Integrating with all the other functionality that Knowbe4 brings makes the PhishER product seamless.

We receive a high volume of items, so navigating through and filtering is critical.

Reporting phishing emails and extracting that from users emails.

I like that it tahs emails and sets a acore based on threat, clean, or threat

Sometimes images dont always show and hard to troubleshoot the email

Help catch emails that get through our spam filter

I like the ease of setting up "actions" and then being able to click on the appropriate action for each reported email

I dont like the fact that you have to purchase a VT licences if you go over a certain amount of reported emails.

It's helping our members be able to report a suspicious email and our security team can investigate it when we have time rather than the member calling us on the phone every time they have a questionable email.

Being able to pull all infected or suspicious emails (PhishRIP) from the company network before "the usual suspects" have the opportunity to click or open malicious attachments brings a great deal of peace of mind. PhishFLIP's ability to create a testing opportunity out of what was once a genuine threat is also valuable, as it creates a "real world" training experience. Integration with VirusTotal allows automated scanning of links or attachments which speeds up response time

There is some room for improvement in the automation of resolving reported emails. Setting up rules is not particularly intuitive and, having not seen a volume to justify it, I have not spent the time to figure it out. Additionally, the query process for PhishRIP feels unpolished as it's not always easy to narrow down requirements. Also, if the reported email comes via a chain of "Is this safe?" emails being passed around, the original contents (sender, recipient, etc.) can become lost in the traffic and queries can become impossible to create effectively.

The inherent flaw with the PhishER approach is that it does little to mitigate ongoing attacks. This is in line with KnowBe4's approach to CyberSecurity in general which emphasizes the "human side" of cybersecurity, but can be frustrating when you're being bombarded by a specific attacker who is hoping his persistence will pay off and PhishER offers no way to shut down specific users, domans, IP's etc. All of that needs to be done at the firewall or ESA level.

As we are now looking at replacing our end-of-life ESA, we are discovering that there are other companies that can offer more holistic packages that include the hardware, the training, and the software. PhishER was something we added on as part of our need to implement training and so, at the time, working with KnowBe4 made a great deal of sense. However, now that we are looking at replacing our ESA I would have preferred to opt for a total-solution package. This is not because I am in anyway dissatisfied with KnowBe4 or their PhishER product, but because I dislike having to manage multiple tools and will always opt for more complete integration in a centralized package where I can.

If you're in need of a "total package" hardware, software, and training oriented security solution, there are, I think, better options - albeit far more expensive ones. But if you're looking for something to add onto your existing security measures, then KnowBe4 is an effective and affordable option.

Multiple instances of widespread attacks have been shut down, quickly and efficiently. This reduces the time spent on addressing the attack and minimizes vulnerability.

We are already seeing the benefits of PhishER at our company. Our employees get excited about discovering phishing attempts.

Getting PhishER stood up was a bit of struggle but that was not a deterrent. It is a great program.

It is helpimg out user get more familiar with phishing attemps and helping us keep the phishers out of our data.

Simple to grasp at first glance yet very deep in features.

There are a lot of options and it can be overwelming

Being aware of bad actors and how many there are out there

PhishER is amazing as i have implemented it for every user in my enviroment and it has helped stop a lot of phising attempts.

I have also notice it has help reduce people asking if something is spam. they know click the button and if it is spam it will be gone for good

the only real dislikes i have with the software is the deplyment to some machine. as it wouldnt work with group policy deployment. so it took about an hour or so to get the remaining machines to install the software.

The interface could use a bit of work also

im using it to solve issue we have been having with spam emails. also to reduce my spent time on looking into if something is spam or not. also is helping usings to detect spam on their own

It is a place where the collection of reported emails goes for me to review, and KnowBe4 also evaluates the emails' risks. I like the clean and simple console that KnowBe4 provides for such a critical part of online safety.

It was unclear to me how to address emails that my co-workers reported. I need to learn more about how PhishER works. I think a tutorial that walks you through how to address a reported email would be great.

PhishER is helping me determine which reported emails are threats, which are safe, and which are just spam. KnowBe4's discernment saves me time and energy.

Incident Prioritization and Tagging:

PhishER excels in helping incident response teams prioritize and categorize phishing threats. By assigning customizable tags to incidents, security personnel can easily classify and track cases based on severity, type, or any other relevant criteria. This feature aids in efficient incident triage, ensuring that urgent cases receive immediate attention while less critical issues are appropriately addressed in due course.

Nothing at all, the product works as expected and I cannot see a reason to not have it.

Automated Email Analysis:

One of the standout features of PhishER is its ability to automate email analysis. The platform leverages advanced algorithms and machine learning techniques to analyze incoming emails, swiftly identifying potential phishing threats. This automation significantly reduces the time and effort required to sift through vast emails, allowing security teams to focus on critical incidents promptly.

You can build templates for quick actions to automate reponsees.

One more tool to go look at and reemember to open. Would be nic ein thee dashboard somehow.

Gives my users a way to report phish emails directly to PhishER lowerin my inbox clutter.