Keycloak Reviews

Knowbe4 Reviews

Keycloak mentions (4)

• Beyond the login page

  Most of the time nowadays, I prefer offloading this to an identity provider, using OpenID Connect or soon Federated Credential Management (FedCM), even if that means shipping an identity provider as part of the deliverables (I generally go with Keycloak, with keycloak-config-cli to provision its configuration). I'm obviously biased though as I work in IT services, developping software mainly for... - Source: dev.to / 7 months ago

• Okta Says Hackers Stole Data for All Customer Support Users

  Yet another breach of Okta... Why are companies not running something like keycloak [1] themselves? Are administrative/maintenance costs too high or is it plausible deniability? [1] https://keycloak.org. - Source: Hacker News / 7 months ago

• I built a ready-to-use auth server with TypeScript and Express.js

  I'd stick with a solution like https://keycloak.org in that instance. Source: about 1 year ago

• Authelia is an open-source authentication/authorization server with 2FA/SSO

  A few more projects in this space: - Keycloak (you won't get fired for picking this)[0] - CloudFoundry's UAA[1] - Gluu [2] - Keratin [3] - OpenUnison [4] - Dex[5] - Netlify's GoTrue[6] All of these solutions are a bit different but here are some of the axes: - Whether or not they function as an OAuth provider - Whether they're centered around application-user-login (email + password) or application auth (OAuth) or... - Source: Hacker News / over 3 years ago

Knowbe4 mentions (6)

• How do I tell my security team to tone it down with the phishing e-mails?

  If knowbe4.com is in header. Move to Phishing test folder. Source: over 1 year ago

• Knowbe4 Salesman just deleted my account

  Our security team uses them. It always strikes me as bad form when we are told "don't open e-mail from people you don't know" and "don't click on links in e-mails" and then we get e-mail from "knowbe4.com" that says "You've been enrolled in security training, click here to take it". And google flags it as spam.... Source: almost 2 years ago

• Does anyone know of any cybersecurity training products? For example, companies that test to see if employees are susceptible to phishing emails or any other products that are designed to test your employees cybersecurity knowledge and weaknesses?

  We use KnowBe4 with our clients for phishing and training. Source: almost 3 years ago

• Don't test staff for phishing vulnerability, they might be offended.

  I use knowbe4.com and test randomly throughout the year. If a user fails, they have to watch training videos. Everyone pretty much is like "ah you got me" No stress, no fuss. Source: about 3 years ago

• How does your company deal with phishing scams?

  You can run a phishing test to all users for free at knowbe4.com thanks to CHO Kevin Mitnick (Chief Hacking Officer). Then you compare your baseline from others that used the same email template. Our company clicked through at 4.5%, the average was 16% for that template. So you can at least get a baseline where you stand. Source: about 3 years ago