KnowBe4 PhishER/PhishER Plus

Score8.6 out of 10

255 Reviews and Ratings

What is KnowBe4 PhishER/PhishER Plus?

PhishER is presented as a lightweight Security Orchestration, Automation and Response (SOAR) platform to orchestrate threat response and manage the high volume of potentially malicious email messages reported by users. And, with automatic prioritization of emails, PhishER helps InfoSec and Security Operations team cut through the inbox noise and respond to the most dangerous threats more quickly.

Categories & Use Cases

Media

Screenshot of How PhishER Plus enables a critical workstream to help IR teams work together to mitigate the phishing threat and is suited for any organization that wants to automatically prioritize and manage potentially malicious messages.

Centralized Dashboard
A central dashboard provides analysts with a clear look at the most important data
Category average: 8.7
Integration with Other Security Systems
Pre-built integration with other security systems like SIEM and threat intelligence
Category average: 7.7
Company-wide Incident Reporting
Built-in enterprise-level ticketing system to leverage the knowledge of the entire workforce, not just the security team
Category average: 8.5

Live Response for Rapid Remediation
Live remediation response allows incident responders to initiate remediation from anywhere over secure connection
Category average: 7.9
Machine Learning to Prevent Incidents
Incident prevention powered by machine learning with no human intervention
Category average: 8.1

Most Frequent Users

Top 3 industries using KnowBe4 PhishER/PhishER Plus.

Based on HG Insights installation data

View all Reviews

#1 most frequent

Finance and Insurance

15.6%

25 installations of 160

#2 most frequent

Manufacturing

15.6%

25 installations of 160

“KnowBe4 PhishER/PhishER Plus is solving a lot of problem in our organization from arranging spam reported emails to one place and for end users, it is making the email reporting process very easy.”
— Security Trainer, Virginia Transformer Corporation

#3 most frequent

Professional, Scientific, and Technical Services

11.3%

18 installations of 160

Pros

Rapid removal of suspicious emails from user inboxes (PhishRIP)
Automated triage and identification of threats (PhishML)
Significant time savings for security and IT teams

Cons

Limitations in PhishRIP's ability to identify and quarantine emails effectively
Desire for more robust and customizable reporting options
Challenges with integration with third-party security tools

Chris Conlan

IT Infrastructure/Security Engineer in Information Technology at Morrison Bros. Co (51-200 employees)

Use Cases and Deployment Scope

On a daily basis the KnowBe4 PhishER/PhishER Plus system is used by end-users and IT. On the end-users side of things items are reported with the Phish Alert button which in turn get sent to the KnowBe4 PhishER/PhishER Plus platform for IT to investigate.

IT will utilize the platform to deem emails that are uncategorized and need further analysis. The system is also setup to rip emails that are deemed as threat from end-users mailboxes and add emails/domains to the blocklist for Exchange Online.

Pros

Centralized management of all reports phishing emails.
PhishRIP goes through all mailboxes to find reported or auto-categorized Threat messages and pulls it from them.
Utilize PhishML (machine learning) to auto-classify emails to save time on going through hundreds of emails a week.
Reporting on what types of emails are getting categorized (Threat/Spam).

Cons

My main gripe is I still can't go to KnowBe4 PhishER/PhishER Plus directly and have to log into the KnowBe4 training platform to get to it.
More integrations into security vendors such as Sophos Intelix.

Return on Investment

PhishRIP mitigates active phishing attacks. Email is deemed as a threat it is pulled from all mailboxes that have it.
Frees up IT resources by not having to go through every single email manually.

Usability

Alternatives Considered

Proofpoint Security Awareness Training, Hoxhunt and Check Point Email Security

Other Software Used

Scale Computing Platform

Chad Strohschein

Information Technology Lead in Information Technology at Alberta College of Paramedics (11-50 employees)

Use Cases and Deployment Scope

We are using KnowBe4 for educational purposes, as well as logging phishing attempts to the orgainzation. As a small IT department, it has been a fantastic tool to get a overall vision of stengths and areas that need to be enhanced. We can then take information and provide better feedback to KnowBe4 to allow better protection against future spam attacks.

Pros

Great overall vision on how to build training and resources for better secuirty
Allows for presonalized focus on individuals and how to give them better, more focused training.
Allows to show leadership trends and patterns in graphical form

Cons

The spam control is most reliant on human interaction to make it effective. It would be nice to see some more proactive controls
The intergration with 365 has been a little more complex than it should

Return on Investment

Every time a staff member doesn't click on a link or open a bad email, saves me hours. Every time!
As a single IT person in the company, having a single point of view on starting a new teaching campaign, look at stats finding out who is struggling the most is worth ever cent.
I love the fact that everything has little to no impact on the network. The integration with our email is fantastic.

Usability

Alternatives Considered

Coro Cybersecurity

Other Software Used

Microsoft 365 Business Premium, Pulseway, Cisco Duo, Sophos Managed Detection and Response

Gary Herman View profile

Public Information Officer at Alexander County (201-500 employees)

Use Cases and Deployment Scope

KnowBe4 PhishER/PhishER Plus helps keep organizations safe from phishing attempts. Outlook users who suspect a phishing email can simply click on the "Phish Alert" button at the top of the program and report the email to their IT department. In today's cybersecurity landscape, this feature can help protect organizations from malicious emails. Associated training modules also help employees learn more about phishing and scams.

