KnowBE4 PhishER Review.
Before KnowBe4 PhishER, our SOC analysts would manually investigate hundreds of suspect/phishing emails reported by end-users that would …
Starting at $0.50 per month (billed annually) per seat
View PricingOverview
What is KnowBe4 PhishER/PhishER Plus?
PhishER is presented as a lightweight Security Orchestration, Automation and Response (SOAR) platform to orchestrate threat response and manage the high volume of potentially malicious email messages reported by users. And, with automatic prioritization of emails, PhishER helps InfoSec and…
Recent Reviews
How KnowBe4 PhishER/PhishER Plus Differs From Its Competitors
Awards
Products that are considered exceptional by their customers based on a variety of criteria win TrustRadius awards. Learn more about the types of TrustRadius awards to make the best purchase decision. More about TrustRadius Awards
Popular Features
- Company-wide Incident Reporting (52)7.878%
- Live Response for Rapid Remediation (55)7.878%
- Centralized Dashboard (62)7.878%
- Machine Learning to Prevent Incidents (54)7.777%
Reviewer Pros & Cons
Pricing
3001-5000 Monthly Pricing Per Seat
$0.50
Cloud
per month (billed annually) per seat
2001-3000 Monthly Pricing Per Seat
$0.55
Cloud
per month (billed annually) per seat
1001-2000 Monthly Pricing Per Seat
$0.65
Cloud
per month (billed annually) per seat
Entry-level set up fee?
- Setup fee optional
For the latest information on pricing, visithttps://www.knowbe4.com/pricing-phisher
Offerings
- Free Trial
- Free/Freemium Version
- Premium Consulting/Integration Services
Features
Return to navigation
Product Details
- About
- Integrations
- Competitors
- Tech Details
- Downloadables
- FAQs
What is KnowBe4 PhishER/PhishER Plus?
PhishER is a platform for managing the high volume of potentially malicious email messages reported by users. With automatic prioritization of emails, PhishER aims to help InfoSec and Security Operations team cut through the inbox noise and respond to the most dangerous threats more quickly.
PhishER is a web-based platform with critical worksteam functionality that serves as a phishing emergency room to identify and respond to user-reported messages. With PhishER, users are able to automate the workstream of 90% of reported emails that are not threats, freeing up incident response resources.
PhishER is available as a stand-alone product or as an optional add-on for KnowBe4 customers that want to automatically prioritize and manage potentially malicious messages that were reported through the KnowBe4 Phish Alert Button. PhishER Plus is an upgraded subscription level that includes all of the features from PhishER with additional enhancements and AI-validated crowdsourced data. PhishER Plus was developed to help supercharge an organization’s email security defenses. It does this by automatically blocking phishing attacks that traditional Security Email Gateways (SEGs) miss and removes these missed threats from users’ inboxes.
KnowBe4 PhishER/PhishER Plus Features
Incident Response Platforms Features
- Supported: Company-wide Incident Reporting
- Supported: Integration with Other Security Systems
- Supported: Centralized Dashboard
- Supported: Machine Learning to Prevent Incidents
- Supported: Live Response for Rapid Remediation
Additional Features
- Supported: Automatic Message Prioritization
KnowBe4 PhishER/PhishER Plus Screenshots
KnowBe4 PhishER/PhishER Plus Video
Introduction to PhishER
KnowBe4 PhishER/PhishER Plus Integrations
KnowBe4 PhishER/PhishER Plus Competitors
KnowBe4 PhishER/PhishER Plus Technical Details
| Deployment Types | Software as a Service (SaaS), Cloud, or Web-Based |
|---|---|
| Operating Systems | Unspecified |
| Mobile Application | No |
| Supported Countries | Global |
KnowBe4 PhishER/PhishER Plus Downloadables
Frequently Asked Questions
PhishER is presented as a lightweight Security Orchestration, Automation and Response (SOAR) platform to orchestrate threat response and manage the high volume of potentially malicious email messages reported by users. And, with automatic prioritization of emails, PhishER helps InfoSec and Security Operations team cut through the inbox noise and respond to the most dangerous threats more quickly.
Cofense Triage, Infosec IQ, and Proofpoint Threat Response Auto-Pull are common alternatives for KnowBe4 PhishER/PhishER Plus.
