Item: KnowBe4 PhishER
Rating: 10
Author: Verified User

Use Cases and Deployment Scope

Currently KnowBe4 PhishER is being used across all departments within the organization. This has addressed the business problem of suspected phishing remediation. Through machine learning, integrations with VirusTotal, the PhishAlert button, and the ability to automatically respond to messages, we have drastically slashed the amount of time that analysts and end-users spend in phishing responses.

Pros and Cons

Machine learning evaluation
Automation of response
Setting custom thresholds
Quarantining messages before end-users read them
Search inboxes for similar messages

Custom rules can be bothersome to create
Inability to log directly into PhishER, must go through main console first
PhishRIP can require too much information when searching for similar messages

Most Important Features

Automated response
Integration with Virus Total
PhishRIP

Return on Investment

Less analyst time spent on phishing emails
Reduced number of missed messages
PhishRIP has allowed phishing messages to be removed before they have been read

Time Savings

PhishER has saved my organization time through the incorporation of automated responses and the ability to manage quaranting messages and block lists from within the PhishER console and not needing to log into another dash board.

PhishER Capabilities

My organization has utilized PhishML, PhishRIP, and PhishER Blocklist with great success.

PhishML has allowed me to drastically reduce the number of messages my staff review on a daily basis, and provide after hours responses to colleagues working different shifts or checking messages after hours. PhishRIP has allowed me to remove threatening messages that have been reported before all recipients have read them, and this has combined with the PhishER Blocklist to eliminate recurring threats.

Alternatives Considered

Infosec IQ and Mimecast Secure Email Gateway

I have previously used Infosec IQ and Mimecast for similar purposes. Infosec IQ allowed my users to report messages, but the interface was clumsy and there weren't any features to allow me to quarantine or block message from within that dashboard. Mimecast was similar, but the granularity of the controls was overwhelming for new staff.

Key Insights

Do you think KnowBe4 PhishER delivers good value for the price?

Yes

Are you happy with KnowBe4 PhishER's feature set?

Yes

Did KnowBe4 PhishER live up to sales and marketing promises?

Yes

Did implementation of KnowBe4 PhishER go as expected?

Yes

Would you buy KnowBe4 PhishER again?

Yes

Likelihood to Recommend

PhishER works wonderfully for organizations in which end-users are prone to reporting all messages. By having automated responses it allows for non-malicious messages to be responded to without requiring analyst intervention. The PhishRIP functionality can be less useful because it requires a minimum of two fields to be selected for searching. This can result in issues where a threat actor has modified the body or subject to add a more personal touch to the malicious email.

Great for streamlining phishing response.

Overall Satisfaction with KnowBe4 PhishER