Phishing simulation with a small team for a big company
August 18, 2021

Phishing simulation with a small team for a big company

Alexander Bagrov | TrustRadius Reviewer
Score 10 out of 10
Vetted Review
Verified User

Overall Satisfaction with Cofense PhishMe

In the past, we were using it only on a quarterly basis as a benchmark type of activity. Nowadays, we are offering Phishing Simulation as a service to our departments and we are slowly getting to 1 big Q exercise (250k people) and 3-4 monthly ones (anywhere from 50 to 5k users).
  • Friendly UX.
  • Huge selection of phishes.
  • Ability to customize.
  • Web version support - sometimes it's too laggy.
  • Upload/download rate for results and recipient lists.
  • CIRT now has a great dataset of simulations that we ran, with some interesting metrics.
  • Business leaders now view phishing defense as a metric they want to improve.

Do you think Cofense PhishMe delivers good value for the price?

Yes

Are you happy with Cofense PhishMe's feature set?

Yes

Did Cofense PhishMe live up to sales and marketing promises?

Yes

Did implementation of Cofense PhishMe go as expected?

Yes

Would you buy Cofense PhishMe again?

Yes

I am one of the Phishing Simulation ambassadors and I am eager to talk to those who listen. This tool is great at educating people and changing their behavior - although, in some parts, it still uses terminology that incites some senior leaders to use punitive methods (like repeat clickers, etc).

Using Cofense PhishMe

5 - If you work in Europe - prepare your deck for Privacy and WC reviews.
For us it was the most difficult part, but we managed to find almost right balance between business needs and privacy.
  • Global Benchmark
  • Targeted Exercises
  • CIRT data analytics
  • Rewarding Fastest Reporters
  • Using as part of a greater dataset

Cofense PhishMe Implementation

There are some hiccups, but there are meant to be, when you implement something in a large scale enterprise.
Change management was a small part of the implementation and was well-handled
  • Lack of integration with AD on our side
  • Privacy and WC issues

Cofense PhishMe Training

It's a must, even if you are never going to use the tool. Cofense aims to provide phishing training first and tool second.

Cofense PhishMe Support

ProsCons
Quick Resolution
Good followup
Knowledgeable team
Problems get solved
No escalation required
Support cares about my success
Quick Initial Response
None
Yep - it provides us not only with a one-stop-shop for all the issues, but also a knowledgeable expert that can make your life easier in the program itself.
Basically every time, especially when we are on tight deadlines. Our manager added a special column, calculating times between different events in the simulation, which allows us to save a lot of time calculating our metrics.
Support includes not only tech issues resolving, but also content, guidance and many other things you'll need to manage your program!

Using Cofense PhishMe

ProsCons
Like to use
Relatively simple
Technical support not required
Quick to learn
Convenient
Feel confident using
Familiar
Inconsistent
  • Scenario choosing
  • Basic edits
  • Basic settings
  • Advanced edits - as webportal's built in Text Editor is not the best one in the market
  • Recipient list updates is cumbersome if you are not integrating Cofense with your AD
Its built with UX in mind and is aimed at non-tech people, to ensure that almost everyone can run the campaign. But if we go deeper - sometimes you will need an HTML editor or support in order to figure out some advanced edits you might want to add in your scenarios.

Relationship with Cofense (formerly PhishMe Inc.)

If you buy a premium package - you get all you may every want.
The whole library, dedicated manager, direct access to content team's ears.