Reviewers rate Company-wide Incident Reporting and Centralized Dashboard and Live Response for Rapid Remediation highest, with a score of 7.8.
The most common users of KnowBe4 PhishER/PhishER Plus are from Mid-sized Companies (51-1,000 employees).
Comparisons
Compare with
Reviews and Ratings
(160)Attribute Ratings
Reviews
(1-25 of 41)Companies can't remove reviews or game the system. Here's why
March 19, 2024
KnowBE4 PhishER Review.
Before KnowBe4 PhishER, our SOC analysts would manually investigate hundreds of suspect/phishing emails reported by end-users that would slip our perimeter defense. After implementing the PhishER SOAR platform, we could automate the process end-to-end by categorizing the reported emails as benign, spam, and threat emails, including integration with our ticketing platform. This has saved hundreds of our security analysts' hours and enabled them to act immediately on critical threat phishing emails.
- Categorization of suspect emails to Benign, SPAM and Threat.
- Integration to VirusTotal, Ticketing platform.
- Smart Dashboards.
- Canned auto - response email to end-users.
- AI/ML algorithm could be improved to reduce false positives and increase auto-resolved suspect emails.
March 18, 2024
KnowBe4 PhishER - security made simple
We use it as a filtering tool that our end users can employ. Instructed to use the Phish Alert Button on ANY questionable emails allows us to get them into a habit of doubt if not an expected email. KnowBe4 PhishER analyzes and makes a determination on about 70% but holds for IT to review manually the rest. This can be adjusted but we have thresholds high to reduce risk of something slipping through. What this has accomplished for us two fold. 1. it makes it less time consuming to report a questionable email to IT and 2. allows the users to put into practice with a simple click all the "think before you click" training we use.
- Automatically evaluates reported emails
- Once it determines a threat, it pulls the email from all other mailboxes and quarantines them
- One button block list can be set up for repeat senders
- If an email is determined to be clean, a button to notify the reporter that it was clean and that they could find it in the deleted folder, with reference to the email would be nice.
March 15, 2024
KnowBe4 PhishER works for me!
We use KnowBe4 PhishER to help streamline the process of going through suspicious emails. The main problem being the time required to analyize and classify emails that come into the helpdesk as questionable. PhishER takes a good portion of that workload off of our staff and quickly classifies the known threats and spam emails so that we're only left with a handful of emails to manually go through. In addition the PhishER platform provides a ripping procedure to go out and remove those malicious emails from any other mailbox with those bad emails.
- User Interface is easy to use.
- Saves time by classifying emails as malicious or not.
- In PhishRip portion would like to see more details regarding the message that is being ripped.
March 15, 2024
Happy with PhishER
We use KnowBe4 PhishER to prioritize and streamline our response to reported phish alerts by our users. Once the user spots a phish and uses the phish alert icon, the email is sent to our PhishER platform. We have rules set up to spot and respond to certain reported emails such as SPAM and Clean emails. This takes a lot of burden off of our team and can really concentrate on real phishing emails. PhishER also highlights header information so we can look right where we need to look.
- Automates phish report response
- Highlights email header information
- Saves time for our team.
- The rule setup could be easier to follow
- Make it so you don't have to click back and forth with manually looking at emails
- Make the email quarantine longer than 30 days.
March 13, 2024
KnowBe4 PhishER - an easy and robust application
Score 10 out of 10
Vetted Review
Verified User
KnowBe4 PhishER offers an "all in one" nice application for training, security, and testing exercises (e.g., "phishing"). My company has been using KnowBe4 PhishER for a year and half, and the internal feedback on this product is quite positive. The training sessions are interesting and keep the team's attention.
- Customer Support; especially when we brough the application on board. The attention to detail, instruction, and help KnowBe4 team gave us is quite good!
- A wide variety of trainings, over a multitude of topics.
- Phishing Tests; "set it and forget" with metrics!
- For start-up biotech/pharmaceuticals, I think KnowBe4 PhishER is the perfect addition!
Being in the financial services industry, our employees have to always be on alert for phishing and social engineering scams. KnowBe4 PhishER gives our security team the visibility it needs to quickly identify and remove potential email-based threats. It protects our organization and saves us a lot of time, money, and headaches.
