Critical October 13, 2026 - Detected by Pingoru
- Oct 13, 2026, 03:03 PM UTC
- Resolved
- Oct 13, 2026, 04:15 PM UTC
- Duration
- 1h 12m
Affected: ConsoleConsoleLearner Experience (LX)
Timeline · 3 updates
-
investigating Oct 13, 2026, 03:03 PM UTC
We are currently investigating an issue affecting console login. We will provide more updates here when available.
-
monitoring Oct 13, 2026, 03:07 PM UTC
A fix has been implemented and we are monitoring the results.
-
resolved Oct 13, 2026, 04:15 PM UTC
This incident has been resolved.
Read the full incident report →
- Detected by Pingoru
- Oct 13, 2026, 08:47 AM UTC
- Resolved
- Oct 13, 2026, 01:41 PM UTC
- Duration
- 4h 54m
Affected: Web Add-InWeb Add-In
Timeline · 3 updates
-
investigating Oct 13, 2026, 08:47 AM UTC
We have received reports that the KnowBe4 Email Security Add-in is showing the error "The add-in KnowBe4 email security is preventing this message from being sent" when sending emails. We are investigating this issue and will update this page when we have more information.
-
monitoring Oct 13, 2026, 11:07 AM UTC
We’ve implemented a fix for the Web Add-in sending errors and we’re monitoring the results to make sure no further issues occur.
-
resolved Oct 13, 2026, 01:41 PM UTC
This incident has been resolved.
Read the full incident report →
- Detected by Pingoru
- Sep 28, 2026, 09:10 PM UTC
- Resolved
- Oct 02, 2026, 10:32 AM UTC
- Duration
- 3d 13h
Affected: Mail FlowMail Flow
Timeline · 4 updates
Read the full incident report →
- Detected by Pingoru
- Sep 24, 2026, 05:53 PM UTC
- Resolved
- Sep 25, 2026, 09:16 AM UTC
- Duration
- 15h 23m
Affected: ConsoleMail FlowMail Flow
Timeline · 6 updates
-
investigating Sep 24, 2026, 05:53 PM UTC
We have identified an issue with Protect that has resulted in degraded performance, and our engineering team is looking into a fix.
-
monitoring Sep 24, 2026, 06:39 PM UTC
We have identified an issue with Protect that has resulted in degraded performance. A fix has been implemented, and we will continue to monitor this issue.
-
investigating Sep 24, 2026, 07:57 PM UTC
We have identified an issue with Protect & Prevent that has resulted in degraded performance, and our engineering team is looking into a fix.
-
monitoring Sep 24, 2026, 09:46 PM UTC
A fix has been implemented and we are monitoring the results.
-
resolved Sep 25, 2026, 09:16 AM UTC
This incident has been resolved.
-
postmortem Oct 06, 2026, 03:51 PM UTC
From Thursday, September 24, 2026, at approximately 17:07 \(UTC\), to Friday, September 25, 2026, at approximately 09:16 \(UTC\), some customers experienced intermittent slowness, errors and delayed mail flow in US instances of Protect and Prevent. This issue was caused by an unusually large spike in email traffic. The increased volume placed a sustained load on our network services, which operated within fixed capacity limits. As a result, mail processing slowed, some internal requests failed, and messages queued. Our team monitored the affected systems while the elevated volume subsided and load returned to normal. Protect and Prevent returned to normal performance by approximately 09:16 \(UTC\) on September 25, 2026. To prevent this type of issue in the future, we are improving our monitoring of unusual increases in email volume. We’re also evaluating ways to scale our network capacity more dynamically during sudden traffic spikes. No data loss occurred as a result of this issue.
Read the full incident report →
- Detected by Pingoru
- Sep 23, 2026, 09:52 AM UTC
- Resolved
- Sep 23, 2026, 02:58 PM UTC
- Duration
- 5h 5m
Affected: AuthenticationAuthenticationSecure Web FormsSecure Workspace
Timeline · 3 updates
-
identified Sep 23, 2026, 09:52 AM UTC
We have received reports of users receiving "Access Denied" error messages while trying to login. We have identified the issue and are working on implementing a solution and will update this page when we have more information.
-
monitoring Sep 23, 2026, 10:57 AM UTC
The issue has been identified and a fix has been implemented and will update this page when we have more information.
-
resolved Sep 23, 2026, 02:58 PM UTC
This incident has been successfully resolved and all systems are fully operational.
Read the full incident report →
- Detected by Pingoru
- Sep 23, 2026, 09:00 AM UTC
- Resolved
- Sep 23, 2026, 02:58 PM UTC
- Duration
- 5h 58m
Affected: Secure Web Forms
Timeline · 4 updates
-
investigating Sep 23, 2026, 09:00 AM UTC
We have received reports that some users are unable to successfully submit webform submissions. We are investigating this issue and will update this page when we have more information.
