Phish ER to the rescue
Updated July 26, 2023

Phish ER to the rescue

Steve Wingate | TrustRadius Reviewer
Score 10 out of 10
Vetted Review
Verified User

Overall Satisfaction with KnowBe4 PhishER

We have a high rate of items reported via Phish ER (approximately 1000 a month) for a department of 2 people.
We setup rules in Phish Alert to respond to the most common items reported.
We have also setup rules to all the InfoSec team to focus on those emails that have not been responded to and/or actual threats.
By utilizing Phish ER we have been able to take reduce the amount of time spent addressing items report from 2 hours a day down to < 20 minutes.
Additionally with the recent update to allow us to push blocks to M365 we are seeing a large reduction in the number of spam and scam emails.
  • Minimal false positives
  • Ease of use in defining and designing flows
  • Ease of use in defining and designing response templates
  • Reporting - the reports in place are useful but allowing for more details would be helpful
  • More Quick Actions
  • Time saved has allowed for concentration in other areas.
  • Response time to users has increased InfoSec profile in the company, making it easier to sell other initiatives. Also, this makes users more likely to report things
  • The ability to see threats in 1 area allows for better recognition of trends or large scale attacks.
The automated responses with low cases of false positives has allowed my team to focus on the actual threats and/or unknowns. This has promoted users to be more willing to report things.

We have implemented - PhishER Blocklist.
This has helped reduce the amount of spam/scams that are getting to users.Very valuable.
In looking at other products I didn't find any that were as integrated with our email process.
We did implement Tessian as an email filtering/security product but I feel PhishER provides functionality that other email security tools cannot provide.

Do you think KnowBe4 PhishER/PhishER Plus delivers good value for the price?

Yes

Are you happy with KnowBe4 PhishER/PhishER Plus's feature set?

Yes

Did KnowBe4 PhishER/PhishER Plus live up to sales and marketing promises?

Yes

Did implementation of KnowBe4 PhishER/PhishER Plus go as expected?

Yes

Would you buy KnowBe4 PhishER/PhishER Plus again?

Yes

Ease of implementation.
Time savings.
Use in identifying trends.

KnowBe4 PhishER/PhishER Plus Feature Ratings

Company-wide Incident Reporting
8
Integration with Other Security Systems
10
Centralized Dashboard
9
Machine Learning to Prevent Incidents
10
Live Response for Rapid Remediation
10

Configuring KnowBe4 PhishER

Just right.
Easy to get up and running quickly
Turn on Phish ER but wait to setup the automation tasks until you have reviewed your data to group and rollout types of emails.

No - we have not done any customization to the interface
No - we have not done any custom code
None - the available features met our needs

Using KnowBe4 PhishER

3 - 
Information Security
Information Technology


2 - Members of the InfoSec team with experience in email security.
  • Ability to automate responses to users that report emails.
  • Reporting and classification of reported emails.
  • Integration with M365 to allow for adding emails, attachments, etc. to block list.
  • Training users on legitimate emails and proper communications.
  • Finding large scale phishing attacks.
  • Understanding and reporting on most common scams/phish being seen by users.
  • Use the data gathered to recognize frequent reporters.
  • Use data gathered to understand common domains, etc. for DMARC and SPF implementation
Phish ER has reduced the time my team and I spend on reported emails by over 80%. With the volume of emails reported and a small team this is a must have.

Evaluating KnowBe4 PhishER and Competitors

  • Integration with Other Systems
  • Ease of Use
We have made reporting emails via Phish Alert a cornerstone message in our Awareness program, so anything we implemented had to work with the Phish Alert button.
I wouldn't change anything. The evaluation was straight forward and we chose to move forward with the best product.

KnowBe4 PhishER Support

Responses to questions were answered quickly and accurately.
ProsCons
Quick Resolution
Good followup
Knowledgeable team
Problems get solved
Kept well informed
No escalation required
Immediate help available
Support understands my problem
Support cares about my success
Quick Initial Response
None
I'm not sure if we purchased a premium support option. I don't think so.
I've had multiple support cases opened that I not only received an answer to the problem in question but also details on best practices that improved the underlying process.

Using KnowBe4 PhishER

The product is easy to setup, use and maintain. The product is stable and performs as expected
ProsCons
Like to use
Relatively simple
Easy to use
Technical support not required
Well integrated
Consistent
Quick to learn
Convenient
Feel confident using
Familiar
None
  • The rules are easy to define and implement.
  • The actions provided a way to create the email flows that I wanted.
  • The templates are easy to design and allow for all the content that I wanted.