After a phishing test
Maya Okafor, IT manager at Northwind, asked how the October phishing test went. Memtro read the test's aggregate counts and gave the phish-prone percentage and how many people reported it, without naming anyone who clicked.
KnowBe4 + Memtro
How did the last phishing test go, and who is behind on training?
KnowBe4 connects Memtro to your security awareness reporting, and it reads and nothing else. It reads users with department and groups, and groups with member counts and their aggregate risk score. It reads phishing campaigns and each test's aggregate results, such as opened, clicked and reported counts and the phish-prone percentage. It reads training campaigns and who has passed, started or fallen past due on each module. Phishing results are read per campaign only and never name who clicked. Per-person risk scores are not returned either.
In Memtro
What you can do with KnowBe4 in Memtro
Ask in plain English from chat, your editor, a scheduled job or your own agent. The model picks the right KnowBe4 tool, reads what it needs, and answers with the source cited.
Reads
- 01Lists people enrolled with name, email, job title, department, location and groups.
- 02Lists groups with member count, type, status and the group's aggregate risk score.
- 03Lists phishing campaigns with target groups, last run and the last phish-prone percentage.
- 04Reads each phishing test's delivered, opened, clicked, replied, reported and bounced counts, without naming anyone.
- 05Lists training campaigns with groups, modules, start and end dates, and completion percentages when asked.
- 06Shows per-person training enrolments with module, campaign, status and when completed, such as who is past due.
In practice
Ask it like you would a colleague
Once KnowBe4 is connected, these are the kinds of things people ask. Plain questions, no syntax. If the answer lives partly in another system you have connected, Memtro looks there too.
KnowBe4 + Memtro
How did the October phishing test go?
Who is past due on security training?
Which groups have the highest risk score?
What was the phish-prone percentage on the finance team's last campaign?
Has Dan Fletcher completed this year's security training?
Chasing overdue training
Priya Sharma, compliance lead at Acme Ltd, asked who was past due on security training. Memtro read the enrolments for the annual campaign and listed the people marked Past Due with their module.
Teams
Where it fits
The teams that lean on KnowBe4 most, a question each of them asks, and what they connect beside it.
- EngineeringKeep decisions from evaporatingEngineer, Tech lead, On call, New joiner“Who owns the billing migration, and what did we decide about retries?”Used alongside GitHub, Linear, Jira, Confluence, Slack and 5 more.
- ProductHear what customers actually ask forProduct manager, Researcher, Designer, Head of product“Which customers asked for SSO this quarter, and what is their combined ARR?”Used alongside Help Scout, HubSpot, Linear, Jira, Slack and 6 more.
- Agent buildersMemory and tools for the agents you buildSolo builder, Platform team, Automation engineer, Whoever signs it off“Search memtro for what we know about Acme before drafting the proposal”Used alongside GitHub, Linear and Slack.
Better together
Works with
A record in KnowBe4 is rarely the whole story. Connect the systems that hold the rest and Memtro checks them together, then remembers what it learned so the next question starts further along.
- Work managementKnowBe4 with JiraJQL search, issue details and projects from Jira Cloud.
- Work managementKnowBe4 with Clio ManageAsk the matter: its client, its fee earner, the time on it and what is still unbilled.
- Work managementKnowBe4 with LinearIssues, projects and teams, synced hourly into memory.
- SupportKnowBe4 with Help ScoutAI that reads your support conversations and cross-references the customer everywhere else.
- SupportKnowBe4 with ZendeskEvery ticket, reply and internal note, ready to be asked about.
- SupportKnowBe4 with IntercomCustomer conversations and the people behind them, in your company memory.
- Documents and wikisKnowBe4 with NotionSearch pages and query databases, and write to them when you ask.
- Documents and wikisKnowBe4 with Google DriveSearch Drive and read Docs, Sheets and Slides as text, and write a Doc when you ask.
- Documents and wikisKnowBe4 with ConfluenceSearch and read wiki pages, and write them when you ask.
Also in Engineering and operations
Using something else for the same job, or both? Each connector has its own tools; connect as many as you like.
