Cofense Triage vs. Sophos Rapid Response

The tool is very helpful in improving Phishing detection capabilities as it streamlines the process of analyzing user reports a lot. Besides it has a built-in mechanism of rating reporters(end-users) based on their historical performance. Downside - tool requires continuous resource investment to deliver best result. Tool is not helping too much in improving user-education, because automated response process is not immediate and is prone to errors

Incentivized

Knock on wood we haven't had a instance where we need to bring the Rapid Response team in. But from the meetings we had we are certain that they will be a valuable asset if and when we have an incident.

Incentivized

• Separating links and attachments contained in the email, and checking to see if they are known malicious.
• Clustering like emails to save time when responding.
• Providing risks scores with each cluster to give an estimate on which clusters should be addressed first.

Incentivized

• 24/7 team of remote incident responders
• Full-scale incident response service that will triage, contain and neutralize active threats
• Port Mortem of the incident with recommendations

Incentivized

• YARA rules, while the functionality is fantastic I've found that the documentation can be a bit confusing. Although, that might just be my personal experience.
• Rare glitches make the send notification button unusable. This can be remediated by navigating to a different report, but [it] is a bit of a pain in the moment.
• I would like to see a dark mode get added as well, but that's obviously a tertiary concern.

Incentivized

• For a non-profit pricing could always be better

Incentivized

Cofense is stable and provides easy to use solution to aid the investigation of emails as well as managing simulated phishing campaigns.

Incentivized

The interface is easy and intuitive.

Incentivized

We've experienced zero downtime.

Incentivized

No slowness seen.

Incentivized

Training was through, relevant and easy to follow.

Incentivized

The other product had a lot of fails on the auto-processing and did not integrate well with our current environment. One issue had to do with the way it sends the submissions to its processing engine—our email gateway configuration would have blocked this traffic. I also did not like the user interface.

Incentivized

We were a Secureworks customer and there were limitations on the platform that caused us to evaluate competitors. We didn't get to far in discussions with Palo but from what we heard and reach about Sophos RR it was an easy decision.

Incentivized

We've experienced zero downtime

Incentivized

• The biggest impact has been the time saved.
• My company had nothing of this sort previously and we were stuck trying to make use of free resources and doing things very manually. Triage was a huge life saver in this area.
• The ability to quickly respond to several users at once has been a great help.

Incentivized

• It was a positive when we negotiated our cyber insurance
• It is comforting to the Board of Trustees that we have this in our back pocket
• Helps us sleep at night knowing they're a phone call away

Incentivized