KnowBe4 PhishER/PhishER Plus vs. Microsoft Defender for Office 365

PhishER comes with some good features, such as PhishML, PhishRIP, PhishFlip, etc. These features help us manage phishing email reporting incidents. From reporting emails via Phish Alert Button plug-in to collecting all reported emails in one place at the PhishER dashboard. Now, the PhishML comes into play, scanning all reported emails and tagging each as clean, spam, or threat. With the help of this machine learning-based algorithm, our investigation process becomes easier. Other features, such as PhishRip, help to search and quarantine phishing emails, and PhishFlip converts a real phishing campaign to a test phishing campaign.

Incentivized

Microsoft Defender for Office 365 is found to be well suited for our size company, and easily for smaller or larger companies as well. It does have a few places where improvements can be made, but at least it also asks you to provide feedback to Microsoft, which I have done with certain suggestions or complaints. However, overall it is a very thorough and useful tool when it comes to securing and defending yourself against trending threats.

• One platform that integrates reported emails and using PhishFlip to educated staff.
• Automation to remove malicious emails from mailboxes.
• Instantly report back to users if an email is safe or malicious.
• Easily review vital technical information to help you make a decision if an email is a threat.
• Allow comments to be left from staff and IT.

Incentivized

• It has been seamlessly working for us. We have not faced any issue as an end user. I've not faced many issues around accessing my apps, securely accessing and I've also seen certain links being blocked if I do not have correct access based on the security level that is defined for each user.

Incentivized

• Issues with Global Blocklist
• Email Template Modification - Simplification
• Target Specific Users vs. Groups
• PhishRIP info tabs (i.e. if improperly check ripped emails are turned into tests. This has caused issues.) Info tabs or markers allow user to hover and get more information about what action a check box or slider provides.

Incentivized

• I think it needs to be tuned correctly. For example, afterwards I tried to go in and print once after the implementation was done, I went in and tried to print a file or export a document. Just not possible, which just means it's great, works really well, but it also means that you have to tune your data categorization very carefully.

Incentivized

When we first discovered that KnowBe4 released something like this, we saw a demo of it and were floored at what it could do and how it could help us from a security standpoint. Gone are the days of us in IT sending out a mass email saying please don't click on anything in the email from sender "X", and it allows us to quietly and easily ensure that people don't take any action on malicious emails.

Incentivized

I give it an eight for the feature set. While I only give it an eight because the complexity and interconnectedness of the tools mean that there needs to be quite a bit of RTFM to get the most out of the products.

Incentivized

Responses to questions were answered quickly and accurately.

It was very simple to implement - with just a few settings needed to connect it to our O365 environment

Incentivized

Harmony does not provide security awareness training or simulated phishing emails like KnowB4. However, it does provide a phish alert button & workflow similar to PhishER & we may stop using PhishER because the Phish Alert reports from PhishER don't feed into Harmony to help train it from phishing emails that go through. We got Harmony after KnowB4 because we needed a tool to PREVENT phishing emails from getting to people's inboxes in the first place, which KnowB4 has very little capability for other than PhishER+ blacklists. It is a shame KnowB4 does not have the anti threat phishing prevention like Harmony considering all the email data it has & its existing AI analytic capabilities.

Incentivized

Sentinel One. Well, we have two different products at the same time. Just see which one is the best fit for our business. So nowadays we're using both at the same time.

Incentivized

• Phish/ER & PAD: Identifying email threats more quickly allowed us to send alert to the users' community in a timely manner based on the pattern of the threat.
• KnowBe4 Training Campaigns have proven to noticeably increase users' awareness.
• KnowBe4 Phishing Campaigns made users realize how dangerous and deceiving hacker can be.

Incentivized

• The positive aspect is the security of the employees, security of the data. There is no breach I can say. So it is a good impact. I mean there is not any bad or negative impact.

Incentivized