Cofense Triage vs. KnowBe4 PhishER/PhishER Plus

The tool is very helpful in improving Phishing detection capabilities as it streamlines the process of analyzing user reports a lot. Besides it has a built-in mechanism of rating reporters(end-users) based on their historical performance. Downside - tool requires continuous resource investment to deliver best result. Tool is not helping too much in improving user-education, because automated response process is not immediate and is prone to errors

Incentivized

PhishER comes with some good features, such as PhishML, PhishRIP, PhishFlip, etc. These features help us manage phishing email reporting incidents. From reporting emails via Phish Alert Button plug-in to collecting all reported emails in one place at the PhishER dashboard. Now, the PhishML comes into play, scanning all reported emails and tagging each as clean, spam, or threat. With the help of this machine learning-based algorithm, our investigation process becomes easier. Other features, such as PhishRip, help to search and quarantine phishing emails, and PhishFlip converts a real phishing campaign to a test phishing campaign.

Incentivized

• Separating links and attachments contained in the email, and checking to see if they are known malicious.
• Clustering like emails to save time when responding.
• Providing risks scores with each cluster to give an estimate on which clusters should be addressed first.

Incentivized

• One platform that integrates reported emails and using PhishFlip to educated staff.
• Automation to remove malicious emails from mailboxes.
• Instantly report back to users if an email is safe or malicious.
• Easily review vital technical information to help you make a decision if an email is a threat.
• Allow comments to be left from staff and IT.

Incentivized

• There are too many interdependent pieces which you have to acquire separately.
• I think Cofense has a lot of capabilities and usefulness, but I think it's too a la carte.
• We own Cofense and PhishMe currently and there are some gaping holes that require additional licensing to close.

Incentivized

• Issues with Global Blocklist
• Email Template Modification - Simplification
• Target Specific Users vs. Groups
• PhishRIP info tabs (i.e. if improperly check ripped emails are turned into tests. This has caused issues.) Info tabs or markers allow user to hover and get more information about what action a check box or slider provides.

Incentivized

Cofense is stable and provides easy to use solution to aid the investigation of emails as well as managing simulated phishing campaigns.

Incentivized

When we first discovered that KnowBe4 released something like this, we saw a demo of it and were floored at what it could do and how it could help us from a security standpoint. Gone are the days of us in IT sending out a mass email saying please don't click on anything in the email from sender "X", and it allows us to quietly and easily ensure that people don't take any action on malicious emails.

Incentivized

The interface is easy and intuitive.

Incentivized

I give it an eight for the feature set. While I only give it an eight because the complexity and interconnectedness of the tools mean that there needs to be quite a bit of RTFM to get the most out of the products.

Incentivized

We've experienced zero downtime.

Incentivized

No slowness seen.

Incentivized

Responses to questions were answered quickly and accurately.

Training was through, relevant and easy to follow.

Incentivized

It was very simple to implement - with just a few settings needed to connect it to our O365 environment

Incentivized

The other product had a lot of fails on the auto-processing and did not integrate well with our current environment. One issue had to do with the way it sends the submissions to its processing engine—our email gateway configuration would have blocked this traffic. I also did not like the user interface.

Incentivized

Harmony does not provide security awareness training or simulated phishing emails like KnowB4. However, it does provide a phish alert button & workflow similar to PhishER & we may stop using PhishER because the Phish Alert reports from PhishER don't feed into Harmony to help train it from phishing emails that go through. We got Harmony after KnowB4 because we needed a tool to PREVENT phishing emails from getting to people's inboxes in the first place, which KnowB4 has very little capability for other than PhishER+ blacklists. It is a shame KnowB4 does not have the anti threat phishing prevention like Harmony considering all the email data it has & its existing AI analytic capabilities.

Incentivized

We've experienced zero downtime

Incentivized

• Due to the integration potential, large amounts of time are saved on a daily basis.
• Incident response time has dropped due to the increased information available by having access to phishing emails directly.
• Staff are able to effectively learn how multiple tools in our environment are used by mastering Triage. This has decreased training time greatly and increased the effectiveness of each associate.

Incentivized

• Phish/ER & PAD: Identifying email threats more quickly allowed us to send alert to the users' community in a timely manner based on the pattern of the threat.
• KnowBe4 Training Campaigns have proven to noticeably increase users' awareness.
• KnowBe4 Phishing Campaigns made users realize how dangerous and deceiving hacker can be.

Incentivized