We struggled with training compliance in social engineering and staff fell victim to a phishing email. KnowBe4 was recommended to me and after a brief demo and quick pricing/contract process, we were in! The setup was easy and we were able to get my staff training and random phishing tests implemented within 30 days. The entire staff has been very helpful and knowledgeable, guiding me every step of the way!

I was blown away by the amount of training materials and phishing samples!

I haven't run into anything to dislike yet!

Keeping staff trained and actively tested on social engineering.

Quarantining malicious email attempts.

Simple for end users to use and integrated to Outlook.

Front end training for users. Users tend to forget to submit via Phish icon.

Automating the tracking of suspect emails.

Having PhishER has freed up a lot of my time from answering emails to more important tasks.

There has been a bit of a learning curve setting up Actions and Rules. Now that I've figured those out we are now over 50% automatically resolved with our reported emails.

PhishER is performing the task of researching reported emails and cuttimng in half what I would notmally have to look at.

Most helpful is the single view and classification of emails that saves me time on the few that need more analysis.

I wish that Phish RIP was available for exchange on prem.

Faster response to reported emails.

PhishER allows users a consistent way to report potential phishing emails that would normally be submitted to IT individually for analysis. The ability to establish rules that will automatically disposition and respond to users has saved a significant amount of time in reviewing reported emails.

Determing the rules and thresholds to set is not easy. There dos not appear to be benchmarks against what others may be setting as their thresholds.

PhishER is freeing up limited resources by not having to review every email reported and manually respond to the reporter. Approximately 60% of emails received are automatically reviewed and dispositioned by the tool.

It is helping raise user awareness on the vulnerabilities we face.

need to be able to spoof email like it would happen in real world.

Identify those that need more specific training to raise their awareness of what to watch for.

I like that PhishER will try and determing which emails are threats before I even have a chance to look into the emails. This saves me a lot of time since I don't have to look into these emails as much since I know they are a threat. Even when I have to investigate these emails, the separation of images and links and being able to click one button to scan these potentially malicious images and links is very easy. When I had contacted customer support about a new feature being added they were quick to respond and very helpful.

The number one thing that I dislike is that when an email is reported, every link within the email should automatically be scanned. Having to go through and individually click the scan button for each link and image is time consuming. If there was one button that said "Scan All" it would save a lot of time.

It is solving the problem of having a way to manage phishing emails. It's easy to tell employees to click the button rather than forward the email to the IT department.

-Security Training

-Phishing Email Removal

-Automation

-Email Analysis

-Phishing Remediation

The Blocklist feature does not support Google Workspace, which is a significant limitation for organizations using GSuite instead of Microsoft products

PhishML isn't reliable enough to allow their users to depend on.

The reporting section. Phishing button. It saves time and is easy to use

system works great! No complains. I am happy with the product

phishing emails reporting, easy training assigment

It's phishing detection system is extremely helpful in catchinbg, sorting, and removing phishing emails from users.

I haven't found a feature about it yet that hasn't been useful.

It can look into the code and see whether something is a threat on a level that we would never be able to (at least not as quickly), and gives us a clean platform to determine whether these emails are a threat; and the frequency that users get them.