Likelihood to Recommend Cofense PhishMe is an excellent solution for scenarios where it will be sold as a managed service. I believe that PhishMe is too expensive for many clients and instead would benefit from the economies of scale where an MSSP sells it as part of a whole service, which offers the analysts and reporting included. PhishMe is excellent for training and awareness of Phishing, but shouldn't replace mandatory training for new joiners or yearly refreshers, it should only be used as an additional training option.
Read full review Usually we had lots two platforms tasked with scanning exposures, anti-malware and provision for information and threat management. But with Microsoft Defender for Endpoint we have an all inclusive platform that even integrate with other Microsoft security apps such as Microsoft Defender for Cloud for enhanced threat insights and visibility.
Read full review Pros It gives clear-cut segregation of different parts of an email, header, text and HTML body, URL, attachments, HTML preview and some analytical insight like "similar reports." This distinctive approach actually helps reduce data overload during an analysis. The URLs captured here pass through an automatic reputation check [in our case VirusTotal] and add a tag of the reputation. If it is a well-known bad URL the tag helps us take the decision fast. For creating automation rules on the reported emails the "Recipes" section is really helpful. We can create easy recipes [or rules ] to handle a huge flow of reports and also we can create more sophisticated rules depending on the Cyber intelligence feed to catch the really bad currently less known attack attempts by malicious emails. The "Threat Indicators" section is also useful to use as a threat intelligence source to check the URLs for their maliciousness. Read full review It provides a unified security experience when combined with other Microsoft products such as Microsoft Defender for 365 and Azure Defender. It has an excellent dashboard and centralized view that make it easy to see and control everything from one location. It's an EDR tool designed to help you understand incidents and alerts better. Real-time detection of attacks and prompt endpoint device responses. It effortlessly interacts with additional Microsoft security products. Read full review Cons Completely switching to the new UI - Most is redesigned, but some old elements remain Ability to spoof known brands - limited in scope now and you are not allowed to use fully "convincing" campaigns that we are seeing in the wild Ability to own and manage own domains - right now adding a new company domain requires a ticket, allow us to add/verify ourselves Read full review Does not allow for remediation from the management console. The ticket system doesn't alert the person assigned to the ticket. You have to submit requests for whitelisting applications. Scanning exclusions are tricky to find. Adding devices, especially Apple devices, is very cumbersome. Read full review Usability Its built with UX in mind and is aimed at non-tech people, to ensure that almost everyone can run the campaign. But if we go deeper - sometimes you will need an HTML editor or support in order to figure out some advanced edits you might want to add in your scenarios.
Read full review Support Rating I have not had to use their support for pretty much anything. The software works well, and is very intuitive. I would imagine their support would be rather basic as there is not too much that can go wrong with a report phishing button, and if it were I would probably consider a different software.
Read full review The first time I tried to onboard my macOS endpoints to MDE I struggled for quite a bit. I had to reach out to Microsoft's MDE support team. The tech was very helpful in walking me through the steps during a screen share session
Read full review Online Training It's a must, even if you are never going to use the tool. Cofense aims to provide phishing training first and tool second.
Read full review Implementation Rating There are some hiccups, but there are meant to be, when you implement something in a large scale enterprise.
Read full review Alternatives Considered Cofense PhishMe was the first choice for us as the user interface as well as their bundle package with
Cofense Triage and Vision has helped the organisation to alleviate the overall security awareness posture. The other vendors did not provide a vast range of phishing scenarios as compared to Cofense PhishMe platform.
Read full review in an overall protection sentinelone is providing better protection for us, but as it comes with subscription's limitation, we have to be really careful in managing the licenses, the MS Defender for endpoint is providing us a decent protection which we are not complaining about, why we chose them ? as mentioned, this is coming with our subscription
Read full review Return on Investment Recipes in the system are capable of handling almost 2x what an analyst does, which cuts down the efforts [of] an analyst and provides more time for accurate strategies. With roughly 90% false positives coming through, the remaining 10% of true positives need as much attention as they can get for the full investigation and analysis. 1,500 or more phishing messages can come through in a given week and the amount of time/employees required to review this without a tool like Cofense is surely beyond [the] expected/anticipated budget. Read full review By providing robust threat protection, Defender for Endpoint can prevent downtime caused by security issues. Employees can work without interruptions, leading to increased productivity. By significantly decreasing the frequency of security incidents like malware infections and data breaches, Microsoft Defender for Endpoint can protect your network. The cost of incident response, cleanup, and potential regulatory fines are reduced as a result of the decrease in events. The implementation and configuration of Microsoft Defender for Endpoint may require an initial investment in licensing, training, and deployment, which can temporarily affect ROI. The cost of licensing can be substantial, especially for larger organizations. This cost needs to be factored into the ROI calculation. Read full review ScreenShots Cofense PhishMe Screenshots Microsoft Defender for Endpoint Screenshots