-
identified Sep 23, 2026, 10:47 AM UTC
The issue has been identified and a fix is been implemented. An update with more information will follow accordingly.
-
monitoring Sep 23, 2026, 10:58 AM UTC
The issue has been identified and a fix has been implemented and will update this page when we have more information.
-
resolved Sep 23, 2026, 02:58 PM UTC
This incident has been successfully resolved and all systems are fully operational.
Read the full incident report →
- Detected by Pingoru
- Sep 21, 2026, 09:32 AM UTC
- Resolved
- Sep 22, 2026, 08:27 AM UTC
- Duration
- 22h 54m
Affected: Web Access
Timeline · 5 updates
-
investigating Sep 21, 2026, 09:32 AM UTC
We have received reports that users are unable to send emails via Web Access (Secure Message Portal) in the UK region, with Error "503 Service Unavailable". We are investigating this issue and will update this page when we have more information.
-
monitoring Sep 21, 2026, 02:36 PM UTC
We’ve implemented a fix and are monitoring the results.
-
monitoring Sep 21, 2026, 02:38 PM UTC
We are continuing to monitor for any further issues.
-
resolved Sep 22, 2026, 08:27 AM UTC
This incident has been successfully resolved and all systems are fully operational.
-
postmortem Oct 08, 2026, 01:45 PM UTC
On Monday, September 21, 2026, from approximately 08:55 until Tuesday, September 22, 2026, at approximately 14:30 \(UTC\), some users experienced errors and were unable to send emails via Web Access \(Secure Message Portal\) in the UK region. This incident was caused by a configuration error during a database update, which led to intermittent service disruption. To resolve this issue, we reverted the configuration, and Web Access returned to normal performance by 14:30 \(UTC\) on September 22, 2026. To prevent this type of issue in the future, we are reviewing and updating our database configuration. No data loss occurred as a result of this issue.
Read the full incident report →
Critical September 18, 2026 - Detected by Pingoru
- Sep 18, 2026, 11:07 AM UTC
- Resolved
- Sep 18, 2026, 04:48 PM UTC
- Duration
- 5h 40m
Affected: Console
Timeline · 3 updates
Read the full incident report →
Critical September 17, 2026 - Detected by Pingoru
- Sep 17, 2026, 10:44 PM UTC
- Resolved
- Sep 18, 2026, 04:47 PM UTC
- Duration
- 18h 3m
Affected: Console
Timeline · 5 updates
Read the full incident report →
Critical September 16, 2026 - Detected by Pingoru
- Sep 16, 2026, 05:47 PM UTC
- Resolved
- Sep 16, 2026, 08:58 PM UTC
- Duration
- 3h 11m
Affected: ConsoleConsoleLearner Experience (LX)
Timeline · 3 updates
-
identified Sep 16, 2026, 05:47 PM UTC
We have identified an issue causing login and access issues for accounts on our UK instance.
-
monitoring Sep 16, 2026, 06:16 PM UTC
A fix has been implemented and we are monitoring the results.
-
resolved Sep 16, 2026, 08:58 PM UTC
This incident has been resolved.
Read the full incident report →
- Detected by Pingoru
- Sep 08, 2026, 07:00 AM UTC
- Resolved
- Sep 08, 2026, 07:00 AM UTC
- Duration
- —
Timeline · 1 update
-
resolved Sep 11, 2026, 12:43 PM UTC
On Septermber 8th we made aware that inbound HTML emails rendered partially or blank in Classic Outlook due to a routine HTML library upgrade in Defend's harmful-code-removal engine interacting with Classic Outlook's legacy Word rendering engine. New Outlook and Outlook on the web were unaffected. This was strictly a display issue: no email was delayed, lost, or compromised, and threat detection remained fully active. Engineering has reverted the update to restore normal rendering. If you temporarily disabled harmful-code removal during this window, please re-enable it to ensure complete protection.
Read the full incident report →
- Detected by Pingoru
- Sep 04, 2026, 10:53 AM UTC
- Resolved
- Sep 07, 2026, 08:25 AM UTC
- Duration
- 2d 21h
Affected: Secure Workspace
Timeline · 3 updates
-
investigating Sep 04, 2026, 10:53 AM UTC
We have received reports of an issue with delivery of Email verification MFA for Workspace. We are investigating this issue and will update this page when we have more information.
-
monitoring Sep 04, 2026, 02:24 PM UTC
We have received reports that the issue with delivery of Email verification MFA for Workspace has been mitigated by Microsoft, and we are monitoring the results.
-
resolved Sep 07, 2026, 08:25 AM UTC
This incident has been resolved.
