1. Home
  2. Incident Response Platforms
  3. KnowBe4 PhishER Reviews
  4. User Review of KnowBe4 PhishER
Automated Email and Incident Response Solution!
Updated July 25, 2023

Automated Email and Incident Response Solution!

Anonymous | TrustRadius Reviewer
Score 9 out of 10
Vetted Review
Verified User

Overall Satisfaction with KnowBe4 PhishER

We use KnowBe4 PhishER as part of our email analysis when users report emails to the team and also have some visibility what users report and how often. Some business problems this product addresses is the need to free up team resources to review emails on a daily basis. Another problem this product addresses is that it creates additional flexibility within the overall workflow. For example, when a ticket needs to get created internally for review, it's just one click of a button. This product helps automate some of our tasks that would normally be a manual effort.
  • Provides high level reporting
  • Integration with ticketing system such as Jira
  • The flexibility of creating rules that align with various workflows
  • Easy to use interface
  • The number of action items could be expanded to include more functionality
  • The option to schedule reports and send to various team members to eliminate the need to go into the console on a weekly or monthly basis
  • Additional widgets to expand the dashboard functionality
  • Freed up team resources with automation
  • Real time data on email reporting
  • Resolve incidents in a timely manner
  • Response and communication capabilities
PhishER has definitely saved our team and organization by utilizing the machine learning functionality within the solution. What use to take 30 minutes or more now takes less than 5 minutes. The benefits that it brings to our organization is freed up team resources, increased our confidence levels to determine real threats, and overall security posture throughout the organization. As this works alongside the security education platform, we are able to use phish-flip to turn active phishing attacks into safe templates into a learning opportunity.
Our organization has implemented PhishML, PhishRIP, PhishFLIP to help automate remediation of known threats from our users' mailboxes. We found these capabilities to very useful and help with our education and remedial efforts. Having used this capabilities allows the team to have a good insight on what emails are being reported as well as get another review on them as well.
Having reviewed and currently using these capabilities has spread general awareness not only to our team but our entire organization. We have noticed increased communication from our users and everyone wants to help report suspicious emails and let this solution further help with the analysis. We have found that our overall phish-prone percentages have gone down since the implementation of PhishFlip. Additionally, this reduces some of the risk that the organization once had.
PhishER is my opinion is an industry leader when it comes to a tool for email analysis and remediation. This solution has a solid interface to use and understand its functionality. Additionally it has easy integrations with other security products that make this appealing for organizations in most industries. Overall, we are pleased with PhishER and complements the security education platform very well to have nearly that all in one solution.

Do you think KnowBe4 PhishER delivers good value for the price?

Yes

Are you happy with KnowBe4 PhishER's feature set?

Yes

Did KnowBe4 PhishER live up to sales and marketing promises?

Yes

Did implementation of KnowBe4 PhishER go as expected?

Yes

Would you buy KnowBe4 PhishER again?

Yes

The KnowBe4 PhishER is a great product that integrates well with the KnowBe4 security education platform and Jira service desk. Those two integrations make the general workflow effortless for someone who is in the product on a daily basis. This reduces manual work and allows our team to be productive and work on other projects.

This product also gives the team visibility on what is being reported and help determine if the email reported is localized or widespread throughout the organization. Meaning, depending on how many people report an email based on location and job roles.

This solution is well suited for an organization or team who would like to automate the guess work of determining if a email is a phish, spam, or safe. Additionally, have that one click response to the user who reported to get additional insight on if they did respond to the email or clicked on that was determined to be a real phishing email.

KnowBe4 PhishER Feature Ratings

Incident Response Platforms
7.8
Company-wide Incident Reporting
7
Integration with Other Security Systems
8
Centralized Dashboard
6
Machine Learning to Prevent Incidents
9
Live Response for Rapid Remediation
9

Configuring KnowBe4 PhishER

I believe the configurability for this product is somewhat limited as it related to the number of actions that can be configured. At the time of this writing, the total number of configurable actions allowed is eight.

There are times when I am reviewing emails and don't have the correct action available. Having additional action buttons would help the automation process. This is something that has great potential and I find it very useful and reduces time for my team.
When configuring KnowBe4 PhishER in your environment it is often considered best practice to evaluate your current environment and understand how this would fit into your current security stack. One of many benefits of having PhishER is the opportunity to automate repetitive tasks saving you and the team countless hours of reviewing emails.

Some - we have done small customizations to the interface - We have made some small customizations to the interface that helps us automate repetitive tasks and free up team resources to work on other project. For the most part, it was straight forward and easy to do with minimal effort.

Some examples are creating custom email workflow rules, enabling additional actions for communication purposes, add additional tags for certain emails.
No - we have not done any custom code
PhishER is customizable to fit into most environments and can be a huge time saver for the responsible team(s). Having PhishER is another great tool that can give an "Eyes on Glass" approach to email monitoring and see how your users respond to emails. Having creating the different emails tags does help with reporting and give you a good overall visual on emails within your environment.