TrustRadius: an HG Insights company

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    KnowBe4 PhishER/PhishER Plus

    Score8.7 out of 10
    N/APhishER is presented as a lightweight Security Orchestration, Automation and Response (SOAR) platform to orchestrate threat response and manage the high volume of potentially malicious email messages reported by users. And, with automatic prioritization of emails, PhishER helps InfoSec and Security Operations team cut through the inbox noise and respond to the most dangerous threats more quickly.

    $1.15

    per seat

    Splunk Enterprise

    Score8.6 out of 10
    N/ASplunk is software for searching, monitoring, and analyzing machine-generated big data, via a web-style interface. It captures, indexes and correlates real-time data in a searchable repository from which it can generate graphs, reports, alerts, dashboards and visualizations.N/A
    Pricing
    KnowBe4 PhishER/PhishER PlusSplunk Enterprise
    Editions & Modules
    501-1000 Monthly Pricing 3 Year
    $1.15
    per seat
    101-500 Monthly Pricing 3 Year
    $1.50
    per seat
    No answers on this topic
    Offerings
    Pricing Offerings
    KnowBe4 PhishER/PhishER PlusSplunk Enterprise
    Free Trial
    NoYes
    Free/Freemium Version
    NoYes
    Premium Consulting/Integration Services
    NoNo
    Entry-level Setup FeeNo setup feeNo setup fee
    Additional DetailsFor organizations with over 1,000 seats, contact sales for a quote.—
    More Pricing Information
    Community Pulse
    KnowBe4 PhishER/PhishER PlusSplunk Enterprise
    Considered Both Products
    KnowBe4
    No answer on this topic
    Cisco
    No answer on this topic
    Key User Insights
    Would buy again
    97%
    Would buy again
    125 Answers
    97%
    Would buy again
    59 Answers
    Delivers good value for the price
    99%
    Delivers good value for the price
    124 Answers
    94%
    Delivers good value for the price
    49 Answers
    Happy with the feature set
    97%
    Happy with the feature set
    125 Answers
    97%
    Happy with the feature set
    59 Answers
    Lived up to sales and marketing promises
    96%
    Lived up to sales and marketing promises
    112 Answers
    93%
    Lived up to sales and marketing promises
    43 Answers
    Implementation went as expected
    95%
    Implementation went as expected
    114 Answers
    96%
    Implementation went as expected
    50 Answers
    Features
    KnowBe4 PhishER/PhishER PlusSplunk Enterprise
    Incident Response Platforms
    Comparison of Incident Response Platforms features of KnowBe4 PhishER/PhishER Plus and Splunk Enterprise
    Feature
    KnowBe4 PhishER/PhishER Plus
    8.4
    122 Ratings
    6% below category average
    Splunk Enterprise
    -
    Ratings
    Company-wide Incident Reporting8.3101 Ratings00 Ratings
    Integration with Other Security Systems8.597 Ratings00 Ratings
    Centralized Dashboard9.0120 Ratings00 Ratings
    Machine Learning to Prevent Incidents8.0103 Ratings00 Ratings
    Live Response for Rapid Remediation8.1102 Ratings00 Ratings
    Security Information and Event Management (SIEM)
    Comparison of Security Information and Event Management (SIEM) features of KnowBe4 PhishER/PhishER Plus and Splunk Enterprise
    Feature
    KnowBe4 PhishER/PhishER Plus
    -
    Ratings
    Splunk Enterprise
    8.2
    91 Ratings
    2% above category average
    Centralized event and log data collection00 Ratings9.085 Ratings
    Correlation00 Ratings8.487 Ratings
    Event and log normalization/management00 Ratings8.488 Ratings
    Deployment flexibility00 Ratings8.081 Ratings
    Integration with Identity and Access Management Tools00 Ratings8.282 Ratings
    Custom dashboards and workspaces00 Ratings8.887 Ratings
    Host and network-based intrusion detection00 Ratings7.865 Ratings
    Data integration/API management00 Ratings8.334 Ratings
    Behavioral analytics and baselining00 Ratings7.732 Ratings
    Rules-based and algorithmic detection thresholds00 Ratings7.933 Ratings
    Response orchestration and automation00 Ratings7.529 Ratings
    Reporting and compliance management00 Ratings8.634 Ratings
    Incident indexing/searching00 Ratings8.737 Ratings
    Best Alternatives
    KnowBe4 PhishER/PhishER PlusSplunk Enterprise
    Small Businesses
    No answers on this topic
    No answers on this topic
    Medium-sized Companies
    No answers on this topic
    IBM Security QRadar SIEM
    Score8.9 out of 10
    Enterprises
    No answers on this topic
    SolarWinds Security Event Manager (SEM)
    Score8.1 out of 10
    All AlternativesView all alternativesView all alternatives
    User Ratings
    KnowBe4 PhishER/PhishER PlusSplunk Enterprise
    Likelihood to Recommend
    8.8
    (128 ratings)
    8.7
    (112 ratings)
    Likelihood to Renew
    8.8
    (9 ratings)
    8.5
    (25 ratings)
    Usability