- GitHub
- AWS CloudWatch
- Sentry
- ServiceNow
- Okta
- Twilio
- AWS CloudTrail
- GitLab
- Bitbucket
- Vercel
- PagerDuty
- Datadog
- Grafana
- incident.io
- Azure DevOps
- CircleCI
- Cloudflare
- LaunchDarkly
- New Relic
- Rollbar
- Snyk
- Better Stack
- Buildkite
- DigitalOcean
- Heroku
- Netlify
- SonarQube Cloud
- Statuspage
UptimeRobot- Axiom
- BugSnag
- Checkly
- Hetzner Cloud
Honeycomb- Pingdom
- Render
- Statsig
- Sumo Logic
- Supabase
- HCP Terraform
- Vultr
- Airbrake
- Codecov
Cronitor- Dynatrace
FireHydrant- Fly.io
- Honeybadger
- Akamai Linode
- Octopus Deploy
- Pulumi
- Rootly
- Semgrep
- Splunk
StatusCake- Tailscale
- Argo CD
- authentik
- Coolify
- Gitea
GlitchTip
GLPI- Jenkins
Langfuse
LibreNMS- n8n
NetBox- Portainer
- Prefect
Snipe-IT
Woodpecker CI
Zabbix
LangSmith
Helicone- OpenAI (usage and cost)
- Anthropic (usage and cost)
- Algolia
- Flagsmith
- Unleash
GrowthBook
Drata
Intruder
GitGuardian
Secureframe
ilert
JumpCloud
ConfigCat- Railway
- Fastly
- Postman
- Make
- Braintrust
- OpenRouter
- ElevenLabs
Split- Scaleway
Aikido Security- AssemblyAI
Astronomer- Bamboo
- Baseten
- Bitrise
- Bitwarden
- BrowserStack
- bunny.net
- Cachet
- Checkmk
- Civo
- Cloudsmith
- Codacy
- Codemagic
Comet Opik- Coralogix
CrowdStrike Falcon- Dagster+
- DeepSource
Detectify- Docker Hub
Domotz- Grafana OnCall
- Harness
- Hugging Face
- Instatus
- Koyeb
- Lambda Cloud
LambdaTest
LangWatch
LlamaCloud
Logz.io
Lunary- Mezmo
NinjaOne- Nomad
Northflank- Oh Dear
- OVHcloud
Portkey- Probely (Snyk API & Web)
PromptLayer- Proxmox VE
PRTG Network Monitor- Qase
Raygun
Retell AI- Retool
Runpod- SecurityScorecard
- Semaphore CI
Shodan- SigNoz
- Socket
Spike.sh
Squadcast- SwaggerHub
- TeamCity
Tenable- Together AI
- Travis CI
UpGuard
Uptime.com
Vanta- Vapi
- Windmill
Zenduty- OpsLevel
Cortex- Auth0
- Clerk
WorkOS
Kandji
Automox
Huntress- HackerOne
SimpleMDM- AppSignal
Healthchecks.io
Rapid7 InsightVM- 1Password Events
- JFrog Artifactory
- Sauce Labs
Zenhub- Deepgram
- Replicate
Setup
How to connect
Connect withReporting API key and server
- 1
Open the Reporting API Management Console at training.knowbe4.com/app/api_tokens/reporting, or the same page on your own server.
- 2
Generate a key and copy it. A User Event API key will not work.
- 3
In Memtro, open Connections → KnowBe4 and paste it into Reporting API key. Set Server to "eu", "ca", "uk" or "de" if you sign in there.
- 4
Ask: how did the October phishing test go?
Also works from
Chat in the dashboard, the OpenAI-compatible API, scheduled jobs, and any MCP client: Claude Code, OpenCode, Cursor, Claude Desktop. The KnowBe4 tools are the same everywhere.
FAQ
Questions
Can Memtro change anything in KnowBe4?+
Not yet. Today every KnowBe4 tool reads, searches or lists. When the connector gains actions, each is marked, granted by name per team and used only when a person asks for exactly that, so nothing is created, sent, updated or deleted until you say so.
Who can use a KnowBe4 connection?+
A personal connection serves only your own requests. A shared connection serves the organisation: everyone, or only the teams an admin chooses. Admins can always add shared connections; other members need the permission.
Does Memtro store my KnowBe4 data?+
Credentials are encrypted at rest. Tool results are cached briefly so agent loops do not repeat identical calls, and the facts the model extracts are saved to your organisation's memory with provenance (system, record and link) so they can be checked and superseded.
How do I connect KnowBe4?+
Reporting API key and server. Open the Reporting API Management Console at training.knowbe4.com/app/api_tokens/reporting, or the same page on your own server.
Connect KnowBe4 in a few minutes
Seven-day free trial, then one monthly price per organisation. Connectors, jobs and memory are never metered.