Skip to main content
TrustRadius
KnowBe4 PhishER

KnowBe4 PhishER

Overview

What is KnowBe4 PhishER?

PhishER is presented as a lightweight Security Orchestration, Automation and Response (SOAR) platform to orchestrate threat response and manage the high volume of potentially malicious email messages reported by users. And, with automatic prioritization of emails, PhishER helps InfoSec and…

Read more
Recent Reviews

Phishing Hero!

10 out of 10
March 13, 2024
Incentivized
We use KnowBe4 PhishER with our KMSAT. KnowBe4 PhishER is basically helping us to resolve our biggest security problem and that is …
Continue reading
Read all reviews

Awards

Products that are considered exceptional by their customers based on a variety of criteria win TrustRadius awards. Learn more about the types of TrustRadius awards to make the best purchase decision. More about TrustRadius Awards

Popular Features

View all 5 features
  • Live Response for Rapid Remediation (55)
    7.8
    78%
  • Company-wide Incident Reporting (52)
    7.8
    78%
  • Centralized Dashboard (62)
    7.8
    78%
  • Machine Learning to Prevent Incidents (54)
    7.7
    77%

Reviewer Pros & Cons

View all pros & cons
Return to navigation

Pricing

View all pricing

3001-5000 Monthly Pricing Per Seat

$0.50

Cloud
per month per seat

2001-3000 Monthly Pricing Per Seat

$0.55

Cloud
per month per seat

1001-2000 Monthly Pricing Per Seat

$0.65

Cloud
per month per seat

Entry-level set up fee?

  • Setup fee optional
For the latest information on pricing, visithttps://www.knowbe4.com/pricing-phisher

Offerings

  • Free Trial
  • Free/Freemium Version
  • Premium Consulting/Integration Services
Return to navigation

Features

Incident Response Platforms

Incident response (IR) platforms guide countermeasures against a security breach and deploy preplanned, automated threat responses

7.6
Avg 8.5
Return to navigation

Product Details

What is KnowBe4 PhishER?

PhishER is a platform for managing the high volume of potentially malicious email messages reported by users. With automatic prioritization of emails, PhishER aims to help InfoSec and Security Operations team cut through the inbox noise and respond to the most dangerous threats more quickly.

PhishER is a web-based platform with critical worksteam functionality that serves as a phishing emergency room to identify and respond to user-reported messages. With PhishER, users are able to automate the workstream of 90% of reported emails that are not threats, freeing up incident response resources.

PhishER is available as a stand-alone product or as an optional add-on for KnowBe4 customers that want to automatically prioritize and manage potentially malicious messages that were reported through the KnowBe4 Phish Alert Button. PhishER Plus is an upgraded subscription level that includes all of the features from PhishER with additional enhancements and AI-validated crowdsourced data. PhishER Plus was developed to help supercharge an organization’s email security defenses. It does this by automatically blocking phishing attacks that traditional Security Email Gateways (SEGs) miss and removes these missed threats from users’ inboxes.

KnowBe4 PhishER Features

Incident Response Platforms Features

  • Supported: Company-wide Incident Reporting
  • Supported: Integration with Other Security Systems
  • Supported: Centralized Dashboard
  • Supported: Machine Learning to Prevent Incidents
  • Supported: Live Response for Rapid Remediation

Additional Features

  • Supported: Automatic Message Prioritization

KnowBe4 PhishER Screenshots

Screenshot of This is a diagram of the PhishER workflow. Reviewing the PhishER workflow before getting started will provide an understanding of how PhishER, PhishRIP and PhishFlip work.Screenshot of The Reports screen will display five different dashboards of information.Screenshot of When entering the PhishER platform, the first screen that appears is the Dashboard. Here, a quick overview of the PhishER platform will appear.

KnowBe4 PhishER Video

Introduction to PhishER

KnowBe4 PhishER Technical Details

Deployment TypesSoftware as a Service (SaaS), Cloud, or Web-Based
Operating SystemsUnspecified
Mobile ApplicationNo
Supported CountriesGlobal

KnowBe4 PhishER Downloadables

Frequently Asked Questions

PhishER is presented as a lightweight Security Orchestration, Automation and Response (SOAR) platform to orchestrate threat response and manage the high volume of potentially malicious email messages reported by users. And, with automatic prioritization of emails, PhishER helps InfoSec and Security Operations team cut through the inbox noise and respond to the most dangerous threats more quickly.

Cofense Triage, Infosec IQ, and Proofpoint Threat Response Auto-Pull are common alternatives for KnowBe4 PhishER.

Reviewers rate Company-wide Incident Reporting and Centralized Dashboard and Live Response for Rapid Remediation highest, with a score of 7.8.

The most common users of KnowBe4 PhishER are from Mid-sized Companies (51-1,000 employees).
Return to navigation

Comparisons

View all alternatives
Return to navigation

Reviews and Ratings

(160)

Attribute Ratings

Reviews

(1-25 of 69)
Companies can't remove reviews or game the system. Here's why
Score 10 out of 10
Vetted Review
Verified User
Incentivized
PhishER plugs a "Report to Cybersecurity" button in your organization's user Outlook client. This enables users to report any suspect email to your security operations center. The SOAR capability in the platform makes it quick to decipher suspect emails as benign, spam, or threat, and it automatically responds to users with immediate details. This saves hundreds of security analysts hours that would otherwise have been spent focusing on critical threat email actions. Malicious attackers have become intelligent and sophisticated; hundreds and thousands of emails slip through the mail perimeter defense and directly land on user mailboxes. With PhishER, security analysts can quickly respond to the threat emails, including deleting the emails from user inboxes.
March 15, 2024

