Item: KnowBe4 PhishER/PhishER Plus
Rating: 10
Author: Verified User

Use Cases and Deployment Scope

Before KnowBe4 PhishER, our SOC analysts would manually investigate hundreds of suspect/phishing emails reported by end-users that would slip our perimeter defense. After implementing the PhishER SOAR platform, we could automate the process end-to-end by categorizing the reported emails as benign, spam, and threat emails, including integration with our ticketing platform. This has saved hundreds of our security analysts' hours and enabled them to act immediately on critical threat phishing emails.

Pros and Cons

Categorization of suspect emails to Benign, SPAM and Threat.
Integration to VirusTotal, Ticketing platform.
Smart Dashboards.
Canned auto - response email to end-users.

AI/ML algorithm could be improved to reduce false positives and increase auto-resolved suspect emails.

Return on Investment

Freed up incident response resources.
Isolating email threats more quickly and accurately.
Mitigating active phishing attacks impact on your organization.

Time Savings

With KnowBe4 PhishER, we freed up incident response analysts' time to focus on more critical threat emails and associated mitigation actions. This has freed up analyst time, and they can now spend it on projects and security training, primarily related to cloud security technology. PhishER's quick canned response emails to end users and integration with our ticketing platform have also improved our overall incident response and confidence with end users.

PhishER Capabilities

PhishML PhishRIP (in POC).

PhishML—We have tuned the PhishML confidence level to decipher benign emails from threats to a large extent. PhishRIP—We have successfully evaluated PhishRIP in our POC.

Key Insights

Do you think KnowBe4 PhishER/PhishER Plus delivers good value for the price?

Yes

Are you happy with KnowBe4 PhishER/PhishER Plus's feature set?

Yes

Did KnowBe4 PhishER/PhishER Plus live up to sales and marketing promises?

Yes

Did implementation of KnowBe4 PhishER/PhishER Plus go as expected?

Yes

Would you buy KnowBe4 PhishER/PhishER Plus again?

Yes

Other Software Used

ServiceNow Security Operations, VirusTotal

Likelihood to Recommend

PhishER plugs a "Report to Cybersecurity" button in your organization's user Outlook client. This enables users to report any suspect email to your security operations center. The SOAR capability in the platform makes it quick to decipher suspect emails as benign, spam, or threat, and it automatically responds to users with immediate details. This saves hundreds of security analysts hours that would otherwise have been spent focusing on critical threat email actions. Malicious attackers have become intelligent and sophisticated; hundreds and thousands of emails slip through the mail perimeter defense and directly land on user mailboxes. With PhishER, security analysts can quickly respond to the threat emails, including deleting the emails from user inboxes.

KnowBE4 PhishER Review.

Overall Satisfaction with KnowBe4 PhishER