    8.6
    (44 ratings)
    8.5
    (45 ratings)
    Availability
    8.2
    (1 ratings)
    10.0
    (1 ratings)
    Performance
    8.2
    (1 ratings)
    -
    (0 ratings)
    Support Rating
    8.6
    (8 ratings)
    8.0
    (19 ratings)
    Online Training
    -
    (0 ratings)
    8.0
    (1 ratings)
    Implementation Rating
    8.6
    (3 ratings)
    7.0
    (3 ratings)
    Configurability
    8.3
    (12 ratings)
    -
    (0 ratings)
    Contract Terms and Pricing Model
    9.1
    (1 ratings)
    -
    (0 ratings)
    Ease of integration
    9.1
    (2 ratings)
    -
    (0 ratings)
    Product Scalability
    8.2
    (1 ratings)
    9.1
    (1 ratings)
    Professional Services
    8.2
    (1 ratings)
    -
    (0 ratings)
    Vendor post-sale
    8.2
    (1 ratings)
    -
    (0 ratings)
    Vendor pre-sale
    9.1
    (1 ratings)
    -
    (0 ratings)
    User Testimonials
    KnowBe4 PhishER/PhishER PlusSplunk Enterprise
    Likelihood to Recommend
    KnowBe4
    It is well suited for a company that utilizes a Security Awareness Training program. The old way is someone would report an email it got sent to a specific email address and you had to manually go through everything. If something was malicious you had to use Powershell/Graph to rip the message out or eDiscovery. The only place I could see this not be well suited for is a smaller environment. There is a minimum of 100 I believe, but even with 50 end-users I would still pay for it.
    Incentivized
    Read full review
    Cisco
    I'm liking the newer products, and I'm looking forward to how they integrate with the overall product when they come together. Just log in and be able to query a large number of systems for similar issues or a unique one. That is a great fit for Splunk Enterprise, looking for a simple case or a simple String or something of that nature across multiple machines. It's a great fit for that to identify issues or particular software, whatever your scenario is, String, to find it across any particular server or group of servers, so that you can update or do a deployment or whatever it is you're looking to do.
    Incentivized
    Read full review
    Pros
    KnowBe4
    • Security awareness training and tracking employee completion, as well as automated assignment of training for new employees
    • Helps meet compliance requirements by training employees and keeping them aware of latest cybersecurity trends
    • KnowBe4 PhishER/PhishER Plus is really a top of the line product with a well respected brand. The toolsets they offer continue to expand and deliver a consistent experience
    Incentivized
    Read full review
    Cisco
    • It is very useful in creating custom rules for analyzing system logs and display relevant information. The query language is very easy to learn.
    • We can create custom UI to visualize the output of our data. The interface is very flexible. It also allows the sharing of rules among users.
    • There is an open online community to help others. Stackoverflow also has a splunk community. These resources make it more convenient to learn.
    Incentivized
    Read full review
    Cons
    KnowBe4
    • The PhishRIP query can be improved to find other emails apart from the reported one only.
    • They should provide an option to delete the quarantined emails that are quarantined by the PhishRIP feature.
    • The PhishML can be improved to produce more accurate results.
    • More options to integrate PhishER with 3rd party tools.
    Incentivized
    Read full review
    Cisco
    • Splunk light limits number of users to 5. Wish there was a flexible license, where one could add more users.
    • Splunk light does not let you add > few realtime alerts. Wish there was a flexible license, where one could add as many realtime alerts as wanted.
    • Better insight into daily ingestion values
    Incentivized
    Read full review
    Likelihood to Renew
    KnowBe4
    When we first discovered that KnowBe4 released something like this, we saw a demo of it and were floored at what it could do and how it could help us from a security standpoint. Gone are the days of us in IT sending out a mass email saying please don't click on anything in the email from sender "X", and it allows us to quietly and easily ensure that people don't take any action on malicious emails.
    Incentivized
    Read full review
    Cisco
    We are using Splunk extensively in our projects and we have recently upgraded to Splunk version 6.0 which is quite efficient and giving expected results. We keep track of updates and new features Splunk introduces periodically and try to introduce those features in our day to day activities for improvement in our reporting system and other tasks.
    Read full review
    Usability
    KnowBe4
