Skip to main content
TrustRadius
KnowBe4 PhishER/PhishER Plus

KnowBe4 PhishER/PhishER Plus

Overview

What is KnowBe4 PhishER/PhishER Plus?

PhishER is presented as a lightweight Security Orchestration, Automation and Response (SOAR) platform to orchestrate threat response and manage the high volume of potentially malicious email messages reported by users. And, with automatic prioritization of emails, PhishER helps InfoSec and…

Read more
Recent Reviews

Phishing Hero!

10 out of 10
March 13, 2024
Incentivized
We use KnowBe4 PhishER with our KMSAT. KnowBe4 PhishER is basically helping us to resolve our biggest security problem and that is …
Continue reading
Read all reviews

How KnowBe4 PhishER/PhishER Plus Differs From Its Competitors

Time Savings

With KnowBe4 PhishER, we freed up incident response analysts' time to focus on more critical threat emails and associated mitigation actions. This has freed up analyst time, and they can now spend it on projects and security training, primarily related to cloud security technology. PhishER's quick …
Continue reading

Time Savings

By handling 75% of emails that are reported with the PAB, analyzing and replying to the reporter without intervention, KnowBe4 PhishER has saved us hours and hours of handling and research time. Even the 25% or less amount of emails we have to manual review are quicker because KnowBe4 PhishER has …
Continue reading

PhishER Capabilities

We have attempted to utilize PhishRIP, but I'm not sure it's found a lot of duplicates to pull from our email. We also utilize the KnowBe4 PhishER Blocklist and PhishML. We have not turned on PhishFlip at this point.
Continue reading

Time Savings

It's pretty simple. It saves time by managing whether emails are threats or spam. If a user clicks on a suspicious email and Knowbe4 knows that, then a technician doesn't have to review the email.
Continue reading

Time Savings

Everyday we are getting phishing, spam, and clean emails reported via the KnowBe4 phish alert button. Auto resolving spam and clean emails help us prioritize and streamline our response to valid phishing emails. This frees up our team for blocking real threats and investigating emails that might …
Continue reading

PhishER Capabilities

We use PhishRIP, PhishFlip, and PhihsER Blocklist. These tools help us keep everything in one place. PhishRIP pulls threats that were reported by users via the Phish Alert Button from other mailboxes to keep these from getting clicked on. PhishFlip helps us use real phishing emails as phishing …
Continue reading

Time Savings

As my team gets more used to using the PAB, they are less likely to reach out to me specifically to ask about security issues or phishing emails. Users are able to report issues without taking time to write a message, and can trust that if I need to see it I will.
Continue reading

PhishER Capabilities

I am currently using PhishRIP to collect and search for malicious emails. I am looking into other capabilities but am still working through onboarding myself and my team fully.
PhishRIP has helped me cut down on noise for email reporting and helps me be proactive in trying to quarnatine emails from …
Continue reading

Time Savings

With KnowBe4 PhishER's capability of recognizing threats when they are reported, the reports are automatically processed and employees receive real-time feedback to the reports they have made without us having to intervene. The automatic resolution of threats has been a huge timesaver, because it …
Continue reading

PhishER Capabilities

We are using PhishRip, and the blocklist capability currently. Being able to utilize the efforts of all employees to create a comprehensive blocklist has been great. The ability to search for threats and RIP them from inboxes has also been a huge help. Finding those identified threats and removing …
Continue reading

Time Savings

Instead of depending on individuals to alert our security team and handling incidents one email at a time, we can see & manage threats at the organization level, even removing them before one of our team members even sees an email.
Continue reading

Time Savings

We're able to have potential phishing emails go to a centralized dashboard. There, they can sit while we assign a rating and the possibility of a phishing attempt. This saves our organization time and energy so we can focus on the critical side of business. We're also able to let users know …
Continue reading

Time Savings

Considering that the company has more than 30,000 employees, the number of phishing emails received daily is very high. Only thanks to the KnowBe4 PhishER was it possible to manage the workload automatically, efficiently and quickly, drastically reducing the number of users who click on malicious …
Continue reading

PhishER Capabilities

My organisation have implemented the PhishML machine learning that allow to automatically categorise email and react based on type of category and tags, creating rules and actions is easy to respond to the users if the emails is a threats or spam or clean. We use also the PhishFlip very useful to …
Continue reading

Time Savings

It has saved a lot of time in terms of reporting emails from our user side and from the security team perspective as well. We got a centralized dashboard where we can see all reported emails instead of looking for reported emails in the outlook. With the AI feature of KnowBe4 PhishER, it is …
Continue reading

PhishER Capabilities

We have implemented PhishML for automatic categorization of reported emails. We have PhishRIP to see how many number of other users have received the same phishing email that one user reported, so that we can quarantine all emails. PhishFlip is helping us to test our users based on a real phishing …
Continue reading

