Cofense Triage vs. KnowBe4 PhishER/PhishER Plus

The tool is very helpful in improving Phishing detection capabilities as it streamlines the process of analyzing user reports a lot. Besides it has a built-in mechanism of rating reporters(end-users) based on their historical performance. Downside - tool requires continuous resource investment to deliver best result. Tool is not helping too much in improving user-education, because automated response process is not immediate and is prone to errors

Incentivized

KnowBe4 PhishER is well suited for businesses that already use KnowBe4 Security Awareness Training and are looking to increase engagement from users in reporting suspicious emails. It is a good product that helps fill the gaps in any existing email security products that businesses are using. However, it is not a solution that would stop malicious emails from reaching the end user. It does rely on end users being able to identify suspicious emails and reporting them for the product to obtain actionable insights.

Incentivized

• Separating links and attachments contained in the email, and checking to see if they are known malicious.
• Clustering like emails to save time when responding.
• Providing risks scores with each cluster to give an estimate on which clusters should be addressed first.

Incentivized

• Phish Alert Button makes the email reporting process very easy, we just need to install the plug-in to end-user's outlook and then in a few clicks, they can report any email and that will go to the KnowBe4 PhishER inbox for investigation.
• The inbuilt AI feature PhishML of KnowBe4 PhishER helps us to analyze the reported emails very quickly and easily as it already categorizes the emails and provides tags like Clean, Spam, and Threat.
• PhishRIP query is a very good feature to run a query and quarantine the suspicious emails that have reached to the end-users inboxes.
• With the help of PhishFlip, we can convert a real phishing campaign to a simulated phishing test and test our users.
• Third-party tool integration is good as we can add them to take full advantage of applications that can help us to analyze the reported emails more efficiently like VirusTotal.

Incentivized

• There are too many interdependent pieces which you have to acquire separately.
• I think Cofense has a lot of capabilities and usefulness, but I think it's too a la carte.
• We own Cofense and PhishMe currently and there are some gaping holes that require additional licensing to close.

Incentivized

• When customizing simulated phishing campaign emails the ability to add a upload a custom image would be helpful.
• Some of the menu options take a bit to get used to - not as intuitive as I'd like. You select a user, then you can choose from a different menu to add them to a group. Once you know, it is not difficult - but not as easy as it should be.

Incentivized

Cofense is stable and provides easy to use solution to aid the investigation of emails as well as managing simulated phishing campaigns.

Incentivized

When we first discovered that KnowBe4 released something like this, we saw a demo of it and were floored at what it could do and how it could help us from a security standpoint. Gone are the days of us in IT sending out a mass email saying please don't click on anything in the email from sender "X", and it allows us to quietly and easily ensure that people don't take any action on malicious emails.

Incentivized

The interface is easy and intuitive.

Incentivized

The configuration is a bit complicated, but easy once you get the hang of it. Once configured, it is easy to manage our malicious emails that are reported by our staff.

Incentivized

We've experienced zero downtime.

Incentivized

No slowness seen.

Incentivized

Responses to questions were answered quickly and accurately.

Training was through, relevant and easy to follow.

Incentivized

Work with support or rep for some basic steps, the rest is pretty straight foward.

Incentivized

The other product had a lot of fails on the auto-processing and did not integrate well with our current environment. One issue had to do with the way it sends the submissions to its processing engine—our email gateway configuration would have blocked this traffic. I also did not like the user interface.

Incentivized

Abnormal is on an entirely nother level both in cost and functionality. Costs is 25x but is borderline magic. Barracuda was finicky and cost more. Defender for email we already had but falls short in a lot of areas, especially with the reporting piece.

Incentivized

We've experienced zero downtime

Incentivized

• Due to the integration potential, large amounts of time are saved on a daily basis.
• Incident response time has dropped due to the increased information available by having access to phishing emails directly.
• Staff are able to effectively learn how multiple tools in our environment are used by mastering Triage. This has decreased training time greatly and increased the effectiveness of each associate.

Incentivized

• It has greatly increased phishing / security awareness by our staff by having a designated button & process for reporting phishing emails
• It provides greater protection through the ability to delete emails from multiple recipients even if not all of them reported the email
• It saves time for me to have to evaluate whether or not an email reported is a real threat through the ML/AI/VirusTotal scores

Incentivized