    It has been super easy for users to work with training and quizzes. Admin is a little difficult because you have to build the specific campaign type you want. But you can even create your own training and upload it to your LMS. This is great!!
    Incentivized
    Read full review
    Cisco
    You can literally throw in a single word into Splunk and it will pull back all instances of that word across all of your logs for the time span you select (provided you have permission to see that data). We have several users who have taken a few of the free courses from Splunk that are able to pull data out of it everyday with little help at all.
    Incentivized
    Read full review
    Reliability and Availability
    KnowBe4
    No answers on this topic
    Cisco
    When properly setup and configured, Splunk is extremely reliable.
    Incentivized
    Read full review
    Support Rating
    KnowBe4
    When I have a question, their were fast to respond. The downside is a that at least once I had to work through the issue with the person assigned to help me because they didn't know the answer. That said they did try and were patient. However they should have known the answer on integration.
    Incentivized
    Read full review
    Cisco
    Splunk maintains a well resourced support system that has been consistent since we purchased the product. They help out in a timely manner and provide expert level information as needed. We typically open cases online and communicate when possible via e-mail and are able to resolve most issues with that method.
    Incentivized
    Read full review
    Online Training
    KnowBe4
    No answers on this topic
    Cisco
    The online course was simple clear and described the main capabilities of the solution. There is also an initial module that can be done for free so anyone can familiarize themselves with the functionality of this solution. On the other hand, however, there could be more free online courses. Maybe even with a certificate, this would broaden the group of people who are familiar with the platform while increasing familiarity with the solution itself.
    Read full review
    Implementation Rating
    KnowBe4
    It was very simple to implement - with just a few settings needed to connect it to our O365 environment
    Incentivized
    Read full review
    Cisco
    Smooth without too many major issues.
    Incentivized
    Read full review
    Alternatives Considered
    KnowBe4
    We evaluated the Titan options because we have already used their DNS filtering product. However, KnowBe4 came in with a better price per user and a significantly stronger product lineup, particularly with its security awareness training component.
    Incentivized
    Read full review
    Cisco
    A lot of products have natively inside their own dashboards and or their own logging repositories. And each one is difficult to learn or they're too complex or they're not verbose in the sense that they're not easy to mine the data that you're looking for. So that could be anything from the native logging that you find in other Cisco products. It's easier to use Splunk to draw the data that you're looking for as opposed to going to the individual's products themselves to get the logs that you're looking for.
    Incentivized
    Read full review
    Scalability
    KnowBe4
    No answers on this topic
    Cisco
    Splunk can scale in to the petabyte per day range which of course is awesome
    Read full review
    Return on Investment
    KnowBe4
    • There has been a 700% increase in emails being reported now. Previously, staff were only reporting 4 emails a month. It is easier for us to promote the phish alert button, receive automated remediation and rapidly respond.
    • We had no reports on the amount of phishing emails were coming through Mimecast but now we have reports for the board of trustees.
    • Every Wednesday we talk about cyber security to all staff, PhishER allows us to point out the trend and what to look out for which raises awareness. Never before were we able to talk about cyber security like this.
    Incentivized
    Read full review
    Cisco
    • Splunk has allowed developers to diagnose production issues when access of control was taken away from them to be allowed to view items in production environments and I believe that is invaluable.
    • At times some developers weren't super happy about using it, but it was more of the fact that they were used to having production access and not creating their splunk queries to get information.
    • Going one place to view logs was very beneficial to have.
    Incentivized
    Read full review
    ScreenShots

    KnowBe4 PhishER/PhishER Plus Screenshots

    Screenshot of How PhishER Plus enables a critical workstream to help IR teams work together to mitigate the phishing threat and is suited for any organization that wants to automatically prioritize and manage potentially malicious messages.