Barracuda Security Awareness Training vs. Sophos Phish Threat

Barracuda Security Awareness Training is well suited for companies that are looking to automate and schedule phishing simulation, education, and training on a regular basis. It would be less appropriate for companies that already have a security awareness training platform already implemented.

Incentivized

If you're looking for a tool to maximize digital productivity without hindering the effectiveness of your workforce, Sophos is a great tool. It quickly & safely manages the threat level across all of our digital channels to reduce the potential engagement with fishy characters or websites that might present vulnerabilities.

Incentivized

• The software helps us create emails that look exactly or almost exactly the same as the phishing emails we found in our email gateway.
• We already use the ESS gateway from Barracuda Networks, and in the TEP bundle, this software is included, so it's not that much work to also configure this.
• In the software, we can see reports on how our users performed. We can make a selection of users that are more prone to click on "false" links, and this way, we can help them individually.

Incentivized

• Set up an easy-to-use low overhead system of training and protection.
• Works through a single pane of glass when using other Sophos products.

Incentivized

• Providing animated templates for custom campaigns would be helpful, potentially a "builder site" where templates could be put together with custom questions/answers.
• Reporting through functional could use some work. We typically create phishing tests to help our users learn how to spot concerns, and the reports do not provide who actually "reported" the phish as opposed to who did not. This has been a year-long request to Barracuda, and the same issue is present in our campaigns as well.
• We would love to see an annual release of new training topics and campaign ideas.

Incentivized

• It should be easier to follow up with a user when they haven't completed training.
• More options for reporting would be nice.
• Better choice of users as all emails have been imported (aliases, dist. list. etc) taking up licenses.

Incentivized

Although cost competitive, we still feel like we are not digging deep enough to train our staff. We have little to no way other than digging through reports that have not proven to be adequately documented (hey you, Barracuda campaign reports) to identify and require users to take more training who have not passed their requirements.

Incentivized

Once you are started it is great. The only issue is to get started. The administrator interface [I feel] is not intuitive enough. It lacks some kind of quick start wizard. The templates are good and fit several regions. So we can do our Belgian campaign and French campaign, each with a different template.

Incentivized

It is easy to use and setup. You can schedule the Phish email test to be
sent out in the future or right away. You can also send to all users in
your list as well as stagger so all users do not get the email at the
same time and tell each other there is a test going on

Incentivized

Working with Barracuda PhishLine support is always a good experience. They are very professional, they are attentive and they are courteous. When I first purchased Barracuda PhishLine a few year ago it was new to them as well. At the time, the support staff could been better trained. That said, they worked hard to help and resolve my issues.

Incentivized

Support is solid but not spectacular. While I haven't used support for Phish Threat specifically, this is a general rating for Sophos' support across the board. It could be easier to find the FAQ or other information I need, but when I've needed to reach out to support they've been good to work with.

Incentivized

365 defender has a tool for user security training, it is much more rudimentary than Barracudas, but the interface is much nicer. Both offer email attack testing, reporting, and training, but barracuda offers additional attack types, like file and SMS testing. Both seem to come free with other software and can be brought as add-ons.

Incentivized

• We have seen a huge improvement in user non-engagement with phishing emails.
• We now have a well-educated group of employees that are very adept at knowing malware when they see it.
• A great tool for IT staff that saves time with training resources.

Incentivized

• ROI seems to be there though I have no direct stats.
• Positively impacts my web-browsing experience. As an Account Executive, it enables me to do my company research quickly without engaging with any bad actors.
• It runs in the background so it never impedes my workflows.

Incentivized