KnowBe4 PhishER/PhishER Plus vs. TheHive

Overview
ProductRatingMost Used ByProduct SummaryStarting Price
KnowBe4 PhishER/PhishER Plus
Score 9.0 out of 10
N/A
PhishER is presented as a lightweight Security Orchestration, Automation and Response (SOAR) platform to orchestrate threat response and manage the high volume of potentially malicious email messages reported by users. And, with automatic prioritization of emails, PhishER helps InfoSec and Security Operations team cut through the inbox noise and respond to the most dangerous threats more quickly.
$0.75
per month (billed annually) per seat
TheHive
Score 9.7 out of 10
Enterprise companies (1,001+ employees)
TheHive is an open source and free cybersecurity incident response platform.
$17,000
per year per installation
Pricing
KnowBe4 PhishER/PhishER PlusTheHive
Editions & Modules
3001-5000 Monthly Pricing Per Seat
$0.75
per month (billed annually) per seat
2001-3000 Monthly Pricing Per Seat
$0.85
per month (billed annually) per seat
1001-2000 Monthly Pricing Per Seat
$1.00
per month (billed annually) per seat
501-1000 Monthly Pricing Per Seat
$1.15
per month (billed annually) per seat
101-500 Monthly Pricing Per Seat
$1.50
per month (billed annually) per seat
TheHive Gold Edition
Starting from $17.000
per year per installation
TheHive Platinum Edition
Starting from $23.000
per year per installation
TheHive Cloud Platform - Large
Starting from $41.000
per year per installation
TheHive Cloud Platform -X Large
Starting from $48.000
per year per installation
TheHive Cloud Platform - Custom
Starting from $48.000
per year per installation
Offerings
Pricing Offerings
KnowBe4 PhishER/PhishER PlusTheHive
Free Trial
NoYes
Free/Freemium Version
NoYes
Premium Consulting/Integration Services
NoYes
Entry-level Setup FeeNo setup fee$5,000 one-time fee per installation
Additional DetailsPhishER is a monthly per seat price, billed annually.TheHive Gold and Platinum editions are priced per number of users (seats) and orgnizations (tenants). Our prices start from 1 organization and 5 users.
More Pricing Information
Features
KnowBe4 PhishER/PhishER PlusTheHive
Incident Response Platforms
Comparison of Incident Response Platforms features of Product A and Product B
KnowBe4 PhishER/PhishER Plus
8.7
94 Ratings
1% below category average
TheHive
10.0
1 Ratings
13% above category average
Company-wide Incident Reporting8.676 Ratings10.01 Ratings
Integration with Other Security Systems8.372 Ratings10.01 Ratings
Centralized Dashboard8.793 Ratings10.01 Ratings
Machine Learning to Prevent Incidents9.079 Ratings00 Ratings
Live Response for Rapid Remediation8.780 Ratings10.01 Ratings
Best Alternatives
KnowBe4 PhishER/PhishER PlusTheHive
Small Businesses
ThreatDown, powered by Malwarebytes
ThreatDown, powered by Malwarebytes
Score 7.9 out of 10
ThreatDown, powered by Malwarebytes
ThreatDown, powered by Malwarebytes
Score 7.9 out of 10
Medium-sized Companies
CrowdStrike Falcon
CrowdStrike Falcon
Score 9.2 out of 10
CrowdStrike Falcon
CrowdStrike Falcon
Score 9.2 out of 10
Enterprises
CrowdStrike Falcon
CrowdStrike Falcon
Score 9.2 out of 10
CrowdStrike Falcon
CrowdStrike Falcon
Score 9.2 out of 10
All AlternativesView all alternativesView all alternatives
User Ratings
KnowBe4 PhishER/PhishER PlusTheHive
Likelihood to Recommend
8.9
(99 ratings)
10.0
(1 ratings)
Likelihood to Renew
8.6
(5 ratings)
-
(0 ratings)
Usability
8.2
(13 ratings)
-
(0 ratings)
Support Rating
8.5
(3 ratings)
-
(0 ratings)
Implementation Rating
9.1
(1 ratings)
-
(0 ratings)
Configurability
8.0
(6 ratings)
-
(0 ratings)
Ease of integration
8.2
(1 ratings)
-
(0 ratings)
User Testimonials
KnowBe4 PhishER/PhishER PlusTheHive
Likelihood to Recommend
KnowBe4
It is great for giving employees an easy to use tool to report phishing emails & is a good assistant to the IT Security Team reviewing those reports to make a determination & respond accordingly. there are some good automation capabilities like automatically detection spoofs of executives or automatically labelling clean emails & sending notification to reporter.
Read full review
StrangeBee
Managing incident response - it does exactly what it is supposed to do!
Read full review
Pros
KnowBe4
  • Well structured KMSAT, PAB is a great addition.
  • Good Training Library, ability to customize templates
  • Phish/ER opens a windows to types & volume of suspect emails and allows admins to act upon.
  • "Rooms" in Phish/ER, to me, is considered my entry point to start my admin duties.
  • PAB and Phish/ER work very well together.
  • KnowBe4 Learner App is a great addition.
Read full review
StrangeBee
No answers on this topic
Cons
KnowBe4
  • Implementing the email blocklist into automated workflows
  • Consolidating reported emails in the inbox view by IP, attack type, subject
  • Scan function occasionally reports email as unknown, which requires manual remediation
  • More categories for threat emails (credential harvesting, social engineering, threat, phishing, malware, etc)
Read full review
StrangeBee
No answers on this topic
Likelihood to Renew
KnowBe4
When we first discovered that KnowBe4 released something like this, we saw a demo of it and were floored at what it could do and how it could help us from a security standpoint. Gone are the days of us in IT sending out a mass email saying please don't click on anything in the email from sender "X", and it allows us to quietly and easily ensure that people don't take any action on malicious emails.
Read full review
StrangeBee
No answers on this topic
Usability
KnowBe4
The PhishER program works well in identifying phishing emails and blocking them. If it is unsure of emails based on the rules/actions we have in place it leaves the email in the PhishER inbox and we can manually review the email to determine if it is clean, spam or a threat. If determined a threat it gets added to the blocklist and will be blocked if any future emails are submitted.
Read full review
StrangeBee
No answers on this topic
Support Rating
KnowBe4
Responses to questions were answered quickly and accurately.
Read full review
StrangeBee
No answers on this topic
Implementation Rating
KnowBe4
Work with support or rep for some basic steps, the rest is pretty straight foward.
Read full review
StrangeBee
No answers on this topic
Alternatives Considered
KnowBe4
Abnormal is on an entirely nother level both in cost and functionality. Costs is 25x but is borderline magic. Barracuda was finicky and cost more. Defender for email we already had but falls short in a lot of areas, especially with the reporting piece.
Read full review
StrangeBee
No answers on this topic
Return on Investment
KnowBe4
  • The KnowBe4 PhishER was purchased by us to provide an easy tool that will help the end-users to report suspicious emails and also help us to analyze all the reported emails in one place and this tool fits our requirements.
  • The price of KnowBe4 PhishER is not too expensive, with the features it provides and the capabilities this tool has, it is a reasonable price and you will get a discount and extra months as well if you are looking for a long-term contract.
  • In terms of technical aspects, it detects the pattern, URL and malicious files in the email perfectly.
Read full review
StrangeBee
No answers on this topic
ScreenShots

