Cofense PhishMe vs. Kaspersky Security Awareness

It's a very apt tool for the scenario where there are multiple users and verticals in an organisation. Phishing Campaigns and recording their response actions is quite easier through this tool. Not suitable for a small organization (less than 500) that can maybe use some open tools or self-made emails for campaigns.

Incentivized

We receieve a lot of emails per day. And I mean a Lot. Said that, this
program has been useful because it shows how to analyse emails and
detect possible phisihing attacks. The knowledge of emails is pretty big
and means you are always up to date in terms of scam emails. For daily
use it's pretty useful.

Incentivized

• Easy to Navigate GUI - easy to create and run scenarios
• In depth reporting - Ability to provide detailed reports by department, title, etc. for follow-up training
• Adoption of new technology - new additions such as Responsive Delivery and Recipient Sync allow less overhead for running scenarios
• Introduction of new templates - new templates being introduced all the time to keep up with currently seen campaigns

Incentivized

• Easy to understand examples of phishing emails
• It trainings for employees
• Goals that can be adapted to each role

Incentivized

• Many of the URLs come in with an unknown reputation and although it may be challenging from threat intel feeds, somehow allowing a more in-depth analysis of the URL can provide better/quicker decision making or validation.
• Adjustable widgets for reporting, although the provided are already built very well.
• Provide in-house templates or summaries of actionable items, such as a single brief on a major phish.

Incentivized

• I wish we could attach a custom file to the phishing
• I wish there was a way to edit the return screen when a user clicks on the phishing.
• I would like there to be an integration with Google Workspace, to add a feature to Gmail, for the user to report as phishing, like there is for 365.

Incentivized

Its built with UX in mind and is aimed at non-tech people, to ensure that almost everyone can run the campaign. But if we go deeper - sometimes you will need an HTML editor or support in order to figure out some advanced edits you might want to add in your scenarios.

Incentivized

The platform gains new features and its UI is always being updated, the user's training and phishing history is a differentiator. Filters make it much easier to search for users, and we can add new fields to include different sectors and business units.

Incentivized

I have not had to use their support for pretty much anything. The software works well, and is very intuitive. I would imagine their support would be rather basic as there is not too much that can go wrong with a report phishing button, and if it were I would probably consider a different software.

Incentivized

It's a must, even if you are never going to use the tool. Cofense aims to provide phishing training first and tool second.

Incentivized

There are some hiccups, but there are meant to be, when you implement something in a large scale enterprise.

Incentivized

PhishMe is a market leader in terms of phishing simulation solutions. The customization appears unmatched when compared with competitors and the support we have experienced from Cofense has been excellent. Phish me offers lots of realistic templates which are updated regularly which is far ahead of other solutions. Phish me also provides lots of detailed statistics as well as high-level numbers which are really useful for some clients who want details, and others who only want high-level overviews.

Incentivized

For the cost-benefit, we chose Kaspersky Security Awareness, we got a trial with many licenses, this was decisive in the purchase, as we were able to do a phishing simulation and test our maturity in relation to our users.

Incentivized

• From a normal user's perspective, it's an easy and fast, very very user-friendly phishing email reporting structure. No need to remember any email address, no need for sophisticated handling of malicious emails while sending/ reporting. Just a click and it is done.
• From the admin and analyst point of view: Easy and clutter-free triaging pane, IOC reputation check facility, Rules and Recipes section for automation and focused triaging, Notification to the reporter based on the triaging done is really a helpful feedback loop.
• Overall: Simple to handle, less learning curve, well managed, less administration time, fewer issues, less maintenance time.

Incentivized

• For compliance, we were looking for a tool that covered cybersecurity awareness training and phishing campaigns.
• We studied other tools, but the price of phishing campaigns alone was too high. This tool integrated everything.
• Our target in phishing campaigns was less than 4% of clicks, in more than 2 years using the platform, we went from 25% to 2% in click percentages in targeted and general campaigns.

Incentivized