canceled in writing.
• Cancellation must be submitted at least 90 days before the end of the current term.

Cancellation Terms

• Early termination may be subject to fees depending on the agreement.
• Customers retain access to their data and can export it before termination.
• Customized appliances may incur a 20% annual upgrade fee if maintained post-cancellation.

Support & Services

• Basic enterprise support is included.
• Additional services (e.g., managed support, training) are available via Platinum Partners.

Keepnet Labs adheres to internationally recognized compliance standards to ensure data security and operational transparency:

Certifications

• ISO 27001: Information Security Management
• ISO 27017: Cloud Security Controls
• ISO 27018: Protection of Personal Data in the Cloud

• ISO 42001:2023: AI Management and Governance

Regulatory Compliance

• GDPR (EU)
• HIPAA (US healthcare)
• CCPA (California)
• PCI DSS (Payment Card Industry)

• NIST & ISO 27002 frameworks for security awareness

These standards ensure that Keepnet’s platform is suitable for use in regulated industries like finance, healthcare, and government.