- Simple, easy to use. Minimal training required.
- Helps you focus on the most important vs. reviewing thousands of emails.
- Doesn't require a full-time resource.
- Ability to integrate/share data with other SIEM solutions.
March 13, 2024
KnowBe4 PhishER is a great service
Having been the victim of ransomware attacks at my previous organization, I knew the importance of having my users trained to know the threats they would be facing in the digital world. That's why I chose KnowBe4 PhishER. We use KnowBe4 PhishER to train users on what a phishing attempt looks like, what to do if they see something that doesn't look right, and how to stay safe in a digital world. This keeps our network safer from outside threats.
- Allows users to notify admins of a phishing email
- Helps us train our users on proper email usage
- Gives us information on what kind of emails are being reported
- KnowBe4 PhishER could have a simpler login process
- Email notifications would be nice
- A phish confidence level on the emails reported could be useful
We use KnowBe4 PhishER to allow staff to report emails they find suspicious to us for review. This works very well and helps to train people in scam and phishing emails. We also use it as a secondary defense system, we have a security system to block emails that are malicious or include profanity, etc. but when that email system doesn't block a certain email, KnowBe4 PhishER can be used by the staff member to report and quarantine the email. We can then use it to block any further emails from coming through.
- Reporting Emails
- Blocking Domains and Senders
- Virus Total Built In
- Discussion with other Admins
- Ability to discuss with User (Not Just Admins)
- Ability to Block Senders and Domains for Longer than 60 days
- Ability to view information such as IP Address, Estimated Location at a glance
March 11, 2024
PhishER - Don't Phone Home Without It.
The PhishER platform is an invaluable tool for our organization as it gives us real time insight when we are 'under attack' by a bad actor (or actors). We are able to identify trends, targeted users and methods used by the bad actors in trying to gain access or steal information. On top of this, the PhishRIP feature integrates with our GSuite and scans/quarantines other instances of reported emails that are deemed malicious.
- The machine based learning does a great job of correctly identifying safe vs. malicious emails.
- PhishRIP does an excellent job of finding and quarantining similar emails from other users accounts.
- The reports give us a real time insight into trends and campaigns launched by bad actors.
- Somtimes the PAB (or Phish Hook) has to have its permissions revalidated. This is a quick fix, but takes some knowledge.
- I honestly can't think of any other shortcomings at this time.
- See #1
We use it to facilitate in the review of reported suspected phishing emails. It provides ease of review as all necessary information needed to determine a suspected email as phishing is readily available. It also provides automation for known false positives.
- automation tasks for known false positives
- providing information for phishing email determination
- informative dashboard
- setting up automated tasks
- rooms is not really understood
- customizable reports
December 19, 2023
KnowBe4 PhishER - Rapid and efficiency phishing response
KnowBe4 PhishER perfectly solved our issues with responding to phishing emails. Previously, responding to malicious emails was a completely manual process, and we could not respond nearly as quickly or efficiently as we wanted to.
With KnowBe4 PhishER, the process is now highly automated, and we can remove phishing emails from dozens of inboxes in just a few clicks.
Our users appreciate it because they receive much quicker feedback on clean emails.
IT appreciates it because it makes our job a breeze and lets us focus on the important elements of incident response.
Management appreciates it because it helps keep our institution safer and gives them excellent reporting metrics.
With KnowBe4 PhishER, the process is now highly automated, and we can remove phishing emails from dozens of inboxes in just a few clicks.
Our users appreciate it because they receive much quicker feedback on clean emails.
IT appreciates it because it makes our job a breeze and lets us focus on the important elements of incident response.
Management appreciates it because it helps keep our institution safer and gives them excellent reporting metrics.
- Quick phishing email review
- Automated analysis and tagging
- Immediate quarantine and removal
- Quicker / more efficient PhishRIP
- Improved "Find Similar Messages" filtering options
- Improved notification options
December 19, 2023
You've got to get KnowBe4 PhishER
I love the AI behind this tool. It monitors and detects my phishing emails. It's an awesome tool that compliments our other endpoint solutions.
