TrustRadius: an HG Insights company

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    KnowBe4 PhishER/PhishER Plus

    Score8.7 out of 10
    N/APhishER is presented as a lightweight Security Orchestration, Automation and Response (SOAR) platform to orchestrate threat response and manage the high volume of potentially malicious email messages reported by users. And, with automatic prioritization of emails, PhishER helps InfoSec and Security Operations team cut through the inbox noise and respond to the most dangerous threats more quickly.

    $1.15

    per seat

    Splunk SOAR

    Score9.1 out of 10
    N/ASplunk now offers a security orchestration, automation, and response (SOAR) platform via its acquisition of Phantom. Splunk Security Orchestration and Automation (Splunk SOAR) provides playbook automation and is available as a standalone solution.N/A
    Pricing
    KnowBe4 PhishER/PhishER PlusSplunk SOAR
    Editions & Modules
    501-1000 Monthly Pricing 3 Year
    $1.15
    per seat
    101-500 Monthly Pricing 3 Year
    $1.50
    per seat
    No answers on this topic
    Offerings
    Pricing Offerings
    KnowBe4 PhishER/PhishER PlusSplunk SOAR
    Free Trial
    NoNo
    Free/Freemium Version
    NoNo
    Premium Consulting/Integration Services
    NoNo
    Entry-level Setup FeeNo setup feeNo setup fee
    Additional DetailsFor organizations with over 1,000 seats, contact sales for a quote.—
    More Pricing Information
    Community Pulse
    KnowBe4 PhishER/PhishER PlusSplunk SOAR
    Considered Both Products
    KnowBe4
    No answer on this topic
    Cisco
    No answer on this topic
    Key User Insights
    Would buy again
    97%
    Would buy again
    125 Answers
    100%
    Would buy again
    41 Answers
    Delivers good value for the price
    99%
    Delivers good value for the price
    124 Answers
    100%
    Delivers good value for the price
    34 Answers
    Happy with the feature set
    97%
    Happy with the feature set
    125 Answers
    100%
    Happy with the feature set
    41 Answers
    Lived up to sales and marketing promises
    96%
    Lived up to sales and marketing promises
    112 Answers
    90%
    Lived up to sales and marketing promises
    26 Answers
    Implementation went as expected
    95%
    Implementation went as expected
    114 Answers
    97%
    Implementation went as expected
    37 Answers
    Features
    KnowBe4 PhishER/PhishER PlusSplunk SOAR
    Incident Response Platforms
    Comparison of Incident Response Platforms features of KnowBe4 PhishER/PhishER Plus and Splunk SOAR
    Feature
    KnowBe4 PhishER/PhishER Plus
    8.4
    122 Ratings
    6% below category average
    Splunk SOAR
    -
    Ratings
    Company-wide Incident Reporting8.3101 Ratings00 Ratings
    Integration with Other Security Systems8.597 Ratings00 Ratings
    Centralized Dashboard9.0120 Ratings00 Ratings
    Machine Learning to Prevent Incidents8.0103 Ratings00 Ratings
    Live Response for Rapid Remediation8.1102 Ratings00 Ratings
    Best Alternatives
    KnowBe4 PhishER/PhishER PlusSplunk SOAR
    Small Businesses
    No answers on this topic
    No answers on this topic
    Medium-sized Companies
    No answers on this topic
    No answers on this topic
    Enterprises
    No answers on this topic
    Palo Alto Networks Cortex XSOAR
    Score1.1 out of 10
    All AlternativesView all alternativesView all alternatives
    User Ratings
    KnowBe4 PhishER/PhishER PlusSplunk SOAR
    Likelihood to Recommend
    8.8
    (128 ratings)
    8.1
    (40 ratings)
    Likelihood to Renew
    8.8
    (9 ratings)
    7.5
    (3 ratings)
    Usability
    8.6
    (44 ratings)
    8.2
    (1 ratings)
    Availability
    8.2
    (1 ratings)
    -
    (0 ratings)
    Performance
    8.2
    (1 ratings)
    8.2
    (40 ratings)
    Support Rating
    8.6
    (8 ratings)
    8.2
    (1 ratings)
    Online Training
    -
    (0 ratings)
    8.2
    (1 ratings)
    Implementation Rating
    8.6
    (3 ratings)
    8.2
    (1 ratings)
    Configurability
    8.3
    (12 ratings)
    8.2
    (1 ratings)
    Contract Terms and Pricing Model
    9.1
    (1 ratings)
    -
    (0 ratings)
    Ease of integration
    9.1
    (2 ratings)
    -
    (0 ratings)
    Product Scalability
    8.2
    (1 ratings)
    8.2
    (1 ratings)
    Professional Services
    8.2
    (1 ratings)
    -
    (0 ratings)
    Vendor post-sale
    8.2
    (1 ratings)
    -
    (0 ratings)
    Vendor pre-sale
    9.1
    (1 ratings)
    -
    (0 ratings)
    User Testimonials
    KnowBe4 PhishER/PhishER PlusSplunk SOAR
    Likelihood to Recommend
    KnowBe4
    It is well suited for a company that utilizes a Security Awareness Training program. The old way is someone would report an email it got sent to a specific email address and you had to manually go through everything. If something was malicious you had to use Powershell/Graph to rip the message out or eDiscovery. The only place I could see this not be well suited for is a smaller environment. There is a minimum of 100 I believe, but even with 50 end-users I would still pay for it.
    Incentivized
    Read full review
    Cisco
    Our company has very complex and dynamic security operations because of the large number of security tools and systems that we need to manage and coordinate. Moreover, it helps us to meet many regulatory and compliance requirements because it helps us to automate and document our security operations. We also use it to streamline our security operations and improve our response to potential threats.
    Incentivized
    Read full review
    Pros
    KnowBe4
    • Security awareness training and tracking employee completion, as well as automated assignment of training for new employees
    • Helps meet compliance requirements by training employees and keeping them aware of latest cybersecurity trends
    • KnowBe4 PhishER/PhishER Plus is really a top of the line product with a well respected brand. The toolsets they offer continue to expand and deliver a consistent experience
    Incentivized
    Read full review
    Cisco
    • Its security orchestration and integration capability that supports multiple tools.
    • Easy coding that automates our security actions.
    • Enables us to easily collaborate and respond to security issues faster.