Time Savings

KnowBe4 PhishER has allowed us to focus on other core security related issues by allowing users to report emails and having KnowBe4 PhishER identify what type of threat the email is and what must be done with it. We can then go through a update any we believe were incorrectly identified, but this …
Continue reading

PhishER Capabilities

We have implemented PhishRIP as it easily allows KnowBe4 PhishER to identify duplicate scam/phishing emails in other users mailboxes and quarantines them. We also use Blocklist regularly to ensure further emails from the same senders are blocked from our network and users mailboxes. We finally use …
Continue reading

Time Savings

The machine learning portion of PhishER does a great job of identifying good, bad, and suspicious actors and brings all of them to our attention in an easy to use dashboard. The reporting of bad actors is quick, and the response to mitigate is fast as well.
Continue reading

PhishER Capabilities

We currently utilize the PhishML to help us determine whether an email is a legitmate threat, spam, or otherwise suspicious. All without us having to individually review every submission. PhishRIP does the leg work of removing legitimate threats from all inboxes (or sub folders) automatically. …
Continue reading

Time Savings

Using KnowBe4 PhishER, our organization has streamlined the incident response process, distinguishing real threats from harmless emails efficiently. This precision has saved us substantial time, estimated at a 55% reduction in sifting through false positives. The time saved is reinvested into …
Continue reading

PhishER Capabilities

As of now, our organization hasn’t implemented any of these specific capabilities like PhishML, PhishRIP, PhishFlip, or the PhishER Blocklist from KnowBe4’s PhishER. However, recognizing their potential to automate threat remediation, transform threats into training, and customize security …
Continue reading

Time Savings

Again, don't have hard numbers but we have seen spam/malicious emails reduced, such that my team does not have to deal with them. I would estimate between a 10-20% reduction.
Continue reading

Time Savings

We have a very small team, and KnowBe4 PhishER has saved us time identifying and managing messages. With KnowBe4 PhishER, we have a comprehensive dashboard that allows us to take direct action and measures that also impact future potential attacks and attempts. Before KnowBe4 PhishER, we had …
Continue reading

PhishER Capabilities

We are using the standard capabilities of KnowBe4 PhishER, and with the help of KnowBe4 products specialists, have configured it optimally for our organization. We utilize KnowBe4 PhishER Blocklist to block undesired senders that based on their profile and messages, are obviously attacking us. We …
Continue reading

Time Savings

Yes we use the automated actions feature so that emails that are found with a high confidence to be "Clean" or "Spam" & not "Threat" are automatically resolved with an email automatically sent to the reporter notifying them of the findings. There is also an automated email sent to me in additional …
Continue reading

Time Savings

All the flagged emails from the PAB are gathered in one place. The system flags many emails using the filters and appropriately classifies them. Those it cannot automatically identify with certainly are presented into one page where I can systematically and quickly teach the system of new threats …
Continue reading

PhishER Capabilities

We have used PhishML, PhishRIP, and PhishER Blocklist. I have used PhishFliip on one occasion. The email that was flipped was too advanced of a test where all the users failed to catch it.
It has significantly reduced my time weeding through the 15,000 emails that would have come through my inbox …
Continue reading

Time Savings

Thanks to the built-in machine learning features, KnowBe4 PhishER has greatly increased our ability to identify and respond to reported emails. For example, we will automatically mark high-confidence phishing emails as malicious and begin the process to block the sender and quarantine the email …
Continue reading

Time Savings

I feel like I'm repeating myself, but it saves us time in the fact that end-users can simply submit an email for review and move on with their day where before it usually ended with a call to the Helpdesk. So this saves our end-users time and our Helpdesk's time
Continue reading

PhishER Capabilities

PhishRIP (best feature of them all by a long shot) PhishML (works for the most part, but in my experience, we have had issues with alot of false positives with the "clean" rating" PhishFlip (we've used it a couple of times, but it is not something that we utilize alot) We don't use the PhishER …
Continue reading

Awards

Products that are considered exceptional by their customers based on a variety of criteria win TrustRadius awards. Learn more about the types of TrustRadius awards to make the best purchase decision. More about TrustRadius Awards

Popular Features

View all 5 features
  • Company-wide Incident Reporting (52)
    7.8
    78%
  • Live Response for Rapid Remediation (55)
    7.8
    78%
  • Centralized Dashboard (62)
    7.8
    78%
  • Machine Learning to Prevent Incidents (54)
    7.7
    77%

Reviewer Pros & Cons

View all pros & cons
Return to navigation

Pricing

View all pricing

3001-5000 Monthly Pricing Per Seat

$0.50

Cloud
per month (billed annually) per seat

2001-3000 Monthly Pricing Per Seat

$0.55

Cloud
per month (billed annually) per seat

1001-2000 Monthly Pricing Per Seat

$0.65

Cloud
per month (billed annually) per seat

Entry-level set up fee?

