Our IT department recently installed a plugin in Microsoft Outlook that allows you to report a suspected phishing attempt with the click of a button. It's simple and effective to use.

I haven't found anything that I dislike about PhishER so far. It's not a free service, so it could be cost-prohibitive for some nonprofits, organizations, and companies, but it's a great service.

Our IT department implemented required phishing training to all employees and then implemented PhishER in our Outlook email program. Our employees are now more knowledgeable about phishing attempts and this gives us a great way to report phishing emails without having to contact IT every time. IT even sends out fake phishing attempts to see how employee awareness has changed.

Before PhishER, IT had to manually check every suspect email reported to us. Now, we only need to check email with an "Unknown" verdict. Saves us a LOT of time, and risk! Since email remains the primary vector by which cybersec threats are successfully delivered, having this additional layer of protection for the email that gets through our front-end scanners is critical.

The only downside in my opinion is that as an engineer, I would like to see the specific reasons that PhishER assessed a particular email as a threat. This is a small negative, however!

PhishER is adding additional protection to our email environment, and of course that is of great benefit. It's also providing a business benefit by automating the reporting and initial assessment of suspect email.

The best part of PhishER is the ease of reviewing all reported suspicious emails and how it learns which email flagged as clean to automatically do the same if similar email messages were reported again. The most helpful part of PhishER is the capability to query for similar email messages, and further action can be taken.

The capability to query for similar email messages and quarantine is great but it's lacking because it fails to find many similar messages where similar messages ends up reported by the users instead of already being quarantine.

The IT department usually get emails individually or an IT ticket asking if a suspicious email is legitimate or not. PhishER decreased that interaction (where IT staff have to take time to review the suspicious email, take action, and respond back to the user) as it is complete that same task automatically. It also provides a timely response if the email is clean. This is benefitting us because actions are being taken to address suspicious emails received.

Its a good testing tool and it helps me to know if im performing phishing tactics correctly.

Nothing to dislike the tool does what you need it to do and help educate your staff.

It let me know if I can identify phishing attacks correctly.

We have a 1 person IT department, combing through emails to confirm good or bad is extremely time consuming. With rules and automated tasks, it has become very easy to manage. How does it compare to competitors? I don't think anyone can compete with the suite of products and support to train employees on cyber hygiene.

There is no downside to PhishER. the system is pretty self-explanatory, and the more you use it the snappier it becomes.

Perhaps more built-in intelligence to handle even more of the emails would be a plus, but honestly, it fits our needs without it.

PhishER gives the employees a single easy method to report phishing emails, as well as standardizing the IT department's approach toward suspicious emails. The product has offered guidance to the IT Department on how to address the issue of reporting suspicious emails.

The best part of using PhishER is that the process is 100% automated. Whenever a user receives a suspicious message, it can be highlighted in the Inbox and with a tap on the PAB on the Outlook toolbar, the message is removed from the user's Inbox and immediately sent to the PhishER mailbox where it can be examined quickly by a group of admins.

I am still looking for a downside of using PhishER.

Previously, when a user reported a suspicious message, it needed to be sent inside another message to the Service Desk to be able to see the header information. Now, all admins reviewing email communication receive a message announcing that a security threat has been identified with KnowBe4's Phish ALert Button (PAB) with a link to the actual message in the PhishER Inbox. This saves considerable time and removes the Service Desk from the process of collecting the message itself.

- Ability to query inboxes to identify possible contamination and get a birds-eye view of how a situation could impact the organization.

- Training modules keep users engaged with traceability

- Training is also a huge bonus when getting the complete package

The initial configuration and querying can be a bit cumbersome, but manageable.

Allows us to have user-reported Phishing or SPAM ability to remove email for review and ultimately either remove or approve on end users mailboxes.