KnowBe4 Security Awareness Training vs. Mimecast Advanced Email Security

This is a very appropriate training system for a school district. We have the ability to add or remove the number of required training. Originally, we scheduled 4 modules per year, but we reduced it to 2 per year, because teachers shared they felt it was too much, originally.

Incentivized

Mimecast is good when you are needing a basic email security platform. It does some basic things really well, but when you start hitting some advanced needs, it lacks. Mimecast does not do a good job with BEC detection. Mimecast does spam filtering alright, but it could be much better. It really doesn't care about gmail or other external addresses. It doesn't check for age of accounts, etc.

Incentivized

• Real World Examples - Many of the training modules show Kevin Mitnick actually gaining access to a machine showing how one click can allow a malicious actor access to a machine or network.
• Up-to-Date content - They are always adding new training and phishing examples.
• The ability to schedule training and phishing tests.

Incentivized

• Email retention - convenience for the end-users to access older messages even if they've deleted them from Outlook
• SPAM management - allows us to prevent SPAM and Phishing attacks with custom policies that fit our organizational needs
• URL protection - allows incoming emails with a URL to be scanned and protects our end-users from clicking on malicious URLs

Incentivized

• Uploading your own SCORM content can be problematic with what seem like arbitrary restrictions (e.g. file size, quiz word count, etc.)
• Content that once was available at our level was taken away so that they could repackage it as a new "product" for an additional cost. They should have grandfathered in existing clients.
• Reporting capabilities (key for compliance artifacts) should be better designed with flexibility for users to present content in a manner suited to their specific circumstances

Incentivized

• The Admin Management console is absurdly complicated. For every first time we wanted to setup we've had to call their support for assistance. Support is quick and fantastic but it's so difficult to do anything yourself. They seem to have gone out of their way to call features unique things instead of using standard language from other providers so you as an IT professional know what you're looking for to setup.
• They have lots of KB articles, which their support will point you to. They are written on the most basic level and don't actually provide the help you need. For example, the KB page will tell you the list of options on the page... but not actually tell you what you do, why you might use them, or define their terminology.
• Their email threat management system has several nice features. One of the features available is that it will rewrite links in emails so that users click the link and it sandboxes the link, testing it on their server space and the user sees it there. This means the actual link in the email gets changed to the address of one of their servers. As a law firm, the EXACT LINKS are important to maintain in our communications and editing actual data from our clients to point to a Mimecast server is an unacceptable practice. I wish they had an alternative that did not edit the link itself on the page.

Incentivized

Between the ease of use, cost effectiveness, functionality and continued improvements Knowbe4 continues to make it would be pretty hard to find another competitive product that wraps it all up like KnowBe4 has. Not saying it couldn't happen, but haven't seen anything that competes at this point.

Incentivized

KnowBe4 Security Awareness Training is simple to use, simple to administer, effective, with quality content. It is easy to take the training and we have the reminders set so that the longer a user puts the training off, the more frequently they will receive reminder emails. Eventually they get emailed every day until they take the training. But with a simple click, they can get into the training content.

Incentivized

Yes using the same administration console is good, as user that you have assigned limited functionality to the console, they are already familiar with it when you increase their functionality. The new portal does take a bit of getting used to, but i can see that it is an improvement on the old version.

Incentivized

There have only been a handful of outages in the 2 years we have had the product. Even during those instances, parts of the system were still operational

Incentivized

Pages load quickly, filter/sort quickly, and don't slow down or freeze. Everything is smooth and very easy to use. There are a places in the UI where you can forget how to get there, but other than that everything is great. We have had no issues using any part of the website.

Incentivized

Tech prod support is great! I did have to ask for a new customer success rep, needed a more experienced person to match my 12 years of experience running Cybersec training programs. Would suggest that more matching of rep level of knowledge to client level knowledge would help.

Incentivized

When calling them you get best in the world customer services but as previously mentioned their online community and capabilities are a bit lacking. They want you to log into their portal to see updates on issues (vs. using a public facing service) and I rarely find the answers to my issues in electronic format. Their online presence is only helpful with the simplest of issues.

Incentivized

Helpful and knowledgeable account managers have helped us navigate and use the system to our full potential

Incentivized

confusing question. I inherited this application so I didnt get any formal training other than the person who was leaving. The CSM provided some later on when I asked in a zoom call

The implementation went really well and KnowBe4 was there the whole time on setup to make sure things were setup correctly. The only thing we had to figure out on our own was to script users automatically being added to security groups. So that when they sync to knowBe4 from AD they are placed into the same/correct groups.

Incentivized

KnowBe4 integrates seamlessly with Drata to monitor security compliance. It is possible to chose which training campaigns are mandatory to consider the security awareness training control passed. The integration is easy to configure and works with complex scenarios (optional and mandatory training campaings, different progress status per each employee, etc.).

Incentivized

Previously we have only used the default on-premise exchange that comes with SBS. This was very simple and only provided basic filtering of spam and junk mail. We weren't able to filter impersonation mail or emails with malicious code

Incentivized

It's kind of expensive compared to other products on the market although I think this product is likely better than those other products it 3 times better? I think not.

The product scales greatly. As long as you upgrade the license to support the number of users you are needing, adding in those new users is easy. Also getting those users set up with trainings/campaigns is very easy as well

Incentivized

The team was great to work with and took their time to ensure that we knew what we were doing with the product and that it was set up to meet the specific needs of our organization. This wasn't just a cookie-cutter deployment, but rather they focused specifically on our needs.

Incentivized

• The smart group feature has provided us insight to users who continually fail phishing simulations and allows automatic training assignment. This has greatly reduced our technician's time spent inside the service, allowing them to focus on more important projects.
• After switching to KnowBe4, for Cybersecurity training, our business has seen an increase of more than 20% participation in training.
• I can't say enough about the Cybersecurity Assessment feature, which informs us of end-user weaknesses and strengths. Knowing where the company is strong and weak allows us to adjust training and system configurations, keeping the business more secure.

Incentivized

• Reasonably priced solution, even for a small business like ours.
• It's hard to put a figure on our ROI - I would just say we feel like we've gotten our money's worth with the advanced email protection we receive. We have definitely avoided many potentially dangerous emails since we've implemented this solution.

Incentivized