Cofense LMS vs. Cofense PhishMe vs. PeopleFluent

LMS is a more appropriate choice to be used if the organization is large and has multiple verticals where the trainings differ to a great etent from vertical to another vertical. However if the company is a small scale org with limited hierarchy, any open source portal is enough to serve the purpose.

Incentivized

Cofense PhishMe is an excellent solution for scenarios where it will be sold as a managed service. I believe that PhishMe is too expensive for many clients and instead would benefit from the economies of scale where an MSSP sells it as part of a whole service, which offers the analysts and reporting included. PhishMe is excellent for training and awareness of Phishing, but shouldn't replace mandatory training for new joiners or yearly refreshers, it should only be used as an additional training option.

Incentivized

PeopleFluent has eliminated the use of paper reviews. It is also eliminated the use of scanning, emailing or interoffice mail. It is a great tool for communication and I highly recommend it. However, in some ways, the product can be improved. Some processes are tied to each other and could function in tandem. For example, while completing the self-review, the employee has to capture multi-raters. If self-review is submitted without listing multi-rater names then multi-rater review has to be captured separately on paper. In my opinion, these two processes can be different. Multi-raters should be added/removed/modified after submitting self-review.

Incentivized

• Training modules: developed Using Learning Science Principles
• Story Based Environment
• Learn by doing

Incentivized

• It gives clear-cut segregation of different parts of an email, header, text and HTML body, URL, attachments, HTML preview and some analytical insight like "similar reports." This distinctive approach actually helps reduce data overload during an analysis.
• The URLs captured here pass through an automatic reputation check [in our case VirusTotal] and add a tag of the reputation. If it is a well-known bad URL the tag helps us take the decision fast.
• For creating automation rules on the reported emails the "Recipes" section is really helpful. We can create easy recipes [or rules ] to handle a huge flow of reports and also we can create more sophisticated rules depending on the Cyber intelligence feed to catch the really bad currently less known attack attempts by malicious emails.
• The "Threat Indicators" section is also useful to use as a threat intelligence source to check the URLs for their maliciousness.

Incentivized

• It was very easy to go through resumes, choose the people you wanted to interview and set up the interviews.
• It is great at keeping track of people that have come through hiring process in the past so you do not waste time on those that have already been declined or are sent in by multiple vendors.
• The handling of time sheets and expense reports is very easy to manage.

• UI can be more interactive
• Segregating the users in different groups can be further automated via AD details
• The end user mobile notification feature should be there rather than only mail.

Incentivized

• Completely switching to the new UI - Most is redesigned, but some old elements remain
• Ability to spoof known brands - limited in scope now and you are not allowed to use fully "convincing" campaigns that we are seeing in the wild
• Ability to own and manage own domains - right now adding a new company domain requires a ticket, allow us to add/verify ourselves

Incentivized

• The interface is a little confusing. I'm not sure if it's something that can be fixed in implementations, or if it's inherent to PeopleFluent, but there are almost too many tabs asking for too much information. A lot of it can be repetitive as well.
• Changing your password/resetting your password seems to be nightmarish. It requires an organization ID as well as security questions, and forces you to reset your password far too often. I really dislike that feature.
• Honestly, PeopleFluent itself looks pretty outdated. I feel as though the entire application really needs a facelift to be more current.

Incentivized

PeopleFluent continues to develop an already high quality product and works to continually improve the user experience. The different modules integrate well, and the administrative functions are easy to understand and perform resulting in less time spent with KTLO functions. They provide world class customer service and work hard to keep you engaged as a customer.

Its built with UX in mind and is aimed at non-tech people, to ensure that almost everyone can run the campaign. But if we go deeper - sometimes you will need an HTML editor or support in order to figure out some advanced edits you might want to add in your scenarios.

Incentivized

PeopleFluent seems to have all the functionality one would need, but it can be a bit overwhelming. Depending on the client implementation, it can be downright confusing and not intuitive. My 6 rating comes from the fact that it seems like the system can be configured to actually be confusing and not make sense. I think a VMS should be set up not to allow a customer to configure it in such a way as to not really work, or to allow users to circumvent steps. I also really don't like the "organization key" that needs to be entered every time you log in. Why is a login and password good enough for 99% of the systems out there, but PeopleFluent requires an extra field?

Incentivized

I have not had to use their support for pretty much anything. The software works well, and is very intuitive. I would imagine their support would be rather basic as there is not too much that can go wrong with a report phishing button, and if it were I would probably consider a different software.

Incentivized

I would rate this ATS system a 9 as there's some room for improvement as mentioned prior. I really love the design and its functionality buttons and the way I can integrate it with other systems. I would really love to see a more detailed reporting metrics long with super candidate filters when searching profiles.

Incentivized

It's a must, even if you are never going to use the tool. Cofense aims to provide phishing training first and tool second.

Incentivized

There are some hiccups, but there are meant to be, when you implement something in a large scale enterprise.

Incentivized

Cofense LMS works well at our environment due to it well know security awareness training without any complications. Ease to get support documentations & end users feedback. While in MetaCompliance Support & documentation was not that easy for end users.

Incentivized

Cofense PhishMe was the first choice for us as the user interface as well as their bundle package with Cofense Triage and Vision has helped the organisation to alleviate the overall security awareness posture. The other vendors did not provide a vast range of phishing scenarios as compared to Cofense PhishMe platform.

Incentivized

Its great, its very versatile and stacks up very well against the competition. In terms of usability and ease of use, anyone can quickly learn how to use PeopleFluent. Again, the faults against the system would be when a client who is running the tool customizes it to their liking. Not to mention it's a very popular tool that i have had the pleasure of working in twice now with two different organizations.

Incentivized

• Trainings made user more aware of the security attacks they are vulnerable to
• Strengthened the overall security posture of the company
• Detterent control as incase the the personnel are not able to finish off their training, it is followed by HR action.

Incentivized

• Recipes in the system are capable of handling almost 2x what an analyst does, which cuts down the efforts [of] an analyst and provides more time for accurate strategies.
• With roughly 90% false positives coming through, the remaining 10% of true positives need as much attention as they can get for the full investigation and analysis.
• 1,500 or more phishing messages can come through in a given week and the amount of time/employees required to review this without a tool like Cofense is surely beyond [the] expected/anticipated budget.

Incentivized

• I do believe that goal setting and the workflow of following up, going through the process yearly is as good as you make it. If you set good goals, or help your team make good goals then the experience can go well. Otherwise it's just another thing that an employee is doing to make their manager happy.
• I am not sure the cost of the product, but if it is really expensive I am not sure that we are getting fully what we should be for what the product offers. Make sure you are using what is offered.

Incentivized