PhishER has greatly helped us remove manual processes from our Email Incident Response process and allowed us to automate and leverage AI in order to properly anyalze and respond to reported email phishing threats. PhishER integrations with M365 and VirusTotal has allowed us to stay one step ahead of email threats and respond to reported incidents faster and more effectively. The latest updates including CrowdStrike and Syslog integrations are much appreciated, and is good to see further inovation in the product. Implementation was also seemless like most SaaS products, Would highly recommend if already utilizing the KnowBe4 Platform!

Reporting could be greatly improved to generate better charts, visuals and executive summary reports similiar to the KnowBe4 platform. PhishML still needs work, particularly in classifying clean senders/domains.

- Automating Incident Response

- Leveraging AI and VirusTotal Integrations

- Organizing Threat Cases

I love PhishER because it's easy to integrate the Phish Alert button in Outlook. I get an admin portal that's easy to work with, and automation is a breeze.

Some slowness in Phish Alert integration in Outlook

Phishing reporting without users needing to forward to IT

PhishER rules both systema nd custom made are the best. Actions for the rules which we made. Tags which tags the appropriate emails whith Threat, Clean and Spam and various other. Phish ML and PhishRIP query is worth noted. I personally like PhishRIP which quarantined the emails at user end if it matches the criteria

PhishML needs constant learning- PhishRIP features need updated- by adding a feature like delete/update query option which is not available. And moreover Phish Alert Button is a must if PhisER has to work.

Its triages recieved malicious emails. Its a one point destination for Admins or Security operations to setup rules and actions for which PhishER automatically triages and sends a notification to both user and admins.

Good solution with good options for complexity and integration with other tools.

Integration with Outlook Add-In for all users is very helpful in alignment with the Phish Testing (good pairing).

Provides easy button for our staff that like to email support every email they suspect.

Has integration with M365 when malicious emals found to remove from other mailboxes from Exchange Online.

Sometimes hard to determine what was found.

Could use better reporting options

Newest options to integrate further with M365 Incidents / Alerts add mores work we want to avoid.

Provides simple integration that users can use in order to report questionable emails. Eases our first line support load.

First Line Security Review: Automation to review and provide feedback is again helpful, not needing to engage security specialist for every questionable email.

Easy to use and extremely helpful for getting rid of phishing messages and spam

Nothing. Works great and everyone loves it.

Helping users look out for phishing and spam email messages. Gets them involved in cybersecurity.

The huge library of prepared content along with the ASAP guide to assist with the onboarding of the product got us up and running really quickly. Our customer success manager was always there to support with the onboarding and progression of our training campaigns.

The PhishER component seems a little excessive for our needs as we already have other filtering tools within Office 365. However, it does help to keep track of what our users want to report, allowing us to keep track of familiarity with phishing and spam mails.

Understanding user awareness and tracking the occasional phishing mail that might make it past our other controls and removing them from other users' mailboxes before they are opened.

The integrations are extremely helpful. We are able to integrate VirusTotal for additional scanning of URLs and file signatures to identify threats that may have made it through our Email Security Platform. We are also able to integrate our Helpdesk application to auto-generate tickets for Threats and for submissions that do not have a conclusive disposition. Both of these integrations save us time. The platform also allows us to attach the original message to an acknowledgment email for submissions that are found to be clean. Again saving us time.

We have been on the platform for about 2 years. At this point, I have not found anything in the platform that I do not like. One feature I would like to see in the platform in the future would be a sandbox to allow security professionals the ability to detonate malicious attachments/URLs/code to allow us the ability to see the behavior of the attack. This would help in our threat hunting throughout the complete enterprise network.

The biggest problem we are solving with PhishER is the time between our email security firm acknowledging/blocking a threat and the few messages that will slip through that crack. PhishER provides our users the ability to report these threats so we can go back to see if other users have been affected before the email security starts blocking because of the found threat.

The integration of PhishER with the Phish Alert Button and Microsoft365 has proven to be the most valuable.

The reporting is lacking quite a bit. I would love to be able to do more in generating dashboard widgets that tell the story I want told that could then be exported to a report for my ITSC without much manipulation.

Removal of malicious emails from user mailboxes. When a user reports a suspicious email and that email is deemed a "Threat" then PhishRIP does it's thing.

PhishER saved me time with automated respsonses to normal business emails, automated reports, scans, etc that are flagged as phishing emails. 2/3s of our emails are handled automatically. Integration with VirusTotal has been helpful to quickly identify certain types of threats. This has improved my time to focus on real issues, attacks or clean emails falsely flagged.

PhishER can be slightly difficult to configure without much experience with YARA rules. When I configured it I would have prefered more tips, training and practice rules to review before I configured my rules.

Before PhishER, the department responded to about 10% clean emails with no understanding what the customer impact was. These emails had unexpected PDF scans from customers or were vendors sending emails that looked odd. Now we respond to 100% of customer impacting clean emails and about 60% of clean emails. All threats are identified, investigated and responded to quickly with PhishRip.

PhishRIP, by far, is the best feature of PhishER. The ability to hunt and remove malicious emails across all my tenants is amazing!

The system is not perfect, and will occasionally not catch all emails in the PhishRIP. Likewise block listing URL's will occasionally fail.

Remediating malicious emails and preventing them from landing in users' inboxes.