KnowBe4 PhishER/PhishER Plus Screenshots

Screenshot of a diagram of the PhishER Plus workflow. Reviewing the PhishER Plus workflow before getting started will provide an understanding of how it works.Screenshot of the Dashboard that first appears when entering the PhishER Plus platform. Here, a quick overview of the PhishER Plus platform will appear.

TheHive Screenshots

Screenshot of Alert Management: Go through your dedicated and detailed Alert page, make comments, identify similar Alerts, define custom statuses and fields. Then decide whether or not they should be escalated to investigations or to incident response.Screenshot of Case Management: Create cases and associated tasks and observables. Identify similar cases and alerts, define the PAP (Permissible Actions Protocol) level on each Observable, or improve your Incident Response process using a simple yet powerful template engine.Screenshot of Muti Tenant Environments: Define the different organizations and teams and get them to work in a dedicated or collaborative mode: tenants' cases can be isolated or investigated by users from different organizations based on customizable roles and permissions.Screenshot of User Management: Define and customize user profiles, assign them to users within their organizations and synchronise them via LDAP or AD.Screenshot of Metrics and Dashboards: Compile and correlate statistics on cases, tasks, observables, metrics and more to generate useful KPIs and MBOs with our dynamic dashboard engine.Screenshot of MISP Integration: Get shared Indicators of compromise quickly imported and ready to use or share yours easily with your communities by connecting TheHive with MISP.