Cofense Triage vs. KnowBe4 PhishER

Cofense Triage is well suited for large companies which are receiving large amounts of emails. It makes it easy for users to report suspicious emails and makes it easy for security staff to review, analyze and investigate these emails to avoid having them delivered in the future in case any other security tool fails to detect them.

Incentivized

The KnowBe4 PhishER is a great product that integrates well with the KnowBe4 security education platform and Jira service desk. Those two integrations make the general workflow effortless for someone who is in the product on a daily basis. This reduces manual work and allows our team to be productive and work on other projects. This product also gives the team visibility on what is being reported and help determine if the email reported is localized or widespread throughout the organization. Meaning, depending on how many people report an email based on location and job roles. This solution is well suited for an organization or team who would like to automate the guess work of determining if a email is a phish, spam, or safe. Additionally, have that one click response to the user who reported to get additional insight on if they did respond to the email or clicked on that was determined to be a real phishing email.

Incentivized

• Separating links and attachments contained in the email, and checking to see if they are known malicious.
• Clustering like emails to save time when responding.
• Providing risks scores with each cluster to give an estimate on which clusters should be addressed first.

Incentivized

• PhishER's connection to our O365 environment is good, it allows users to click the Phish Alert button to report a phish and this kicks off a back-end action that scans all users' inboxes and quarantines similar phishing emails it finds.
• The KnowBe4 security awareness training, the Phish Alert Button, and simulated phishing are all tightly integrated, it's a "system" rather than ad hoc solutions.

Incentivized

• There are too many interdependent pieces which you have to acquire separately.
• I think Cofense has a lot of capabilities and usefulness, but I think it's too a la carte.
• We own Cofense and PhishMe currently and there are some gaping holes that require additional licensing to close.

Incentivized

• consistency within reporting - reports are not always consistent or accurate. ie reporting in PhishER (reported emails) is not consisted with reported phishes in core knowbe4 product.
• training modules are stale, clunky and most of the content is given to diamond members - need more content at platinum 247 vs 1439 modules is significant - especially when compliance+ is another offering

Incentivized

Cofense is stable and provides easy to use solution to aid the investigation of emails as well as managing simulated phishing campaigns.

Incentivized

The interface is easy and intuitive.

Incentivized

We've experienced zero downtime.

Incentivized

No slowness seen.

Incentivized

Training was through, relevant and easy to follow.

Incentivized

The other product had a lot of fails on the auto-processing and did not integrate well with our current environment. One issue had to do with the way it sends the submissions to its processing engine—our email gateway configuration would have blocked this traffic. I also did not like the user interface.

Incentivized

Much easier interface to use, great support. Very easy to set up and works out of the box. Great content and new videos are constantly being added. Themed phishing around holidays is a great idea and has made users far more aware. Phishing based on current events in the news is a great idea.

Incentivized

We've experienced zero downtime

Incentivized

• Due to the integration potential, large amounts of time are saved on a daily basis.
• Incident response time has dropped due to the increased information available by having access to phishing emails directly.
• Staff are able to effectively learn how multiple tools in our environment are used by mastering Triage. This has decreased training time greatly and increased the effectiveness of each associate.

Incentivized

• Can't put a value on the time saved examining user submitted emails that the system now handles on its own
• In the long run this is all meant to save us from some malware or ransomware. So ROI may not be able to be calculated on the cost but security is priceless
• Getting users educated on being careful opening message they dont recognize is the first step. Giving them tools to submit and have automatic scanning of suspected phishing is the next local step.

Incentivized