Cofense PhishMe vs. Microsoft 365

It's a very apt tool for the scenario where there are multiple users and verticals in an organisation. Phishing Campaigns and recording their response actions is quite easier through this tool. Not suitable for a small organization (less than 500) that can maybe use some open tools or self-made emails for campaigns.

Incentivized

I usually recommend Microsoft 365 to my clients to keep them away from the Exchange server (sorry!) Our business has a lot of issues with exchange email functions and copy machines. I always recommend they download the desktop version and use the online version as needed. You never know when you will be without an internet connection, but you can usually trust your laptop will have a decent charge, and you can still be productive! Let it sync when the powers are back on - or your connection is alive.

• Easy to Navigate GUI - easy to create and run scenarios
• In depth reporting - Ability to provide detailed reports by department, title, etc. for follow-up training
• Adoption of new technology - new additions such as Responsive Delivery and Recipient Sync allow less overhead for running scenarios
• Introduction of new templates - new templates being introduced all the time to keep up with currently seen campaigns

Incentivized

• keeps me extremely organized. It is so easy to link calendars, emails, and documents.
• keeps me well connected. It is so easy to send a quick message on teams or send an email to a group (for example, my particular team within the company).
• easy to use. Everything is straightforward, making it easy to find an answer to a question. There is even a search option to figure out how to do something within Microsoft.

• Many of the URLs come in with an unknown reputation and although it may be challenging from threat intel feeds, somehow allowing a more in-depth analysis of the URL can provide better/quicker decision making or validation.
• Adjustable widgets for reporting, although the provided are already built very well.
• Provide in-house templates or summaries of actionable items, such as a single brief on a major phish.

Incentivized

• I wish it was a little simpler to integrate things from one Microsoft Feature into another one. Perhaps I just don't know the tricks for that yet...after all these years of using it.
• I didn't like how it defaulted to saving the document automatically with changes, like Google Docs, but it seems that has now changed, and is better now.
• Generally, I really like how the suite works as is.

Incentivized

I am completely satisfied with the product, and helps me on a daily basis. I do not the exact cost (it is not a cheap suite) but on the medium and long term the return on investment is guaranteed.

Incentivized

Its built with UX in mind and is aimed at non-tech people, to ensure that almost everyone can run the campaign. But if we go deeper - sometimes you will need an HTML editor or support in order to figure out some advanced edits you might want to add in your scenarios.

Incentivized

It being the default office suite means it's user experience and idioms are things that everyone is generally very used to and fluent with.

The sharing is relatively simple, being directly hooked into Entra AD, and expiry being a first class concern.

It's usability decreases at scale, with multiple people simultaneously making edits can make documents unusable.

I have not had to use their support for pretty much anything. The software works well, and is very intuitive. I would imagine their support would be rather basic as there is not too much that can go wrong with a report phishing button, and if it were I would probably consider a different software.

Incentivized

Over the past 8 years of using Microsoft 365, I have noticed that they change vendors often. This always leads to a poor experience in the beginning, then levels out after some time for the company to get things worked out. As a customer, it is really frustrating because I don't have time when something isn't working to have them "look into my issue" and get back with me. They have even closed a ticket I specifically told them to keep open. Your applications are only as good as the support.

Incentivized

It's a must, even if you are never going to use the tool. Cofense aims to provide phishing training first and tool second.

Incentivized

There are some hiccups, but there are meant to be, when you implement something in a large scale enterprise.

Incentivized

Everything works and I use it all the time.

Incentivized

PhishMe is a market leader in terms of phishing simulation solutions. The customization appears unmatched when compared with competitors and the support we have experienced from Cofense has been excellent. Phish me offers lots of realistic templates which are updated regularly which is far ahead of other solutions. Phish me also provides lots of detailed statistics as well as high-level numbers which are really useful for some clients who want details, and others who only want high-level overviews.

Incentivized

BTE, this search bar is not the best; I couldn't find Google Suite. In any case, it's challenging to find a suite with advanced tools that serves as an office. Google comes close, no one uses OpenOffice (hyperbole), and there isn't much else to use. If you add to that the recent collaborative functionalities, nothing really stacks up or compares; this has everything a person in an office (oversimplifying) needs to get work done.

Incentivized

• From a normal user's perspective, it's an easy and fast, very very user-friendly phishing email reporting structure. No need to remember any email address, no need for sophisticated handling of malicious emails while sending/ reporting. Just a click and it is done.
• From the admin and analyst point of view: Easy and clutter-free triaging pane, IOC reputation check facility, Rules and Recipes section for automation and focused triaging, Notification to the reporter based on the triaging done is really a helpful feedback loop.
• Overall: Simple to handle, less learning curve, well managed, less administration time, fewer issues, less maintenance time.

Incentivized

• Microsoft 365 has really been effective and cost saving option for our organization in terms of managing the mailboxes, collaboration and messaging.
• There is multiple must have features which comes all together in one package and therefore is cost effective.
• The only negative impact according to me is its inability to protect the environment or domain from external attacks effectively.