Happy with PhishER

Score 10 out of 10
Vetted Review
Verified User
Incentivized
We have many emails reported to our team every day. Most emails reported are not true phishing emails and are mostly Spam or Clean. KnowBe4 PhishER saves my team time buy auto labeling the email as Spam or return a canned response from my team if the email is clean. This saves me time and gets important legitimate emails responded to quicker.
Score 9 out of 10
Vetted Review
Verified User
Incentivized
KnowBe4 PhishER is best used by companies who aren't able or do not have the resources to create or customize their own internal training and learning material. KnowBe4 PhishER offers a lot of flexibility within their own system, and allows for admins to narrow the training and testing focus to very specific industries, tools, and needs. If you are able to create hyper customized material or just need extremely basic training, it may not be the best option, but should definitely be considered.
Score 10 out of 10
Vetted Review
Verified User
Incentivized
I have been able to create customized simulated phishing campaigns that are really testing our users ability to "spot the fake." That coupled with the training campaigns that are included make it much more likely that our users will be better prepared to protect our organization by being able to recognize common industry threats, and brings awareness to less common threats that are out there. I love that they have a shared folder full of relevant, recent real-world scams that we can choose from to train our user base.
Bill DeLong | TrustRadius Reviewer
Score 8 out of 10
Vetted Review
Verified User
Incentivized
It is a fantastic solution for small-to-medium sized companies that have a small security staff and need a simple solution that provides the needed monitoring & alerting but doesn't require a large team or a lot of time to implement. KnowBe4 PhishER can be up and running in minutes, providing valuable insight & protection and training opportunities.
Score 9 out of 10
Vetted Review
Verified User
Incentivized
I feel KnowBe4 PhishER is useful for any organization that has users connecting to the internet and receiving emails. The ability to report phishing attempts before they become an issue is a huge help to any systems admin, especially when you don't have a large team. It's a really helpful tool.
Score 10 out of 10
Vetted Review
Verified User
Incentivized
KnowBe4 PhishER is very efficient and fast in detecting malicious emails, machine learning allows you to constantly improve the analysis of messages so in the event of receiving numerous malicious emails you can easily manage the incident response automatically, reducing the risk of expansion of the threat, blocking senders and deleting messages before they are read by other users.
March 13, 2024

Phishing Hero!

Score 10 out of 10
Vetted Review
Verified User
Incentivized
We were facing a lot of Phishing emails to our user inbox and users were getting it difficult to report the email to security team because they had to forward the email. But with the KnowBe4 PhishER, they are reporting a lot using Phish Alert Button in just a single click because it is installed on their Outlook.
Score 9 out of 10
Vetted Review
Verified User
Incentivized
KnowBe4 PhishER is well suited for environments that are very vulnerable to attacks such as Schools and Governments Authorities. This is because not every email that is phishing or malicious gets blocked by an Email Security System, so having KnowBe4 PhishER as a secondary line of defense would help to keep your systems more secure while also helping to train users in what kinds of emails are Phishing and what to look out for.
Score 10 out of 10
Vetted Review
Verified User
Incentivized
I can't say enough good things about PhishER. While Google Mail does have the ability to report spam and malicious content, the reporting isn't as user friendly. Having PhishER gives us insight into the email landscape of our end users, and even affords us the ability to retroactively learn some of the techniques used by bad actors so that we can further educate our end users.
Score 10 out of 10
Vetted Review
Verified User
Incentivized
With a mix of staff, teachers, and potentially older students handling sensitive information, PhishER’s reporting tools are ideal for creating a safer email environment. The platform’s ease of access and user-friendly reporting mechanism is particularly beneficial for dispersed workforces.
December 27, 2023

KnowBe4 PhishER Review

Score 10 out of 10
Vetted Review
Verified User
For any cloud based email environment, Microsoft 365 in our case, KnowBe4 PhishER is easy to setup for monitoring of incoming emails to the organization and help determine if the email is suspicious.
Jeff Boivin | TrustRadius Reviewer
Score 10 out of 10
Vetted Review
Verified User
Incentivized
PhishER is an extremely helpful tool for anyone looking to have a well defined process for staff to report suspected phishing emails & have a designated employee review those reports, evaluate if they are threats, & then take next steps.

I can't really think when it would be less appropriate unless the company didn't want to have a phish reporting process.
Score 9 out of 10
Vetted Review
Verified User
Incentivized
KnowBe4 PhishER is highly efficient and cost effective, making it a great fit for small to medium businesses that are considered about phishing attacks. KnowBe4 PhishER helps small teams respond to phishing emails with the resources and efficiency of larger teams. It fits well with existing KnowBe4 clients, as the Phish Alert button is already in use and training modules for coworkers are available to instruct how to use the button.
Richard Fantozzi, Jr | TrustRadius Reviewer
Score 10 out of 10
Vetted Review
Verified User
Incentivized
Less than a half hour of setup and we where ready to go with way more automatation that we had before which has proven to be highly effective especially when there are emails that make it through like in BEC scenerios with trusted 3rd parties.
Score 10 out of 10
Vetted Review
Verified User
Incentivized
The best example I can give is that it completely streamlines and automates a very common call to the Helpdesk. The one where the end user calls and says "Is this email legitimate? Should I respond?" etc. Instead of having to take 10-15 minutes on the phone back and forth with an end-user, they can simply report the email using the Phish Alert Button and move on about their day.
Return to navigation