Great Phishing Reporting & Response Tool!
December 18, 2024
Great Phishing Reporting & Response Tool!
Score 8 out of 10
Vetted Review
Verified User
Overall Satisfaction with KnowBe4 PhishER/PhishER Plus
Employees use the Phish Alert Button add on in Outlook to report emails they suspect may be phishing emails. Out IT Security Team gets an immediate notification via email & then we review them in the PhishER inbox which provides AI analytics of how likely the email is to be a threat vs spam vs clean. It also runs URLS & attachments through Virus Total & lets us know if any are a hit. If it is a threat then we run PhishRIP query to pull the email sent to any other coworkers into quarantine & then delete. We also have PhishER plus automatically adding malicious senders/files/URLs to our Microsoft Blocklist.
Pros
- Easy to use Phish Alert Button
- Good AI analytics & Virus Total Runs to help determine if email is a threat
- Queries to see if anyone else got the same Phishing Email & allows you to quarantine & delete them
- Good customized automations to automatically label some reported emails as spam or clean & let the reporter know
Cons
- The should be using the AI, massive data trove, & analytic capabilities to do proactive threat protection, quarantining suspected phishing emails before they ever get to people's inboxes.
- A couple times a year PhishER PhishRIP deletion stops working & you have to disconnect & reconnect PhishER to Microsoft
- Sometimes reported emails get SPAM label automatically applied even when URLS or attachments have hits in Virus Total, I have contacted support multiple times about this & adjusted automations but it continues to happen
- Reduce risk by increasing security awareness & phish reporting
- Reduce time spent on incident respond
- Provide analytics on trend of phishing emails over time
Automatically determines some to be clean or spam & sends email to reporter letting them know so I don't have to.
All of them
PhishRIP is most helpful, allows us to quarantine & delete phishing emails sent to people other than the person who reported it.
- Check Point Harmony Email & Office
Harmony does not provide security awareness training or simulated phishing emails like KnowB4. However, it does provide a phish alert button & workflow similar to PhishER & we may stop using PhishER because the Phish Alert reports from PhishER don't feed into Harmony to help train it from phishing emails that go through. We got Harmony after KnowB4 because we needed a tool to PREVENT phishing emails from getting to people's inboxes in the first place, which KnowB4 has very little capability for other than PhishER+ blacklists. It is a shame KnowB4 does not have the anti threat phishing prevention like Harmony considering all the email data it has & its existing AI analytic capabilities.
Do you think KnowBe4 PhishER/PhishER Plus delivers good value for the price?
Yes
Are you happy with KnowBe4 PhishER/PhishER Plus's feature set?
Yes
Did KnowBe4 PhishER/PhishER Plus live up to sales and marketing promises?
I wasn't involved with the selection/purchase process
Did implementation of KnowBe4 PhishER/PhishER Plus go as expected?
Yes
Would you buy KnowBe4 PhishER/PhishER Plus again?
No
Comments
Please log in to join the conversation