Fable

Name: Fable
Brand: Fable
Rating: 4.9 (4 reviews)

Fable is a human risk management platform that ingests security telemetry to score and segment employee behavior, delivers continuous, targeted behavioral interventions and phishing simulations, and provides dashboards for executive-level human risk reporting.

7 Ref Customers

Website|FTEs 10

Published Oct 4, 2026

01Common complaints

- Company sizes or stages where this product is overkill or insufficient - Very small organizations (for example, fewer than ~200 employees) that primarily need basic compliance training and occasional phishing simulations may find lower-overhead SAT tools more cost-effective. - Industries or use cases where competitors are clearly superior - Highly regulated buyers who require published security certifications, detailed compliance documentation, and mature procurement artifacts may prefer vendors with well-established trust centers and compliance collateral. - Technical requirements that this product may not meet out of the box - Organizations that require dozens of niche integrations available immediately should verify connector availability; reviewers have requested additional integrations. - Budget constraints that make alternatives more appropriate - Buyers seeking clearly tiered, published per-seat pricing may prefer legacy vendors that publish pricing bands. - Specific workflows or integrations where the product may fall short - Organizations seeking an extensive micro-video training library and broad multilingual coverage immediately may find the available library smaller than that of mature vendors. - Red flags in the buying process - If the vendor is unable to provide SOC 2 / ISO documentation and pen test reports under NDA when these are procurement requirements, that will be a blocker for many enterprise buyers. - Current limitations identified by customers (review evidence) - Documentation gaps associated with rapid feature releases - Dashboard UI/UX improvements requested by reviewers - Requests for repeat-offender or repeat-behavior-focused reporting - Limited micro-training video library depth, as noted in at least one review - Roadmap and feature commitments - No formal, dated public roadmap was found in the reviewed sources; reviewers indicate the vendor is actively iterating on reporting and integrations. - Scale considerations - Scale limits are not publicly documented; buyers should validate scalability through references, architecture review, and pilot testing. - Security or compliance gaps - Publicly available evidence of SOC 2/ISO certifications and pen test summaries was not found; plan for security due diligence during procurement. - API and integration constraints - Reviewers have asked for more integrations; buyers should confirm availability of critical connectors and estimate custom integration effort.

Deal disqualifiers: what makes a POOR fit

Lack of core system integrations (IAM/HR/email/collaboration) that are required for the risk engine
Need for an extensive, highly localized content library available immediately without customization
Requirement for publicly available security certifications or a comprehensive trust center before engaging with sales

Why some customers left for competitors (churn reasons)

No explicit churn narratives were identified in the reviewed sources.
Given the product’s relative newness and small public review volume, public churn evidence may not yet be visible.

02Why they buy

- Key differentiators indicated by reviewer feedback and vendor materials - Close vendor engagement during early deployments, as reported by reviewers - Emphasis on telemetry-driven cohorting and targeted interventions informed by integrations - Flexibility in customizing scripts and briefings, according to reviewer comments - Features and capabilities that warrant validation during evaluation - The vendor refers to a “human behavior data” architecture and AI-assisted explainability; technical validation (architecture reviews, data handling, model governance) is recommended during evaluation - Functionality targeting AI-related behavioral controls and unsanctioned AI usage is described by the vendor and should be validated with pilots and demonstrations - Areas where competitors currently have advantages - Larger content catalogs, more extensive documentation, and more third-party reviews (incumbent vendors) - Published pricing and clear packaging for procurement planning

Why customers chose Fable (evidence)

Review-driven reasons
- Preference for richer telemetry and integration-driven prioritization compared to traditional training tools
- Need to identify higher-risk cohorts and apply targeted interventions
- Interest in faster content customization using AI-assisted tools (vendor and reviewer claims)
Vendor-provided testimonials are curated by the vendor and should be treated as marketing claims unless methodology is provided.

