Best Practices Feed

The Best Practices Feed is a curated collection of policies maintained by Keep Aware. Subscribing a profile to this feed automatically applies high-fidelity, regularly updated policies that protect against common threats.

What is the Best Practices Feed?

The Best Practices Feed is a managed collection of policies that:

• Are maintained by Keep Aware — Our security team creates and updates these policies
• Cover common threats — Phishing, malware, social engineering, and more
• Are high-fidelity — Designed to minimize false positives
• Receive regular updates — New threats are added, detection improves over time

When you subscribe a profile to the feed, all policies in the feed are automatically applied to users in that profile.

Getting started

To subscribe a profile to the Best Practices Feed:

1. Navigate to Profiles in the console
2. Select the profile you want to subscribe
3. In the Policies section, enable Subscribe to Best Practices Feed
4. Click Save

All policies in the Best Practices Feed are now active for users in this profile.

Policies in the feed

The Best Practices Feed includes policies that:

• Address common browsing risks
• Are fundamental to browser security
• Have high detection accuracy
• Cover a variety of threat categories

Categories covered

Category	Examples
Phishing	Credential theft, brand impersonation
Social Engineering	Tech support scams, fake alerts
Malware	Malicious downloads, drive-by attacks
Sensitive Data	PII exposure, credential leaks
File Sharing	Risky uploads, unauthorized sharing
Extensions	Malicious extensions, risky permissions

Viewing feed policies

To see which policies are in the Best Practices Feed:

1. Navigate to Policies in the console
2. Use the search query: policy.distribution.feed:"best_practices"
3. Or filter by the "Best Practices" tag

How the feed works

Automatic updates

When Keep Aware adds or updates policies in the feed, subscribed profiles automatically receive those changes. You don't need to manually update anything.

No individual management

Feed policies are managed by Keep Aware. You cannot:

• Edit feed policies directly
• Remove individual policies from the feed
• Change detection queries for feed policies

To customize, create your own policy based on a template instead.

Profile-level control

Each profile can independently subscribe or unsubscribe from the feed. This allows you to:

• Subscribe production profiles
• Keep test profiles unsubscribed for controlled testing
• Gradually roll out the feed across your organization

Feed vs individual policies

Aspect	Best Practices Feed	Individual Policies
Updates	Automatic	Manual
Customization	Not customizable	Fully customizable
Management	Keep Aware managed	You manage
Coverage	Broad, curated	Specific to your needs

When to use the feed

• Rapid deployment of browser security
• Staying current with threat intelligence
• Reducing policy management overhead
• Ensuring baseline protection

When to use individual policies

• Custom detection requirements
• Organization-specific threats
• Fine-tuned safeguard messages
• Unique workflow needs

Combining feed and custom policies

You can use both the Best Practices Feed and custom policies:

1. Subscribe profiles to the feed for baseline protection
2. Create custom policies for organization-specific needs
3. Custom policies work alongside feed policies
4. Use priority to control which safeguard is shown when both match

Unsubscribing from the feed

To unsubscribe a profile:

1. Navigate to Profiles in the console
2. Select the subscribed profile
3. In the Policies section, disable Subscribe to Best Practices Feed
4. Click Save

Feed policies no longer apply to users in this profile.

Note: Events that already occurred while subscribed are retained in logs and reports.

Frequently asked questions

Is the feed updated?

Yes, our team actively maintains the feed. Policies are frequently added as new threats emerge.

How do I see new policies added to the feed?

Search for feed policies and sort by date to see recent additions.

Can I customize feed policies?

Not directly. Create a custom policy based on a template if you need customization.

What if a feed policy causes issues?

Create an exception for specific users, devices, or locations. Contact support if a feed policy needs adjustment.

Can I use the feed for some profiles and not others?

Yes, subscription is per-profile. You control which profiles are subscribed.

Are feed policies included in reports?

Yes, events from feed policies appear in reports like any other policy events.