    • Splunk SOAR is a flexible product that is easy to deploy.
    • Efficient tracking and monitoring capability.
    • Excellent real-time reporting functionality.
    Incentivized
    Read full review
    Cons
    KnowBe4
    • The PhishRIP query can be improved to find other emails apart from the reported one only.
    • They should provide an option to delete the quarantined emails that are quarantined by the PhishRIP feature.
    • The PhishML can be improved to produce more accurate results.
    • More options to integrate PhishER with 3rd party tools.
    Incentivized
    Read full review
    Cisco
    • A lack of instruction It can be difficult to contact the support staff. Limited experience from current users.
    • It takes some effort to set up and learn new technology at first. More assistance is required from the support staff. The product's price needs to go down.
    • Cost of the larger version.
    Incentivized
    Read full review
    Likelihood to Renew
    KnowBe4
    When we first discovered that KnowBe4 released something like this, we saw a demo of it and were floored at what it could do and how it could help us from a security standpoint. Gone are the days of us in IT sending out a mass email saying please don't click on anything in the email from sender "X", and it allows us to quietly and easily ensure that people don't take any action on malicious emails.
    Incentivized
    Read full review
    Cisco
    As we already have a lot of clients being catered with Splunk SOAR and because Splunk SOAR is robust and efficient, we are already using it, and we have understood the product to a certain extent, I feel we are personally more enticed to use and scale it to a lot of business.
    Incentivized
    Read full review
    Usability
    KnowBe4
    It has been super easy for users to work with training and quizzes. Admin is a little difficult because you have to build the specific campaign type you want. But you can even create your own training and upload it to your LMS. This is great!!
    Incentivized
    Read full review
    Cisco
    Building playbooks through the visual editor is fine for basic tasks, but once you start chaining complex logic or integrating 3rd party APIs you hit a wall that requires deep scripting knowledge.
    Incentivized
    Read full review
    Performance
    KnowBe4
    No answers on this topic
    Cisco
    We are able to automate almost every one of our use cases, even our threat-hunting, and threat intel procedures. We have 20+ playbooks and cover almost everything, even searching logs into Splunk, looking into TIP and external systems, enrichment, and collecting evidence for analysts; it can perform concurrent playbooks running.
    Incentivized
    Read full review
    Support Rating
    KnowBe4
    When I have a question, their were fast to respond. The downside is a that at least once I had to work through the issue with the person assigned to help me because they didn't know the answer. That said they did try and were patient. However they should have known the answer on integration.
    Incentivized
    Read full review
    Cisco
    Splunk Support is always great! In addition the Community is very efficient and active.
    Incentivized
    Read full review
    In-Person Training
    KnowBe4
    No answers on this topic
    Cisco
    I never followed an in-person training, I gave my evaluation based on the online training
    Incentivized
    Read full review
    Online Training
    KnowBe4
    No answers on this topic
    Cisco
    I followed training for Phantom admins and it opened a world for me
    Incentivized
    Read full review
    Implementation Rating
    KnowBe4
    It was very simple to implement - with just a few settings needed to connect it to our O365 environment
    Incentivized
    Read full review
    Cisco
    I already said that the main key insight is the knowledge of Phantom, so a detailed training for all the people involeved.
    Incentivized
    Read full review
    Alternatives Considered
    KnowBe4
    We evaluated the Titan options because we have already used their DNS filtering product. However, KnowBe4 came in with a better price per user and a significantly stronger product lineup, particularly with its security awareness training component.
    Incentivized
    Read full review
    Cisco
    Splunk Phantom integrates well with Splunk ES and has many integrations. One thing that I liked about XSOAR as compared to Phantom is that it has an "app-store" where you can download not only app integrations (similar to Phantom) but Playbooks and dashboards as well.
    Incentivized
    Read full review
    Scalability
    KnowBe4
    No answers on this topic
    Cisco
    me and the customers I encountered found it flexible and scalable
    Incentivized
    Read full review
    Return on Investment
    KnowBe4
    • There has been a 700% increase in emails being reported now. Previously, staff were only reporting 4 emails a month. It is easier for us to promote the phish alert button, receive automated remediation and rapidly respond.
    • We had no reports on the amount of phishing emails were coming through Mimecast but now we have reports for the board of trustees.
    • Every Wednesday we talk about cyber security to all staff, PhishER allows us to point out the trend and what to look out for which raises awareness. Never before were we able to talk about cyber security like this.
    Incentivized
    Read full review
    Cisco
    • The playbooks are valuable. They are the core component. Being able to implement and build a code process to work through and scale out what we want to do is valuable
    • Before its use, analyzing each email would take at least 15 to 20 minutes, with some complex cases taking up to 30 minutes...With the automation provided by Splunk Phantom, we could significantly reduce the amount of time and human effort required to complete this task
    Incentivized
    Read full review
    ScreenShots

    KnowBe4 PhishER/PhishER Plus Screenshots

    Screenshot of How PhishER Plus enables a critical workstream to help IR teams work together to mitigate the phishing threat and is suited for any organization that wants to automatically prioritize and manage potentially malicious messages.