Read the full incident report →
- Detected by Pingoru
- Aug 26, 2026, 04:19 PM UTC
- Resolved
- Aug 26, 2026, 07:51 PM UTC
- Duration
- 3h 31m
Affected: Inbox
Timeline · 3 updates
-
investigating Aug 26, 2026, 04:19 PM UTC
We have identified an issue where users may experience delays in messages being processed, and our engineering team is looking into a fix.
-
monitoring Aug 26, 2026, 04:46 PM UTC
Our engineering team has implemented a fix for the issue that causing message processing delays in PhishER, and we are monitoring the results.
-
resolved Aug 26, 2026, 07:51 PM UTC
Our engineering team has implemented a fix for the issue that causing message processing delays in PhishER.
Read the full incident report →
- Detected by Pingoru
- Aug 21, 2026, 08:52 AM UTC
- Resolved
- Aug 21, 2026, 02:57 PM UTC
- Duration
- 6h 4m
Affected: Phish Alert Button
Timeline · 5 updates
Read the full incident report →
- Detected by Pingoru
- Aug 18, 2026, 02:29 PM UTC
- Resolved
- Aug 18, 2026, 08:14 PM UTC
- Duration
- 5h 44m
Affected: Phish Alert Button
Timeline · 4 updates
Read the full incident report →
- Detected by Pingoru
- Aug 05, 2026, 07:29 PM UTC
- Resolved
- Aug 06, 2026, 09:56 PM UTC
- Duration
- 1d 2h
Affected: PhishRIP
Timeline · 3 updates
-
investigating Aug 05, 2026, 07:29 PM UTC
We are currently investigating an issue affecting Google PhishRIP queries, which may cause them to fail.
-
monitoring Aug 05, 2026, 09:24 PM UTC
Based on our investigation into the recent errors affecting Google PhishRIP queries, it appears these may be related to suspended Gmail accounts. We are continuing to monitor the issue.
-
resolved Aug 06, 2026, 09:56 PM UTC
Upon further investigation we have determined that the errors affecting Google PhishRIP queries were related to individual issues on Google accounts.
Read the full incident report →
- Detected by Pingoru
- Aug 04, 2026, 07:19 PM UTC
- Resolved
- Aug 05, 2026, 12:17 PM UTC
- Duration
- 16h 58m
Affected: Console
Timeline · 4 updates
-
identified Aug 04, 2026, 07:19 PM UTC
We have identified an issue preventing account settings from loading in the SAT console.
-
monitoring Aug 04, 2026, 07:51 PM UTC
A fix has been implemented and we are monitoring the results.
-
resolved Aug 05, 2026, 12:17 PM UTC
This incident has been resolved.
-
postmortem Sep 28, 2026, 02:35 PM UTC
On Tuesday, August 4, 2026, from approximately 18:22 to 19:43 \(UTC\), some customers experienced issues loading the **Account Settings** page in the KnowBe4 console across the CA, DE, EU, UK, and US regions. This issue was caused by a series of application changes that increased the complexity of a GraphQL request used by the Account Settings experience. Each change remained below the platform's configured complexity threshold when evaluated individually, but combined, the request exceeded that threshold and prevented the page from loading. Engineering identified the complexity threshold as the contributing factor and deployed a corrective change beginning at approximately 19:14 \(UTC\). After the fix was verified across the affected regions, the KnowBe4 console returned to normal performance by approximately 19:43 \(UTC\). To prevent this issue in the future, we have increased the complexity threshold. No data loss occurred as a result of this issue.
Read the full incident report →
- Detected by Pingoru
- Jul 28, 2026, 08:00 PM UTC
- Resolved
- Jul 29, 2026, 06:58 PM UTC
- Duration
- 22h 57m
Affected: PhishRIP
Timeline · 4 updates
Read the full incident report →
- Detected by Pingoru
- Jul 17, 2026, 01:18 PM UTC
- Resolved
- Sep 11, 2026, 03:04 PM UTC
- Duration
- 56d 1h
Affected: KnowBe4 Website
Timeline · 6 updates
-
investigating Jul 17, 2026, 01:18 PM UTC
We are investigating users being unable to purchase Protect licenses on store.knowbe4.com. We will update this page when we have more information.
-
monitoring Jul 17, 2026, 06:55 PM UTC
We’ve implemented a fix and we’re monitoring the results to make sure no further issues occur.
-
investigating Jul 20, 2026, 06:24 PM UTC
We have received reports that customers are unable to purchase Protect licenses on store.knowbe4.com. We are investigating this issue and will update this page when we have more information.
-
monitoring Jul 29, 2026, 06:40 PM UTC
We’ve implemented a fix for the online store and we’re monitoring the results to make sure no further issues occur.
