PhishER Reviews

The integrations are extremely helpful. We are able to integrate VirusTotal for additional scanning of URLs and file signatures to identify threats that may have made it through our Email Security Platform. We are also able to integrate our Helpdesk application to auto-generate tickets for Threats and for submissions that do not have a conclusive disposition. Both of these integrations save us time. The platform also allows us to attach the original message to an acknowledgment email for submissions that are found to be clean. Again saving us time.

We have been on the platform for about 2 years. At this point, I have not found anything in the platform that I do not like. One feature I would like to see in the platform in the future would be a sandbox to allow security professionals the ability to detonate malicious attachments/URLs/code to allow us the ability to see the behavior of the attack. This would help in our threat hunting throughout the complete enterprise network.

The biggest problem we are solving with PhishER is the time between our email security firm acknowledging/blocking a threat and the few messages that will slip through that crack. PhishER provides our users the ability to report these threats so we can go back to see if other users have been affected before the email security starts blocking because of the found threat.

The ease of threat resoltion is by far the best feature. We are able to quickly target and remove possible threats. Thanks to the Office 365 Integration it was very easy to implement into our work environment and staff were able to utilize it right away. Thanks to this, staff have an easy process to report any possible threats within our email system and we get more reports than we did prior to using Phisher.

The user interface is a little confusing at first, but becomes easier to navigate and figure out as you use it.

Phisher is allowing us to reduce the impact of phishing emails within our Agency. It allows to quickly target and remove any possible threats throughout all the users in our system with very little work from our support team.

Phish ER allows for our users to report suspected emails for review as well as allows us to quickly Mitigate messages that have made it passed our email gateway that are malicious. This allows my security team to quickly respond to potential threats and further secure our environment.

I have been using this platform for many years and have not had any complaints. The tools work as expected.

Phish ER allows us to quickly triage reported phishing messages in a timely manner. It also has been great for messages that my security team has noticed that has no been reported by an end user.

- Ease of use and implementation

- Phish Report button allows for a straightforward way for end-users to report what they believe to be a Phishing email

- PhishRip allows you to quickly quarantine a mass phishing email on campus. Quicker than the built in Microsot tools

I really would like to see some sort of whitelist and blacklist setup in the console so we can manually assign certain addresses and domains as clean/risky. Also, email alerts can be a little slow at times

An easy way for end-users to report suspicious emails and also gives IT the ability to quarantine risky emails in our enviorment utilizing PhishRip.

It it benefiting IT in that we are spending less time on getting these risky emails out of people's inboxes and less time explaining to end-users if a particular email is suspicious or legitamate

I like the Phish Alert report button the best that is intigrated with email. Our users suspect something suspicious and they report it. If it is a test, it will immediately say congratulations. It also has the ability to auto response on many that have been identified in the past. We do occasionally have to review them and release or report as spam or threat. This has been forgotten frequently and we will have quite a few, but it doesn't hinder daily work at all. Very satisfied with the product.

I can't think of anything that needs improved.

Training users to be careful of their emails.

The automation capabilities of PhishER really helps augment our small team with the abiltity to work on other tasks and not have to worry about responding to every single e-mail that is submitted to our phishing mailbox. Once we got our rules set up and tuned we went from having to respond to 100 out of 100 messages, to only having to respond to messages to less then 5% of the incoming message.

There is not much that we didn't like about PhishER. I was already aware of the need to configure this tool for it to function as we wanted it to when messages came in. I would have to say the only feature missing, at this time, is the ability to directly respond to a user from the platform outside of the automated template. However, my understanding is that they are looking into options for including this in future platform releases.

Users have always been the weakest link when it comes to phishing campaigns. THis helps us provide a means for our global user base to submit phishing messages to our security team for review. The automation kicks back a response of it being either an internal legitimate message, external legitimate message, SPAM message or a phishing message giving our users an almost realtime feedback of their messages they submit.

Helps your organization streamline your processes around phishing and SPAM. The quarantine area clearly identifies the message, the threat time, and the status of the resolution. Additional features with KB4 allow you to find similar messages deemed a threat and remove them from yours users' inbox. It's a game changer

There are so many comprehensive features built-in, it can be difficult at times to ensure you're using all the features.

Staff is more cognizant of emails that come in and when to open/click on items in the email. There is an awareness to suspicious emails like never before. Staff is "on guard" and doing their part to help protect our organization and themselves.

This product has become vital, regularly used solution for our company. From the engaging and informative training to the penetration testing, KnowBe4 has changed our cybersecurity culture for the better. Phish ER is also incredible - our users know anything "phish"y get's the fish-hook button clicked, and reviewing emails in Phish ER is a breeze. I'd also be remiss if I didn't talk about the customer service; support reps are kind, knowledgeable, and alwats eager to help. They helped walk us through the process of building training and penetration testing campaigns as well as the install of the Office365 integrations.

Some of the menus can be a touch clunky to navigate and more customizable/data rich reports would be nice, but that's small beans compared to the benefits of KnowBe4.

It's cleared my regular inbox of "Is this email safe?" clutter. All of my users know to send anything suspicious to Phish ER, and they know they'll get a prompt response.

Its great that it learns from the emails that are reported so that it gets more efficient as time goes on. It also integrates with the KnowBe4 platform to use real world phishing emails to create more targeted phishing campaigns using real world attacks. Its easy to set up, and easy to manage. That it can search other users mailbox for the same mail and move them to quarantine automatically so less people get a chance to click on the phishing emails.

There is not a lot that I can complain about. Its easy to set up, easy to use, and KnowBe4 is there is you need assistance. Ab

PhishER is automating what happens when a user reports a suspicious email. Our organization receives thousands of emails per day and even with mail filters some malicous emails still get through. Just the process of going through reports from our users takes up a lot of time and PhishER helps cut this down by automatically handling "clean" and spam emails by the definitions we set up. This allows us to focus on emails that are actually a problem and to make targeted responses to combat those threats. As a secondary function. PhishER through PhishFlip uses those bad emails to created phishing emails for or simulated attacks using real emails that we have received as a company.

I like the simply use of the portal and configuring PhishER is very simple. The additioanl features that we get with PhishER that we do not with our standard email solution is great.

Would like to see more actions to be included out of box and setting more automated responses for certain emails.

PhishER helps us quickly quarantine malicious emails from users inboxes as opposed to our old email security solution which took some time to quarantine those emails. The SOAR capabilities quickly helps us identify which emails are malicious or spam and removing them from the users inboxes.