Item: Cofense PhishMe
Rating: 7
Author: Ryan Fultz

Use Cases and Deployment Scope

We use it to track phishing attempts and report them. We have it deployed across the entire firm and each user has been educated that when they get a phishing attempt they should use the report button. We sometimes conduct tests using this software and we are able to report how many people reported it.

Pros and Cons

The software is really easy to use, I am able to just click a button to report any and all phishing attempts.
By it being a one button press it allows me to spend more time doing other things.
We are able to conduct tests using PHISHME to audit our internal clients.

I don't think anything could be improved it's a simple intuitive software.

Return on Investment

We are able to conduct audits and retrain.
It has improved efficiency of reporting.
It has made reporting a lot easier.

Alternatives Considered

I have not used any other products that do the same thing as PhishMe. I was not the decision maker in deploying PhishMe so I can not comment as to why we chose it or any other similar competitors in the field. PhishMe works well for what we use it for.

Support Rating

I have not had to use their support for pretty much anything. The software works well, and is very intuitive. I would imagine their support would be rather basic as there is not too much that can go wrong with a report phishing button, and if it were I would probably consider a different software.

Key Insights

Do you think Cofense PhishMe delivers good value for the price?

Yes

Are you happy with Cofense PhishMe's feature set?

Yes

Did Cofense PhishMe live up to sales and marketing promises?

I wasn't involved with the selection/purchase process

Did implementation of Cofense PhishMe go as expected?

I wasn't involved with the implementation phase

Would you buy Cofense PhishMe again?

Yes

Likelihood to Recommend

Useful for keeping track of phishing attempts. It is also usable to conduct audits/penetration tests that allow you to see who needs retraining on phishing attempts. My employer constantly deploys random tests to survey how effective phishing is against my company. I don't think there are any scenarios where it would not be an appropriate usage case unless people aren't using emails.

Usability

You click one button and it does the rest of the work.

Phishing is gone

Overall Satisfaction with Cofense PhishMe