Item: KnowBe4 PhishER/PhishER Plus
Rating: 8
Author: Belinda Hickling

Use Cases and Deployment Scope

I use this to focus my team on potential threats. The propensity of emails that get reported are spam currently ~80 - 90%, this allows my team to integrate with Virustotal / Knowbe4 to help the objectively evaluate the reports and we will automate Spam responses so that my team can focus on the items that could truly be problematic to our organization.

Pros and Cons

Our customer service rep Kelli Cribbs is amazing - responsive and knowledgeable
feature rich, the tool is constantly evolving and growing
feedback is taken and incorporated

consistency within reporting - reports are not always consistent or accurate. ie reporting in PhishER (reported emails) is not consisted with reported phishes in core knowbe4 product.
training modules are stale, clunky and most of the content is given to diamond members - need more content at platinum 247 vs 1439 modules is significant - especially when compliance+ is another offering

Return on Investment

freed up incident response resources to focus on potential threats vs Spam
will allow us to centrally block threats from within one console

Time Savings

we're still in process of setting up, so a bit premature the biggest value that we have to date is the info from Virustotal/PMR enables analysts to more objectively evaluate the emails that get reported vs having to dig into them. It would be helpful if the emails could be evaluated in a sandbox as well.

PhishER Capabilities

PhishML has been implemented, the others are in process. We had pushback from IT due to the requirement to have GlobalAdmin to set up PhishRIP.

all will be positive influences on our phishing triage capability. I have used Proofpoint and Agari in the past and I like KnowBe4's solution better than Agari (in most areas) but less mature than Proofpoint.

Alternatives Considered

Agari Phishing Response, Agari Phishing Defense and Proofpoint Email Protection

see previous response. KnowBe4 is better than Agari in most areas, but less mature than Proofpoint

Key Insights

Do you think KnowBe4 PhishER/PhishER Plus delivers good value for the price?

Yes

Are you happy with KnowBe4 PhishER/PhishER Plus's feature set?

Yes

Did KnowBe4 PhishER/PhishER Plus live up to sales and marketing promises?

Yes

Did implementation of KnowBe4 PhishER/PhishER Plus go as expected?

Yes

Would you buy KnowBe4 PhishER/PhishER Plus again?

Yes

Other Software Used

CrowdStrike Falcon, Mimecast Secure Email Gateway, Rapid7 InsightIDR

Likelihood to Recommend

I like the triage functionality as well as the phishing simulation tool. I think training lacks behind other tools such as Proofpoint, I also think there needs to be more maturity in testing / security posture assessment capabilities.

KnowBe4 Catch & Release program

Overall Satisfaction with KnowBe4 PhishER