-
monitoring Aug 17, 2026, 09:02 PM UTC
We are continuing to monitor the implemented fix for the online store, to ensure that no further issues occur.
-
resolved Sep 11, 2026, 03:04 PM UTC
This incident has been resolved.
Read the full incident report →
- Detected by Pingoru
- Jul 16, 2026, 07:48 PM UTC
- Resolved
- Jul 16, 2026, 09:20 PM UTC
- Duration
- 1h 32m
Affected: Console
Timeline · 4 updates
-
investigating Jul 16, 2026, 07:48 PM UTC
We have identified an issue where users may receive a redirect upon logging into Defend, and our engineering team is looking into a fix.
-
identified Jul 16, 2026, 08:09 PM UTC
A fix has been identified, and we will be monitoring the results as it rolls out.
-
resolved Jul 16, 2026, 09:20 PM UTC
This incident has been resolved.
-
postmortem Aug 20, 2026, 09:32 PM UTC
On Thursday, July 16, 2026, from approximately 19:57 to 21:12 \(UTC\), some customers experienced difficulty logging in to the Defend console, seeing a **Find Out More** screen instead of console access. This issue was caused by a synchronization issue between Salesforce and our internal licensing systems, which incorrectly set some customer license counts to zero. As a result, affected customers were unable to log in. To resolve this issue, our team applied a temporary license override to restore access for affected customers while correcting the underlying licensing records in Salesforce. Once corrected, the systems automatically synchronized the accurate values, and the Defend console access returned to normal performance by approximately 21:12 \(UTC\). To prevent this type of issue in the future, we are implementing improvements to the Salesforce synchronization process to ensure accurate license counts. No data loss occurred as a result of this issue.
Read the full incident report →
- Detected by Pingoru
- Jul 10, 2026, 02:30 PM UTC
- Resolved
- Jul 10, 2026, 02:30 PM UTC
- Duration
- —
Timeline · 1 update
-
resolved Jul 22, 2026, 09:01 PM UTC
An upstream feature flag service issue degraded model routing in collaboration-inference, causing PhishML evaluations to return 0/0/0 default errors. The third party deployed a fix, and a code update was deployed to production adding static fallback routing. All services have recovered and are operating normally.
Read the full incident report →
- Detected by Pingoru
- Jul 01, 2026, 02:40 PM UTC
- Resolved
- Jul 01, 2026, 06:01 PM UTC
- Duration
- 3h 20m
Affected: Console
Timeline · 4 updates
Read the full incident report →
- Detected by Pingoru
- Jun 30, 2026, 04:14 PM UTC
- Resolved
- Jun 30, 2026, 07:46 PM UTC
- Duration
- 3h 31m
Affected: Mail Flow
Timeline · 3 updates
Read the full incident report →
- Detected by Pingoru
- Jun 30, 2026, 02:18 PM UTC
- Resolved
- Jun 30, 2026, 07:11 PM UTC
- Duration
- 4h 53m
Affected: PhishML
Timeline · 4 updates
Read the full incident report →
- Detected by Pingoru
- Jun 24, 2026, 03:48 PM UTC
- Resolved
- Jun 25, 2026, 01:10 PM UTC
- Duration
- 21h 22m
Affected: KCM GRC
Timeline · 4 updates
-
investigating Jun 24, 2026, 03:48 PM UTC
We have identified an issue where users may receive a 500 error upon logging into KCM GRC, and our engineering team is looking into a fix.
-
monitoring Jun 24, 2026, 10:06 PM UTC
We have identified an issue where users may receive a 500 error upon logging into KCM GRC. A fix has been implemented, and we will continue to monitor this issue.
-
resolved Jun 25, 2026, 01:10 PM UTC
We have identified an issue where users may receive a 500 error upon logging into KCM GRC. A fix has been implemented, and users should be able to login without error.
-
postmortem Aug 04, 2026, 02:50 PM UTC
From Tuesday, June 23, 2026, at approximately 10:03 \(UTC\) to Thursday, June 25, 2026, at approximately 11:54 \(UTC\), some US and EU customers experienced intermittent 502 errors when logging in to KCM GRC. This issue was caused by network traffic attempting to connect to invalid multilevel subdomains, which overwhelmed the cache serving KCM GRC and resulted in login errors. Our team initially updated the configuration of our content delivery network, which temporarily resolved the errors, but they returned later that day. After further investigation, we identified the caching issue as the root cause and deployed an infrastructure-level fix to prevent multi-level subdomain traffic from affecting the cache. KCM GRC returned to normal performance by 11:54 \(UTC\) on June 25, 2026. To prevent this type of issue in the future, we are evaluating additional protections to guard against similar traffic that could affect the cache. No data loss occurred as a result of this issue.
Read the full incident report →