- Blocks emails based on sender, attachments and URLs
- Pulls known phishing emails
- Converts phishing emails to training emails
- Integrates with Outlook
- Preview attachments when blocking them
- Send emails externally when using actions
- More powerful PhishRIP
December 18, 2023
PhishER, will probably save your Admin time.
PhishER is a KnowBe4 addon that works alongside the Phish Alert Button that KnowBe4 has. Once we hit where there were more emails being reported from users than easily able to manage, we needed this additional solution to help alert us to what was probably a Threat. This probably is helping to address our time more efficiently by pointing out the high Threats, as well as auto responding to end users on known clean emails they have reported.
- Find Threat emails
- Auto respond to clean emails the end user needs.
- Lowers the number of critical emails admins need to work with.
- Removes Threat emails directly from the end users mailbox.
- Query isn't granular enough to pull emails from mailboxes for spam that have very little information. Like no subject, no body, no attachment. It requires at least 2 items to query.
- It needs an additional Virus Total account. Knowbe4 should build that into the back end and just charge accordingly for the enterprise connection. Felt blindsided to the additional cost needed later.
- Some of the rules and actions are more complicated to setup than it should be. Which could be addressed for parts of that with a simplified interface and more intuitive for the person to setup. Someone that works with the product every day probably understands it, but as much the setup is setup and forget you need to relearn how that might work the next time you need to make changes. It could be less programmer like and more user friendly.
December 18, 2023
Love KnowBe4 and PhishER!
We use it so people can click on messages to let us know if they are spam or threats. We've done extensive cybersecurity training with our users so it's been helped extend that. People are pretty good with it. Once in awhile we have a clean one that looks sketchy but I just send those back.
- Lets the user know that the message has been sent to KnowBe4 and IT
- Gives me a score on what they think the message is (clean, spam, threat)
- Pulls message out of others inboxes
- Might be nice to give users scores on how accurate they are with using it
- It would be nice if it recommended certain messages if someone didn't check it
December 18, 2023
A great help to skeleton crew IT departments!
PhishER is used to automate the detection, response, and remediation of phishing emails as well as triage messages in general. It automates the process of breaking down the email headers and makes a MUCH faster and simpler response for a small IT department.<br><br>PhishRIP and PhishFlip are superb addons that allow us to scan our entire Exchange 365 environment for other copies of phishing mail and instantly purge them from other user's mailboxes that haven't reported them yet - and then turn around and use that very message as a training template with KnowBe4 to test users.<br><br>We can automate processes, scanning, detection, message flagging, and alerting from PhishER - it takes a bit to get set up well, but then it's cheaper than an FTE being hired on to help manage it all!
- automated message header decoding
- remote removal/deletion of phishing mails from entire mail environment
- fast and easy false positive/clean identification
- easier customization of automation rules
- better end-user feedback to message submitter of submission status
December 18, 2023
PhishER saves time and reduces risk
This is a great tool for automatically handling phishing emails that users report via the Phish Alert button that PhishER adds into the GMail client. We have set up processing rules that automatically remove the reported email from all other users' mailboxes when PhishER is confident the reported email is actually a phish. For emails that it's not certain about, there's a simple web portal flow that lets admins check the email, mark it accordingly, and run the remove-from-mailboxes action as needed.
- Automates handling of reported phishing emails
- Allows admins to check what's been done
- Allows admins to manually handle emails the AI isn't sure about
- The workflow for manually handling phish removal from all mailboxes is a bit "clicky"
- Web UI can be a little slow
- PhishER Plus (the shared blocklist) doesn't support GMail, only 365
December 18, 2023
Quick Thoughts
To evaluate potential email phisha attempts and quickly remove from others inbox before being read. Also used to flip to a simulation
- Clean Users Inbox from threats
- Alerts me in a timely manner
- Scans
- Simply use even more
- Continue follow up training
December 18, 2023
Catch Fake Emails with PhishER!
PhishER is one of the primary tools we use to combat phishing emails and users potentially getting viruses. We do our best to train our users to click on the PAB (Phish Alert Button) whenever they see a suspicious email. We stress security by using 2FA, changing passwords on a regular basis, and teaching people to "think before they click".
We've got great buy-in from most management regarding issues like this as well. The best part of the software is being able to run queries on submitted emails and then quarantining and deleting said emails.
