I like the knowledge that the program provides, our IT department used to get slammed with spam and phishing attempts and now the users are able to better distinguish what is a legitimate email and what is a phishing attempt.

Using the PhishRIP function allows us to recieve fewer requests so we can get back to our larger projects.

Initally we had a hard time getting up to speed, we wanted to hit the ground running so maybe if we had a knowledge base for new users with more advanced features. Like how to use wildcards when performing a PhishRIP.

added time for IT not dealing with the same phishing requests.

Being able to block an email after it has already been sent to minimize these requests

The automated rating of emails makes finding the high-risk emails a breeze. I have been able to create rules to carry out specific actions based on the risk rating or the likelihood that the email is spam or phishing. Users can forward an email to PhishER or use the phish alert button to kick off the once manual process of investigation automatically.

The GUI is somewhat clunky and takes some time to get used to. Initial setup is required to get PhishER talking to the KMSAT platform, which I wish is built-in natively, but this is not a deal-breaker by any means.

Manual investigation of emails and users deleting emails rather than having a way to report them. End users are identifying the benefits as well, with a reduction in spam hitting their inbox.

The central console is very friendly to use. I love the ability for users to send this to a central console. The deployment is quite simple and you can probably do it centrally using GPO or any other solution.

I was not able to find a version for other Operating Systems thank Windows, which can represent a problem when you have so many users using Linux or MACs. This is something that they probablye want to invest in the future.

You want to plan this correctly before deploying, make sure the configuration is right so you don't have to do this mulitple times.

The report back from phishing attemps is is a critical KPI for Information Security that everyone should be calculating