KnowBe4 PhishER vs. TheHive

Overview
ProductRatingMost Used ByProduct SummaryStarting Price
KnowBe4 PhishER
Score 9.1 out of 10
N/A
PhishER is presented as a key ingredient of an essential security workstream, a lightweight Security Orchestration, Automation and Response (SOAR) platform to orchestrate threat response and manage the high volume of potentially malicious email messages reported by users. And, with automatic prioritization of emails, PhishER helps InfoSec and Security Operations team cut through the inbox noise and respond to the most dangerous threats more quickly.
$0.46
per month per seat
TheHive
Score 9.4 out of 10
Enterprise companies (1,001+ employees)
TheHive is an open source and free cybersecurity incident response platform.
$17,000
per year per installation
Pricing
KnowBe4 PhishERTheHive
Editions & Modules
3001-5000 Monthly Pricing Per Seat
$0.46
per month per seat
2001-3000 Monthly Pricing Per Seat
$0.50
per month per seat
1001-2000 Monthly Pricing Per Seat
$0.59
per month per seat
501-1000 Monthly Pricing Per Seat
$0.67
per month per seat
101-500 Monthly Pricing Per Seat
$0.92
per month per seat
TheHive Gold Edition
Starting from $17.000
per year per installation
TheHive Platinum Edition
Starting from $23.000
per year per installation
TheHive Cloud Platform - Large
Starting from $41.000
per year per installation
TheHive Cloud Platform -X Large
Starting from $48.000
per year per installation
TheHive Cloud Platform - Custom
Starting from $48.000
per year per installation
Offerings
Pricing Offerings
KnowBe4 PhishERTheHive
Free Trial
NoYes
Free/Freemium Version
NoYes
Premium Consulting/Integration Services
NoYes
Entry-level Setup FeeOptional$5,000 one-time fee per installation
Additional DetailsPhishER is a monthly per seat price, billed annually.TheHive Gold and Platinum editions are priced per number of users (seats) and orgnizations (tenants). Our prices start from 1 organization and 5 users.
More Pricing Information
Features
KnowBe4 PhishERTheHive
Incident Response Platforms
Comparison of Incident Response Platforms features of Product A and Product B
KnowBe4 PhishER
7.1
8 Ratings
16% below category average
TheHive
10.0
1 Ratings
18% above category average
Company-wide Incident Reporting7.07 Ratings10.01 Ratings
Integration with Other Security Systems5.57 Ratings10.01 Ratings
Centralized Dashboard7.88 Ratings10.01 Ratings
Machine Learning to Prevent Incidents7.67 Ratings00 Ratings
Live Response for Rapid Remediation7.57 Ratings10.01 Ratings
Best Alternatives
KnowBe4 PhishERTheHive
Small Businesses
AlienVault USM
AlienVault USM
Score 7.8 out of 10
AlienVault USM
AlienVault USM
Score 7.8 out of 10
Medium-sized Companies
Rubrik
Rubrik
Score 9.2 out of 10
Rubrik
Rubrik
Score 9.2 out of 10
Enterprises
Hoxhunt
Hoxhunt
Score 9.2 out of 10
Hoxhunt
Hoxhunt
Score 9.2 out of 10
All AlternativesView all alternativesView all alternatives
User Ratings
KnowBe4 PhishERTheHive
Likelihood to Recommend
8.9
(12 ratings)
10.0
(1 ratings)
User Testimonials
KnowBe4 PhishERTheHive
Likelihood to Recommend
KnowBe4
Highly recommended if you're using the other KnowBe4 tools as this really can save staff all kinds of time. Would recommend this to anyone using the automated phishing plugin for their users. If you can fit it into the security budget its totally worth its asking price. The company has a deep background of email security and the like.
Read full review
StrangeBee
Managing incident response - it does exactly what it is supposed to do!
Read full review
Pros
KnowBe4
  • PhishER's connection to our O365 environment is good, it allows users to click the Phish Alert button to report a phish and this kicks off a back-end action that scans all users' inboxes and quarantines similar phishing emails it finds.
  • The KnowBe4 security awareness training, the Phish Alert Button, and simulated phishing are all tightly integrated, it's a "system" rather than ad hoc solutions.
Read full review
StrangeBee
No answers on this topic
Cons
KnowBe4
  • consistency within reporting - reports are not always consistent or accurate. ie reporting in PhishER (reported emails) is not consisted with reported phishes in core knowbe4 product.
  • training modules are stale, clunky and most of the content is given to diamond members - need more content at platinum 247 vs 1439 modules is significant - especially when compliance+ is another offering
Read full review
StrangeBee
No answers on this topic
Alternatives Considered
KnowBe4
Much easier interface to use, great support. Very easy to set up and works out of the box. Great content and new videos are constantly being added. Themed phishing around holidays is a great idea and has made users far more aware. Phishing based on current events in the news is a great idea.
Read full review
StrangeBee
No answers on this topic
Return on Investment
KnowBe4
  • Can't put a value on the time saved examining user submitted emails that the system now handles on its own
  • In the long run this is all meant to save us from some malware or ransomware. So ROI may not be able to be calculated on the cost but security is priceless
  • Getting users educated on being careful opening message they dont recognize is the first step. Giving them tools to submit and have automatic scanning of suspected phishing is the next local step.
Read full review
StrangeBee
No answers on this topic
ScreenShots

KnowBe4 PhishER Screenshots

Screenshot of This is a diagram of the PhishER workflow. Reviewing the PhishER workflow before getting started will provide an understanding of how PhishER, PhishRIP and PhishFlip work.Screenshot of The Reports screen will display five different dashboards of information.Screenshot of When entering the PhishER platform, the first screen that appears is the Dashboard. Here, a quick overview of the PhishER platform will appear.

TheHive Screenshots

Screenshot of Alert Management: Go through your dedicated and detailed Alert page, make comments, identify similar Alerts, define custom statuses and fields. Then decide whether or not they should be escalated to investigations or to incident response.Screenshot of Case Management: Create cases and associated tasks and observables. Identify similar cases and alerts, define the PAP (Permissible Actions Protocol) level on each Observable, or improve your Incident Response process using a simple yet powerful template engine.Screenshot of Muti Tenant Environments: Define the different organizations and teams and get them to work in a dedicated or collaborative mode: tenants' cases can be isolated or investigated by users from different organizations based on customizable roles and permissions.Screenshot of User Management: Define and customize user profiles, assign them to users within their organizations and synchronise them via LDAP or AD.Screenshot of Metrics and Dashboards: Compile and correlate statistics on cases, tasks, observables, metrics and more to generate useful KPIs and MBOs with our dynamic dashboard engine.Screenshot of MISP Integration: Get shared Indicators of compromise quickly imported and ready to use or share yours easily with your communities by connecting TheHive with MISP.