  • Setup fee optional
For the latest information on pricing, visithttps://www.knowbe4.com/pricing-phisher

Offerings

  • Free Trial
  • Free/Freemium Version
  • Premium Consulting/Integration Services
Return to navigation

Features

Incident Response Platforms

Incident response (IR) platforms guide countermeasures against a security breach and deploy preplanned, automated threat responses

7.6
Avg 8.5
Return to navigation

Product Details

What is KnowBe4 PhishER/PhishER Plus?

PhishER is a platform for managing the high volume of potentially malicious email messages reported by users. With automatic prioritization of emails, PhishER aims to help InfoSec and Security Operations team cut through the inbox noise and respond to the most dangerous threats more quickly.

PhishER is a web-based platform with critical worksteam functionality that serves as a phishing emergency room to identify and respond to user-reported messages. With PhishER, users are able to automate the workstream of 90% of reported emails that are not threats, freeing up incident response resources.

PhishER is available as a stand-alone product or as an optional add-on for KnowBe4 customers that want to automatically prioritize and manage potentially malicious messages that were reported through the KnowBe4 Phish Alert Button. PhishER Plus is an upgraded subscription level that includes all of the features from PhishER with additional enhancements and AI-validated crowdsourced data. PhishER Plus was developed to help supercharge an organization’s email security defenses. It does this by automatically blocking phishing attacks that traditional Security Email Gateways (SEGs) miss and removes these missed threats from users’ inboxes.

KnowBe4 PhishER/PhishER Plus Features

Incident Response Platforms Features

  • Supported: Company-wide Incident Reporting
  • Supported: Integration with Other Security Systems
  • Supported: Centralized Dashboard
  • Supported: Machine Learning to Prevent Incidents
  • Supported: Live Response for Rapid Remediation

Additional Features

  • Supported: Automatic Message Prioritization

KnowBe4 PhishER/PhishER Plus Screenshots

Screenshot of This is a diagram of the PhishER workflow. Reviewing the PhishER workflow before getting started will provide an understanding of how PhishER, PhishRIP and PhishFlip work.Screenshot of The Reports screen will display five different dashboards of information.Screenshot of When entering the PhishER platform, the first screen that appears is the Dashboard. Here, a quick overview of the PhishER platform will appear.

KnowBe4 PhishER/PhishER Plus Video

Introduction to PhishER

KnowBe4 PhishER/PhishER Plus Integrations

KnowBe4 PhishER/PhishER Plus Competitors

KnowBe4 PhishER/PhishER Plus Technical Details

Deployment TypesSoftware as a Service (SaaS), Cloud, or Web-Based
Operating SystemsUnspecified
Mobile ApplicationNo
Supported CountriesGlobal

KnowBe4 PhishER/PhishER Plus Downloadables

Frequently Asked Questions

PhishER is presented as a lightweight Security Orchestration, Automation and Response (SOAR) platform to orchestrate threat response and manage the high volume of potentially malicious email messages reported by users. And, with automatic prioritization of emails, PhishER helps InfoSec and Security Operations team cut through the inbox noise and respond to the most dangerous threats more quickly.

Cofense Triage, Infosec IQ, and Proofpoint Threat Response Auto-Pull are common alternatives for KnowBe4 PhishER/PhishER Plus.

Reviewers rate Company-wide Incident Reporting and Centralized Dashboard and Live Response for Rapid Remediation highest, with a score of 7.8.

The most common users of KnowBe4 PhishER/PhishER Plus are from Mid-sized Companies (51-1,000 employees).
Return to navigation

Comparisons

View all alternatives
Return to navigation

Reviews and Ratings

(160)

Attribute Ratings

Reviews

(1-1 of 1)
Companies can't remove reviews or game the system. Here's why
July 25, 2023

