KnowBe4 PhishER/PhishER Plus vs. Rapid7 InsightConnect

PhishER comes with some good features, such as PhishML, PhishRIP, PhishFlip, etc. These features help us manage phishing email reporting incidents. From reporting emails via Phish Alert Button plug-in to collecting all reported emails in one place at the PhishER dashboard. Now, the PhishML comes into play, scanning all reported emails and tagging each as clean, spam, or threat. With the help of this machine learning-based algorithm, our investigation process becomes easier. Other features, such as PhishRip, help to search and quarantine phishing emails, and PhishFlip converts a real phishing campaign to a test phishing campaign.

Incentivized

This is perfect for an IT department with minimal staff. Security is usually an afterthought in small IT departments. If you have a dedicated security team, then something like this could be replaced with something more complex. The features it comes with are aimed toward a team that doesn't monitor and change things all the time. It's more of a set it and let it handle the rest type.

Incentivized

• Well structured KMSAT, PAB is a great addition.
• Good Training Library, ability to customize templates
• Phish/ER opens a windows to types & volume of suspect emails and allows admins to act upon.
• "Rooms" in Phish/ER, to me, is considered my entry point to start my admin duties.
• PAB and Phish/ER work very well together.
• KnowBe4 Learner App is a great addition.

Incentivized

• Offers pre-built integrations with multiple common alerting tools
• Offers pre-built workflows for multiple common tools
• Easy to create custom workflows and integrations

Incentivized

• Issues with Global Blocklist
• Email Template Modification - Simplification
• Target Specific Users vs. Groups
• PhishRIP info tabs (i.e. if improperly check ripped emails are turned into tests. This has caused issues.) Info tabs or markers allow user to hover and get more information about what action a check box or slider provides.

Incentivized

• It would be great if Rapid7 InsightConnect could be configured based on pre determined specifications when installing the agent.
• We've noticed that at times, there are certain network parameters needed in order for Rapid7 to collect and report data efficiently.
• Sometimes there are issues with the discovery scan in Rapid7 making it hard to configure in the beginning.

Incentivized

When we first discovered that KnowBe4 released something like this, we saw a demo of it and were floored at what it could do and how it could help us from a security standpoint. Gone are the days of us in IT sending out a mass email saying please don't click on anything in the email from sender "X", and it allows us to quietly and easily ensure that people don't take any action on malicious emails.

Incentivized

I think that the system is well designed and makes it easy to fine phishing emails that have been reported. It also has a simple user interface that allows you to review and address threat emails also providing an automated component that allows for automated threat mitigation and customized feedback responses to users

Incentivized

It's incredibly easy to set up, to use, to detect threats. It's easy to change, tweek and very quick to resolve all issues

Incentivized

I haven't needed to reach out to support very often, but when I have the responses have been timely and have provided the solutions I have needed. The support has been friendly and have always been able to resolve any issues that have come up.

Incentivized

It was very simple to implement - with just a few settings needed to connect it to our O365 environment

Incentivized

We evaluated the Titan options because we have already used their DNS filtering product. However, KnowBe4 came in with a better price per user and a significantly stronger product lineup, particularly with its security awareness training component.

Incentivized

In our opinion, Rapid7 InsightConnect was a better choice for our environment as we were able to roll it out efficiently. Also the monitoring tools and reporting were easier to use and read. CrowdStrike appeared to be harder to install from a client standpoint and also we felt that Rapid7 fit our budget a bit better for the value we getting.

Incentivized

• There has been a 700% increase in emails being reported now. Previously, staff were only reporting 4 emails a month. It is easier for us to promote the phish alert button, receive automated remediation and rapidly respond.
• We had no reports on the amount of phishing emails were coming through Mimecast but now we have reports for the board of trustees.
• Every Wednesday we talk about cyber security to all staff, PhishER allows us to point out the trend and what to look out for which raises awareness. Never before were we able to talk about cyber security like this.

Incentivized

• Scans for newer vulnerabilities require additional support due to the increased risk posed by long dwell times.
• Violations stopped at 4% per month and growing.
• Compatibility with networks that may improve in the future.

Incentivized