Pros

email security
quick access to report phishing attempts
training

Cons

I'd like to see the outcome of emails that I reported.

Return on Investment

threat identification
threat reporting
cybersecurity
training

Usability

Verified User

Engineer in Information Technology (1001-5000 employees)

Use Cases and Deployment Scope

We are using KnowBe4 PhishER in our organization to manage the Spam emails reported by the end-users. We have installed the Phish Alert Button on the end-user's Outlook as a plug-in across the organization. This plug-in is helping them to report any suspicious emails directly to the IT security team. So, whenever they identify any email as malicious, they just report it using the phish alert button in a few clicks and then the reported emails comes to the KnowBe4 PhishER inbox, that is easy to manage by the security team.
The KnowBe4 PhishER is solving our email reporting and managing problem. With a dedicated web platform, it is making our job easy to analyze the reporting emails and with the inbuilt AI feature and multiple third party application integration feature, KnowBe4 PhishER is making our job easy.
Mostly we use the KnowBe4 PhishER for suspicious email reporting and analyzing. We also use this to convert a real phishing attack to simulated phishing test.

Pros

Phish Alert Button makes the email reporting process very easy, we just need to install the plug-in to end-user's outlook and then in a few clicks, they can report any email and that will go to the KnowBe4 PhishER inbox for investigation.
The inbuilt AI feature PhishML of KnowBe4 PhishER helps us to analyze the reported emails very quickly and easily as it already categorizes the emails and provides tags like Clean, Spam, and Threat.
PhishRIP query is a very good feature to run a query and quarantine the suspicious emails that have reached to the end-users inboxes.
With the help of PhishFlip, we can convert a real phishing campaign to a simulated phishing test and test our users.
Third-party tool integration is good as we can add them to take full advantage of applications that can help us to analyze the reported emails more efficiently like VirusTotal.

Cons

The PhishML uses machine learning and AI modules to automatically categorize emails but sometimes it fails and assigns a false tag. They have to work on their AI modules.
The PhishRIP query has a lot of limitations as you can't make changes in the subject line or email address. This will restrict you from searching for similar emails. This will only search the exact same emails.
They do not have any other inbuilt scanning tool that will show you the result. You have to either depend on their AI result or have to take help from third-party applications.

Return on Investment

The KnowBe4 PhishER was purchased by us to provide an easy tool that will help the end-users to report suspicious emails and also help us to analyze all the reported emails in one place and this tool fits our requirements.
The price of KnowBe4 PhishER is not too expensive, with the features it provides and the capabilities this tool has, it is a reasonable price and you will get a discount and extra months as well if you are looking for a long-term contract.
In terms of technical aspects, it detects the pattern, URL and malicious files in the email perfectly.

Alternatives Considered

Mimecast Internal Email Protect

Other Software Used

Mimecast Advanced Email Security, KnowBe4 Security Awareness Training, ManageEngine ADManager Plus, ManageEngine ADAudit Plus, Atera, Microsoft Defender for Office 365, Adobe Acrobat

Verified User

Engineer in Information Technology (1001-5000 employees)

Use Cases and Deployment Scope

KnowBe4's PhishER is a product used to manage spam emails that bypass the email security gateway and reach end-users' email systems. PhishER helps us to manage this issue in a structured way. PhishER does it by using some tools and technologies. First, it uses an email plug-in called Phish Alert Button that installs on end-users' email clients such as Outlook. Once installed, it simplifies the email reporting process by enabling end users to report spam emails directly via the Phish Alert button. So, it makes the email reporting process easy and handy for end users. Once the email is reported, it is automatically collected on the PhishER portal, and the security team can review it. So, by this process, it saves the time and effort of security team. So, PhishER solves two of our problems: email reporting and collecting reported emails in one place.

Pros

KnowBe4's Phish Alert Button effectively collects all reported emails from end-users in one place.
The PhishML feature of PhishER effectively auto-scan reported emails using machine learning technologies, providing a tag for each email based on its body content and other aspects.
The PhishRIP feature works well by allowing the security team to create a query and quarantine all relevant emails from the end user's email system.

Cons

The PhishRIP query can be improved to find other emails apart from the reported one only.
They should provide an option to delete the quarantined emails that are quarantined by the PhishRIP feature.
The PhishML can be improved to produce more accurate results.
More options to integrate PhishER with 3rd party tools.

Return on Investment

PhishER enables us to report phishing emails quickly and easily through the Phish Alert Button email plug-in.
PhishER helps us quarantine suspicious emails quickly by using PhishRIP.
PhishER helps us to investigate the phishing-reported incidents quickly by using PhishML.

Usability

Other Software Used

Adobe Acrobat, Mimecast Advanced Email Security, KnowBe4 Security Awareness Training, VirusTotal, Cybereason Managed Detection & Response (MDR)

Infosec IQ

Proofpoint Threat Response Auto-Pull

Cofense Triage

KnowBe4 PhishER/PhishER Plus

What is KnowBe4 PhishER/PhishER Plus?

Categories & Use Cases

Media