We've got great buy-in from most management regarding issues like this as well. The best part of the software is being able to run queries on submitted emails and then quarantining and deleting said emails.
- Allows the removal of Malicious Emails
- Groups similar emails into categories for email reporting
- Also allows you to see who has submitted the most phishing/spam/clean emails within reports.
- GUI Based search rules, the current way to create rules for specific the current way to create a rule is using "yara" conditions, which for someone that is not familiar with them can be cumbersome.
- A wider way to find similar messages. Currently you have to choose from 2 of 5 options, and you don't always find malicious emails when using just subject/sender (when the sender is clearly the same for a targeted phishing campaign).
- SOMETIMES the speed with which a submitted email hit's the PhishER Inbox can be longer than I would like (closer to an hour) and others it is within seconds.
December 18, 2023
New Product. Still getting up to speed. Huge potential.
My goal was tight integration with Microsoft 365 and quick blocking of phishing campaigns. Previously, blocking was a manual process, but with KnowBe4 PhishER - I wanted reporting of real threats to trigger protective action.
- Integrate with M365
- Integrate with KnowBe4 Phish Reporting
- Provide feedback to staff
- Setup of rules and actions is still a little confusing.
- I don't want to create too much traffic for the end user - need to tweak.
- I still want to see what users are submitting - a little tricky to figure out, but getting help.
September 22, 2023
KnowBe4 PhishER is the BEST product available
We were looking for a way to ensure all employees are up to date in all of the security trainings to help keep our competitive advantage. KnowBe4 PhishER has enabled us to keep automated track of who has taken what training seamlessly and efficiently. We really enjoy the content of the courses and the flexibility of training.
- Training content is well crafted and professional
- Reporting is quick and easy
- They make learning fun and entertaining
- Too many videos/training videos are released at once
- Inside Man has been going on tooooooooo long
August 24, 2023
KnowBe4 PhishER is a good tool at a good price
KnowBe4 PhishER feature is a good tool because it puts a lot of automation into the process to where it saves us time. With our previous product, it was very manual and time consuming. KnowBe4 PhishER lets us create rules and can automate tasks that save us time. The PhishRIP function is great because it can proactively go back and remove emails from ones already delivered to inboxes.
- Automation
- good detection rules
- ability to integrate with o365
- support is very good
- Since we are new to the product, I do not have anything for this option.
We use KnowBe4 PhishER to help staff determine if certain email messages are legitimate, spam or malicious in nature. We also use it to track the number of messages that employees click to report as possible malicious or spam messages.
- Assist the InfoSec team in determining if a message is legitimate or not.
- Easy was to read headers and raw data of messages
- Automation of determining if a message is legitimate.
- Setting up initial settings can be daunting without their support
- The Search query can be difficult to learn until you gain the experience
- Determining how to setup automatic messages back to employees initially
August 24, 2023
Great product for Phishing remediation
KnowBe4 PhishER helps to address the constant influx of reported phishing emails that our end-users are exposed to. KnowBe4 PhishER allows for our technicians to rapidly respond to these reports to investigate and automate actions to help protect our end users from malicious emails.
- Automation
- Email details
- Integration with other APIs
- Further customization of auto-actions would be beneficial
August 07, 2023
PhishER is wonderful
We use PhishER for the Phish Alert Button that we were able to add to email. This has helped immensely with employees being able to report it with that button instead of forwarding any email to IT. The dashboard features for PhishER are nice and it will automatically run a virus report on any attachments or links in the email.
- Phishrip
- Email and attachment scans
- Able to set up rules very easily
- More integration with Gsuite
- Creating blocklist for Gsuite
- Rooms section on the dashboard is slow to load
August 04, 2023
KnowBe4 PhishER makes phishing email remediation a breeze
We primarily use KnowBe4 PhishER to perform remediation and forensics on phishing emails in our organization. KnowBe4 PhishER gives us the ability to easily analyze emails, headers, and also strip the malicious content from emails as well as remove similar emails from our entire org's email servers. Automated remediation is our biggest use case.
- Email forensics
- Automated remediation
- Converting real phishing emails into test emails
- Navigation and UI can be a little clunky to use
- Better training on usage