03Field reports

Review-platform sentiment (G2)

- Overall rating on G2: very highly rated with a very small review footprint (small sample size; high risk of selection bias). - Themes from G2 reviews - Positive themes - Team responsiveness and close vendor engagement (review quote: “it feels like a true partnership with the team.”) - Data and integrations enabling prioritization of risk cohorts - Flexibility in customizing scripts and content - Areas for improvement - Reporting gaps (requests for repeat-offender-focused reports) - Desire for additional integrations - Dashboard UI/UX improvements requested - Documentation gaps associated with rapid feature releases - Limited variety in the micro-training video library, according to a reviewer

Community/Social (Reddit, HackerNews)

Reddit mentions for “Fable” are frequently for other products with the same name, which complicates surface-level social listening for Fable Security.
A broader thread discussing KnowBe4 alternatives included a reference indicating interest in Fable as an option.
No substantial HackerNews discussion about Fable Security was found in the sources reviewed.

Specific outcomes customers achieved (with metrics when available)

Vendor and marketplace claims include quantitative outcomes; these are not independently validated in public materials and lack methodology details.
Reviewer-reported outcomes are qualitative and typically do not provide baselines or detailed measurement periods.

Deal-breakers and reasons customers didn’t purchase

Not directly documented in public sources.
Likely procurement blockers inferred from reviews and product model
- Inability to integrate required telemetry sources weakens the core risk-scoring value proposition
- Enterprises requiring published security certifications and detailed compliance evidence prior to engagement may delay purchase

Vendor-published stories and claims

The vendor site references customer outcomes such as improved reporting rates, higher device compliance, and positive employee ratings.
Critical evaluation
- Methodologies for vendor-posted metrics are not provided publicly (sample sizes, time windows, baseline definitions, and control groups are absent).
- These figures should be treated as directional indicators rather than independently validated ROI proofs.

Evidence-based mini “case” from G2 review data

A reviewer reported reduced phishing click rates versus a prior platform and easier implementation for specific training modules.
Limitations
- No quantified baseline, time period, or user count was provided; attribution to tooling versus program changes is unclear.

04Best fit

Company sizes

- Best fit (inferred) - Mid-market to enterprise: several hundred to many thousands of employees - Particularly organizations with mature identity and security toolsets that can provide the telemetry needed for cohorting - Potential fit for smaller organizations - Possible for smaller organizations, but integration overhead and the vendor's pricing model may make simpler security awareness training (SAT) tools more cost-effective for some buyers

Industries and verticals where adoption is strongest

Press and vendor materials reference deployments across financial services, healthcare, logistics, and technology
Vendor materials include testimonials from organizations in mortgage/financial services and healthcare

Roles and personas

Decision makers
- CISO
- VP/Director of Security
- Security Awareness / Human Risk lead
End users
- General workforce staff
- Specialized cohorts such as developers, privileged users, finance teams, and executives

Pain points and challenges the product addresses

Measuring human-derived risk beyond simple training completion and basic click metrics
Low engagement from generic training programs and training fatigue
Need for role- and behavior-specific messaging
Evolving social engineering threats and emerging concerns around unsanctioned AI usage

Qualification criteria: what makes a GOOD fit

Organization can connect identity, HR, email, and relevant security telemetry sources
The security team has a mandate to measure and change behavior rather than only meet compliance checkboxes
Leadership requires concise, executive-level reporting on human-derived risk

Real customer examples (publicly referenced)

Pennymac (testimonial cited on the vendor site)
Dayton Children’s Hospital (testimonial cited on the vendor site)

05The pitch

What the product does (core value proposition in objective terms)

- Fable is a human risk management platform focused on reducing security incidents associated with employee behavior by: - Ingesting security telemetry and other signals to assess risky behaviors in context - Segmenting employees into risk cohorts - Delivering targeted interventions (short video briefings, nudges, chats) and phishing simulations - Providing reporting and dashboards intended for board-level human risk reporting - The vendor describes its approach as replacing annual, generic awareness training with continuous, targeted behavioral interventions informed by integrated telemetry and automation.

Target market and market positioning

- Primary target buyers appear to be: - CISOs - Security awareness / human risk leaders - Security GRC / security program managers - Target organizations: mid-market to enterprise, particularly those with sufficient integrations and telemetry to support risk scoring and segmentation. - Market category: security awareness training and phishing simulation, expanding into a broader human risk management category that emphasizes behavioral interventions tied to telemetry.

Get a comprehensive analysis of Fable including market position, competitive landscape, adoption trends, and peer benchmarks.

Download full report →