KnowBe4 PhishER is Best in the Business

MR
Matthew Reedy
Server Adminstrator
MidwayUSA (Retail, 501-1000 employees)
Score 10 out of 10
Vetted Review
Verified User
Incentivized
Use Cases and Deployment Scope
Use KnowBe4 PhishER for users to submit tickets to our helpdesk team. We have automation setup to process findings and pass the emails to the correct tech's for investigation.
Pros and Cons
  • Custom Rules for Phishing Emails
  • Custom Reports for IT and Exec
  • Integrate with other Phishing providers
  • More control on their rules or be able to script more
  • Allow to remove emails from exchange server if they are phishing emails
Likelihood to Recommend
Allowed us to automate our phish reporting for users and to catch the emails quicker with out a lot of time reviewing emails.
KnowBe4 PhishER/PhishER Plus Feature Ratings
Incident Response Platforms (5)
88%
8.8
Company-wide Incident Reporting
80%
8.0
Integration with Other Security Systems
80%
8.0
Centralized Dashboard
100%
10.0
Machine Learning to Prevent Incidents
90%
9.0
Live Response for Rapid Remediation
90%
9.0
Return on Investment
  • Helped to reduce the time to respond to emails for tech's
  • allows helpdesk to work with users and not take away from Exchange Admin's
Time Savings
Being able to setup rules for emails that come in and deal with quickly has been a major help for us. To get the first email triage it and then take care of any of the other emails like this comes in to automate the process.
PhishER Capabilities
We have implemented KnowBe4 PhishER Blocklist so far and will be testing ML and Flip shortly.
Saved us time and money with reducing labor of repeated incoming emails.
Alternatives Considered
Yes, KnowBe4 stands up to the largest of vendors.
Other Software Used
Product Configurability
8
KnowBe4 has a lot of features and easy to configure for admin's. Adding the report button was the toughest part because there were so many different ways to deploy it to everyone. Once we figured out the direction the company wanted to go we hit the ground running and got the buttons installed in 30 minutes.
Configuration Lessons
Make sure that you know what types of products you want to install button. It makes the installations easier. PhishER is great and has help cut down time with rules that process emails that are submitted with out our admin's having to touch each email that comes in.
UI Customization
Some - we have done small customizations to the interface
Once we had a little tour of PhishER we saw what we could do with the rules and customizations to make our lives easier. Start small and add as you go. We still need to tweak the customizations every couple of months because things change.
Extensibility and Customization
No - we have not done any custom code
Additional Customization Considerations
Being able to customize some of the rules and action are great for us. Not just an out of the box piece of software that you can't fit to your business.
Users and Roles
10
Server, Network, HelpDesk and Management use this product.
Support Headcount Required
5
Users in the Server and HelpDesk teams use PhishER and need to know some basic email and filtering rules.
Business Processes Supported
  • Reporting emails from Outlook
  • Rules to automatically take care of emails that come in regularly
  • Rules to let the user know what is going on and not have a black hole that these email end up in.
Innovative Uses
  • Lets us know when our Health Provider starts sending out emails to user, so we can notify users of this email and that its not spam.
  • Helps us reward users that report emails that most to help protect our company
Future Planned Uses
  • Looking in some custom coding to send scams and virus email to other vendors for deep inspections
  • Notify supervisors about their users and who clicks on everything for safety training.
Likelihood to Renew
10
We really like the cost and the coverage that PhishER brings to the company and being able to over lap with our email provider and spam filtering vendors has been a huge help.
Products Replaced
No
Key Differentiators
  • Scalability
  • Integration with Other Systems
  • Other
Being able to report emails and create rules to automate these was the biggest factor.
Evaluation Lessons Learned
Being able to do so much with PhishER has made us question other vendors and why they aren't already doing what PhishER already does. That we use PhishER on top of what other vendors do because it's more customizable.
Implementation Rating
10
Work with support or rep for some basic steps, the rest is pretty straight foward.
Implementation Details / Implementation Partner
  • Implemented in-house
Implementation Phases
No
Change Management Lessons
Change management was minimal
Implementation Issues
  • Yara Rule Editor was the only issue we encountered
Support Rating
9
Support has been easy to get along with and easy to understand.
Premium Support
We didn't purchase premium support because the product is very easy to use.
Bug Resolution
No
Exceptional Examples of KnowBe4 PhishER/PhishER Plus Support
Doing some customizing on our rules, support was able to listen to our needs and send us an example of what we needed promptly. Then they followed up with some suggestions to add to it like some other companies had already done.
Usability
10
Very easy to use and able to customize it to our companies needs and changing needs monthly.
Easy Tasks
  • Phish button is the best thing we have used
  • Rules are setup and changed around all the time depending on our environment
Difficult Tasks
  • Yara Rule Editor was a little tough to understand but it didn't take long.
  • iPhone users button to be able to
Mobile Interface Availability and Impressions
Yes
It works well, iPhones have a little issue with interface but it's manageable.
Ease of Integration
9
PhishER is easy to intergrate with other providers but some of the other vendors don't play nice with PhishER
Systems Integrated With
  • Proofpoint
  • Microsoft Exchange Online
Getting the systems to talk to each other was the toughest part, after that it was easy to update and exchange information.
Future Integration Plans
  • Exchange 2019
  • Other Email Vendors
  • Mail Relay
Some vendors support integration and some your have to manipulate it to work with powershell or coding.
Types of Integration
  • File import/export
  • API (e.g. SOAP or REST)
  • AppExchange or similar marketplace
Powershell
Integration Lessons Learned
Know your vendors and talk to them about integration before you try to integrate PhishER.
Return to navigation