KnowBe4 PhishER/PhishER Plus

Score8.7 out of 10

255 Reviews and Ratings

What is KnowBe4 PhishER/PhishER Plus?

PhishER is presented as a lightweight Security Orchestration, Automation and Response (SOAR) platform to orchestrate threat response and manage the high volume of potentially malicious email messages reported by users. And, with automatic prioritization of emails, PhishER helps InfoSec and Security Operations team cut through the inbox noise and respond to the most dangerous threats more quickly.

Categories & Use Cases

Media

Screenshot of How PhishER Plus enables a critical workstream to help IR teams work together to mitigate the phishing threat and is suited for any organization that wants to automatically prioritize and manage potentially malicious messages.

Centralized Dashboard
A central dashboard provides analysts with a clear look at the most important data
Category average: 8.7
Integration with Other Security Systems
Pre-built integration with other security systems like SIEM and threat intelligence
Category average: 7.7
Company-wide Incident Reporting
Built-in enterprise-level ticketing system to leverage the knowledge of the entire workforce, not just the security team
Category average: 8.4

Live Response for Rapid Remediation
Live remediation response allows incident responders to initiate remediation from anywhere over secure connection
Category average: 7.9
Machine Learning to Prevent Incidents
Incident prevention powered by machine learning with no human intervention
Category average: 8.1

Most Frequent Users

Top 3 industries using KnowBe4 PhishER/PhishER Plus.

Based on HG Insights installation data

View all Reviews

#1 most frequent

Manufacturing

16.6%

25 installations of 151

“KnowBe4 PhishER/PhishER Plus is solving a lot of problem in our organization from arranging spam reported emails to one place and for end users, it is making the email reporting process very easy.”
— Security Trainer, Virginia Transformer Corporation

#2 most frequent

Finance and Insurance

15.9%

24 installations of 151

#3 most frequent

Professional, Scientific, and Technical Services

12.6%

19 installations of 151

Pros

Rapid removal of suspicious emails from user inboxes (PhishRIP)
Automated triage and identification of threats (PhishML)
Significant time savings for security and IT teams

Cons

Limitations in PhishRIP's ability to identify and quarantine emails effectively
Desire for more robust and customizable reporting options
Challenges with integration with third-party security tools

Chris Conlan

IT Infrastructure/Security Engineer in Information Technology at Morrison Bros. Co (51-200 employees)

Use Cases and Deployment Scope

On a daily basis the KnowBe4 PhishER/PhishER Plus system is used by end-users and IT. On the end-users side of things items are reported with the Phish Alert button which in turn get sent to the KnowBe4 PhishER/PhishER Plus platform for IT to investigate.

IT will utilize the platform to deem emails that are uncategorized and need further analysis. The system is also setup to rip emails that are deemed as threat from end-users mailboxes and add emails/domains to the blocklist for Exchange Online.

Pros

Centralized management of all reports phishing emails.
PhishRIP goes through all mailboxes to find reported or auto-categorized Threat messages and pulls it from them.
Utilize PhishML (machine learning) to auto-classify emails to save time on going through hundreds of emails a week.
Reporting on what types of emails are getting categorized (Threat/Spam).

Cons

My main gripe is I still can't go to KnowBe4 PhishER/PhishER Plus directly and have to log into the KnowBe4 training platform to get to it.
More integrations into security vendors such as Sophos Intelix.

Return on Investment

PhishRIP mitigates active phishing attacks. Email is deemed as a threat it is pulled from all mailboxes that have it.
Frees up IT resources by not having to go through every single email manually.

Usability

Alternatives Considered

Proofpoint Security Awareness Training, Hoxhunt and Check Point Email Security

Other Software Used

Scale Computing Platform

Chad Strohschein

Information Technology Lead in Information Technology at Alberta College of Paramedics (11-50 employees)

Use Cases and Deployment Scope

We are using KnowBe4 for educational purposes, as well as logging phishing attempts to the orgainzation. As a small IT department, it has been a fantastic tool to get a overall vision of stengths and areas that need to be enhanced. We can then take information and provide better feedback to KnowBe4 to allow better protection against future spam attacks.

Pros

Great overall vision on how to build training and resources for better secuirty
Allows for presonalized focus on individuals and how to give them better, more focused training.
Allows to show leadership trends and patterns in graphical form

Cons

The spam control is most reliant on human interaction to make it effective. It would be nice to see some more proactive controls
The intergration with 365 has been a little more complex than it should

Return on Investment

Every time a staff member doesn't click on a link or open a bad email, saves me hours. Every time!
As a single IT person in the company, having a single point of view on starting a new teaching campaign, look at stats finding out who is struggling the most is worth ever cent.
I love the fact that everything has little to no impact on the network. The integration with our email is fantastic.

Usability

Alternatives Considered

Coro Cybersecurity

Other Software Used

Microsoft 365 Business Premium, Pulseway, Cisco Duo, Sophos Managed Detection and Response

Gary Herman View profile

Public Information Officer at Alexander County (201-500 employees)

Use Cases and Deployment Scope

KnowBe4 PhishER/PhishER Plus helps keep organizations safe from phishing attempts. Outlook users who suspect a phishing email can simply click on the "Phish Alert" button at the top of the program and report the email to their IT department. In today's cybersecurity landscape, this feature can help protect organizations from malicious emails. Associated training modules also help employees learn more about phishing and scams.

Pros

email security
quick access to report phishing attempts
training

Cons

I'd like to see the outcome of emails that I reported.

Return on Investment

threat identification
threat reporting
cybersecurity
training

Usability

Giovanni Porras

IT Manager in Information Technology at Stanly Ranch (201-500 employees)

Use Cases and Deployment Scope

We use KnowBe4 PhishER/PhishER Plus for security training for our team members, for sending phishing tests, and to test our team members' skills to identify phishing emails. It also keeps track of failures and successes. We can look at reports of completed and pending trainings. Also, separating team members between different properties for statistics.

Pros

Cybersecurity training courses
Send test phishing emails to team members
Manage users as a multi-property environment

Cons

Reports are not the best, they work but could be nice more personalization
Scheduling the reactivation of a users automatically

Return on Investment

Having a well knowledge team reduces risk

Usability

Other Software Used

Google Workspace, Adobe Acrobat Reader, JumpCloud

Stephen Rilee View profile

Senior Director Information Technology in Information Technology at Empire Communities (501-1000 employees)

Use Cases and Deployment Scope

We have been using KnowBe4 for our security awareness training for 4 years, and it has met or exceeded our expectations. As cybersecurity threats continue to evolve, it’s crucial to equip employees with the right knowledge to identify and prevent attacks—and KnowBe4 makes that process seamless, engaging, and effective. I recommend KnowBe4 to any organization looking to enhance security awareness, reduce human error, and strengthen their cybersecurity posture. It’s an essential tool in today’s cyber-threat landscape.

Pros

User Friendly
Training Modules
Phishing Simulations
Great Customer Support

Cons

More training content
Better Reporting

Return on Investment

No guessing with the PhishER
PhishRIP removes threats from other inboxes before they are a problem

Usability

Alternatives Considered

MetaCompliance

Infosec IQ

Proofpoint Threat Response Auto-Pull

Cofense Triage

KnowBe4 PhishER/PhishER Plus

What is KnowBe4 PhishER/PhishER Plus?

Categories & Use Cases

Media