KnowBe4 PhishER/PhishER Plus

Score8.9 out of 10

251 Reviews and Ratings

What is KnowBe4 PhishER/PhishER Plus?

PhishER is presented as a lightweight Security Orchestration, Automation and Response (SOAR) platform to orchestrate threat response and manage the high volume of potentially malicious email messages reported by users. And, with automatic prioritization of emails, PhishER helps InfoSec and Security Operations team cut through the inbox noise and respond to the most dangerous threats more quickly.

Categories & Use Cases

Media

Screenshot of How PhishER Plus enables a critical workstream to help IR teams work together to mitigate the phishing threat and is suited for any organization that wants to automatically prioritize and manage potentially malicious messages.

Centralized Dashboard
A central dashboard provides analysts with a clear look at the most important data
Category average: 8.4
Live Response for Rapid Remediation
Live remediation response allows incident responders to initiate remediation from anywhere over secure connection
Category average: 8.1
Machine Learning to Prevent Incidents
Incident prevention powered by machine learning with no human intervention
Category average: 7.8

Integration with Other Security Systems
Pre-built integration with other security systems like SIEM and threat intelligence
Category average: 7.1
Company-wide Incident Reporting
Built-in enterprise-level ticketing system to leverage the knowledge of the entire workforce, not just the security team
Category average: 7.2

#1 most frequent

Manufacturing

16.8%

21 installations of 125

“The Automation element of the KnowBe4 PhishER/PhishER Plus' PhishRIP has proved invaluable.”
— IT Operations Specialist, Quality Dining, Inc. (51-200 employees)

#2 most frequent

Finance and Insurance

16.0%

20 installations of 125

#3 most frequent

Professional, Scientific, and Technical Services

11.2%

14 installations of 125

Pros

Automated removal of suspicious emails (PhishRIP)
Significant reduction in incident response time and manual effort
Enhances security posture through integrated phishing training

Cons

PhishRIP query limitations and email deletion options
Reporting features are basic or lack clarity for non-technical users
Limited third-party integration options, particularly with SIEM systems

Giovanni Porras

IT Manager in Information Technology at Stanly Ranch (201-500 employees employees)

Use Cases and Deployment Scope

We use KnowBe4 PhishER/PhishER Plus for security training for our team members, for sending phishing tests, and to test our team members' skills to identify phishing emails. It also keeps track of failures and successes. We can look at reports of completed and pending trainings. Also, separating team members between different properties for statistics.

Pros

Cybersecurity training courses
Send test phishing emails to team members
Manage users as a multi-property environment

Cons

Reports are not the best, they work but could be nice more personalization
Scheduling the reactivation of a users automatically

Return on Investment

Having a well knowledge team reduces risk

Usability

Other Software Used

Google Workspace, Adobe Acrobat Reader, JumpCloud

Stephen Rilee View profile

Senior Director Information Technology in Information Technology at Empire Communities (501-1000 employees employees)

Use Cases and Deployment Scope

We have been using KnowBe4 for our security awareness training for 4 years, and it has met or exceeded our expectations. As cybersecurity threats continue to evolve, it’s crucial to equip employees with the right knowledge to identify and prevent attacks—and KnowBe4 makes that process seamless, engaging, and effective. I recommend KnowBe4 to any organization looking to enhance security awareness, reduce human error, and strengthen their cybersecurity posture. It’s an essential tool in today’s cyber-threat landscape.

Pros

User Friendly
Training Modules
Phishing Simulations
Great Customer Support

Cons

More training content
Better Reporting

Return on Investment

No guessing with the PhishER
PhishRIP removes threats from other inboxes before they are a problem

Usability

Alternatives Considered

MetaCompliance

Verified User

Manager in Information Technology (1001-5000 employees employees)

Use Cases and Deployment Scope

We use KnowBe4 PhishER/PhishER Plus for phishing campaigns, end-user training, and email analysis with the PhishER add-on.

Pros

Easy phishing campaign design and tracking
Quality end-user training modules
User-friendly interface to analyze reported emails

Cons

Provide an option for deeper training for users with privileged roles and system access
Allow notetaking/documentation capabilities in the PhishER platform

Return on Investment

isolating email threats more quickly and accurately
mitigating active phishing attacks impact

Usability

Alternatives Considered

Barracuda Email Protection

Other Software Used

Microsoft 365

Verified User

Analyst in Information Technology (5001-10,000 employees employees)

Use Cases and Deployment Scope

We use KnowBe4 PhishER/PhishER Plus as our primary platform for handling reported phishing emails. All emails flagged by employees across the organization are automatically routed to KnowBe4 PhishER/PhishER Plus, which streamlines the investigation process by automating certain analysis tasks. This allows our security engineers to review and respond to reported emails more efficiently.Additionally, KnowBe4 PhishER/PhishER Plus provides integration capabilities through webhooks, enabling us to share processed data with other applications. For example, we can automatically update blocklists in our email security systems based on confirmed phishing indicators.

Pros

Automated investigation and response
Webhook integration
PhishRIP capabilities

Cons

Reporting is basic
Sandboxing is not available
Possibility to assign reported mails to users for futher investigation

Return on Investment

Freed up resources by automating analysis and auto block list updating
Quarantined malicious mails in employees mailboxes which led to NO compromise

Usability

Other Software Used

CrowdStrike Falcon, CrowdStrike Falcon Identity Protection, Cisco Secure Email Threat Defense

Verified User

Administrator in Information Technology (1001-5000 employees employees)

Use Cases and Deployment Scope

I have been a user of KnowBe4 PhishER/PhishER Plus for over three years. The product has tremendously saved our team time. It has enhanced our ability to respond to emails more quickly and efficiently if categorized a threat. KnowBe4 PhishER/PhishER Plus as I mentioned earlier saves us hours a month so we may focus on other Cyber and security items.

Pros

Categorizing the email if a threat, spam or clean
RIP function is fantastic removing the threat from users inboxes

Cons

I would if possible like to see an increase on speed when running a filter for who has a message that you may have to remove from inboxes.

Return on Investment

Freed up incident response resources so the team could concentrate on other initatives
Significantly increased our isolation of email threats and communicating back to the user
ROI is hours per month vs doing it another method to determine if an email is a threat.

Usability

Other Software Used

Palo Alto Networks Advanced Threat Prevention, Palo Alto Networks Advanced URL Filtering, Sentinel

Infosec IQ

Proofpoint Threat Response Auto-Pull

Cofense Triage

KnowBe4 PhishER/PhishER Plus

What is KnowBe4 PhishER/PhishER Plus?

Categories & Use Cases

Media