Cofense PhishMe vs. Offensive Security Cybersecurity Courses and Certifications

It's a very apt tool for the scenario where there are multiple users and verticals in an organisation. Phishing Campaigns and recording their response actions is quite easier through this tool. Not suitable for a small organization (less than 500) that can maybe use some open tools or self-made emails for campaigns.

Incentivized

For cybersecurity practitioners interested in advancing their skillset in deeply technical matters, Offensive Security Cybersecurity Courses and Certifications offers some of the most well respected, up to date, technically challenging and comprehensive training courses out there; however, users must be very disciplined, determined and resourceful in order to make the most of the high quality content on offer since good time management is critical and "Try Harder" isn't just a motto for Offensive Security Cybersecurity Courses and Certifications given the content could frustrate some inexperienced users that may be pressed for time and don't have enough drive to spend learning a good amount of possibly unfamiliar but essential content and concepts

Incentivized

• Easy to Navigate GUI - easy to create and run scenarios
• In depth reporting - Ability to provide detailed reports by department, title, etc. for follow-up training
• Adoption of new technology - new additions such as Responsive Delivery and Recipient Sync allow less overhead for running scenarios
• Introduction of new templates - new templates being introduced all the time to keep up with currently seen campaigns

Incentivized

• Content is comprehensively laid out in a clear manner
• Content is regularly kept up to date with the latest techniques seen today
• Content doesn't assume too much about the reader's existing knowledge levels
• Labs are representative and designed to emulate what could happen in real life
• Certifications are well respected and widely recognised in the security industry
• Prices are not that expensive compared to other vendors etc.

Incentivized

• Many of the URLs come in with an unknown reputation and although it may be challenging from threat intel feeds, somehow allowing a more in-depth analysis of the URL can provide better/quicker decision making or validation.
• Adjustable widgets for reporting, although the provided are already built very well.
• Provide in-house templates or summaries of actionable items, such as a single brief on a major phish.

Incentivized

• The exams are quite hard to pass and some require a lot of hours to be spent on them which might leave some exhausted
• Some of the content can be hard to remember since there is a lot of syntax that might be intimidating to users not familiar with something similar from before
• Perhaps consider more specific, tailored courses rather than courses which cover many topics at once which might not necessarily be within the same niche
• More human to human interaction could be beneficial to prepare for the exams sometimes

Incentivized

Its built with UX in mind and is aimed at non-tech people, to ensure that almost everyone can run the campaign. But if we go deeper - sometimes you will need an HTML editor or support in order to figure out some advanced edits you might want to add in your scenarios.

Incentivized

I have not had to use their support for pretty much anything. The software works well, and is very intuitive. I would imagine their support would be rather basic as there is not too much that can go wrong with a report phishing button, and if it were I would probably consider a different software.

Incentivized

It's a must, even if you are never going to use the tool. Cofense aims to provide phishing training first and tool second.

Incentivized

There are some hiccups, but there are meant to be, when you implement something in a large scale enterprise.

Incentivized

PhishMe is a market leader in terms of phishing simulation solutions. The customization appears unmatched when compared with competitors and the support we have experienced from Cofense has been excellent. Phish me offers lots of realistic templates which are updated regularly which is far ahead of other solutions. Phish me also provides lots of detailed statistics as well as high-level numbers which are really useful for some clients who want details, and others who only want high-level overviews.

Incentivized

Offensive Security Cybersecurity Courses and Certifications are very comprehensive, regularly kept up to date and, unlike some other courses out there, are quite challenging and technically demanding even for industry colleagues who've been in the field for many years; for this reason, Offensive Security Cybersecurity Courses and Certifications is excellent for your more senior cyber security analysts/engineers as it will enable these technical experts in your organisation to further enhance their knowledge and learn some new tricks that they can then bring back to the workplace to share with the rest of the team

Incentivized

• From a normal user's perspective, it's an easy and fast, very very user-friendly phishing email reporting structure. No need to remember any email address, no need for sophisticated handling of malicious emails while sending/ reporting. Just a click and it is done.
• From the admin and analyst point of view: Easy and clutter-free triaging pane, IOC reputation check facility, Rules and Recipes section for automation and focused triaging, Notification to the reporter based on the triaging done is really a helpful feedback loop.
• Overall: Simple to handle, less learning curve, well managed, less administration time, fewer issues, less maintenance time.

Incentivized

• Labs have allowed us to safely test new offensive as well as defensive techniques
• Certifications are widely recognised and allow us to showcase our team's maturity to external parties when required
• Content is very comprehensive so this lessens the need for covering the same topics in our internal knowledgebases
• The platforms that Offensive Security Cybersecurity Courses and Certifications have setup helped showcase the benefits and drive adoption of infrastructure as code in our own organisation

Incentivized