TrustRadius: an HG Insights company

KnowBe4 PhishER/PhishER Plus vs. Microsoft Defender for Endpoint

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    KnowBe4 PhishER/PhishER Plus

    Score9.1 out of 10
    N/APhishER is presented as a lightweight Security Orchestration, Automation and Response (SOAR) platform to orchestrate threat response and manage the high volume of potentially malicious email messages reported by users. And, with automatic prioritization of emails, PhishER helps InfoSec and Security Operations team cut through the inbox noise and respond to the most dangerous threats more quickly.

    $0.75

    per month (billed annually) per seat

    Microsoft Defender for Endpoint

    Score8.8 out of 10
    N/AMicrosoft Defender for Endpoint (formerly Microsoft Defender ATP) is a holistic, cloud delivered endpoint security solution that includes risk-based vulnerability management and assessment, attack surface reduction, behavioral based and cloud-powered next generation protection, endpoint detection and response (EDR), automatic investigation and remediation, managed hunting services, rich APIs, and unified security management.

    $2.50

    per user/per month

    Pricing
    KnowBe4 PhishER/PhishER PlusMicrosoft Defender for Endpoint
    Editions & Modules
    3001-5000 Monthly Pricing Per Seat
    $0.75
    per month (billed annually) per seat
    2001-3000 Monthly Pricing Per Seat
    $0.85
    per month (billed annually) per seat
    1001-2000 Monthly Pricing Per Seat
    $1.00
    per month (billed annually) per seat
    501-1000 Monthly Pricing Per Seat
    $1.15
    per month (billed annually) per seat
    101-500 Monthly Pricing Per Seat
    $1.50
    per month (billed annually) per seat
    Academic
    $2.50
    per user/per month
    Standalone
    $5.20
    per user/per month
    Offerings
    Pricing Offerings
    KnowBe4 PhishER/PhishER PlusMicrosoft Defender for Endpoint
    Free Trial
    NoYes
    Free/Freemium Version
    NoNo
    Premium Consulting/Integration Services
    NoNo
    Entry-level Setup FeeNo setup feeNo setup fee
    Additional Details——
    More Pricing Information
    Community Pulse
    KnowBe4 PhishER/PhishER PlusMicrosoft Defender for Endpoint
    Considered Both Products
    KnowBe4
    Chose KnowBe4 PhishER/PhishER Plus
    Microsoft's backed in email reporting tool is good but the time to resolution varies for all messages. It claims that it will help train filters to better classify messages into the tenant, but we have not seen much of that.

    Barracuda offered a similar product to PhishER but …
    Incentivized
    Microsoft
    No answer on this topic
    Key User Insights
    Would buy again
    96%
    Would buy again
    103 Answers
    98%
    Would buy again
    117 Answers
    Delivers good value for the price
    99%
    Delivers good value for the price
    103 Answers
    98%
    Delivers good value for the price
    109 Answers
    Happy with the feature set
    96%
    Happy with the feature set
    103 Answers
    94%
    Happy with the feature set
    113 Answers
    Lived up to sales and marketing promises
    96%
    Lived up to sales and marketing promises
    94 Answers
    98%
    Lived up to sales and marketing promises
    96 Answers
    Implementation went as expected
    94%
    Implementation went as expected
    94 Answers
    95%
    Implementation went as expected
    103 Answers
    Features
    KnowBe4 PhishER/PhishER PlusMicrosoft Defender for Endpoint
    Incident Response Platforms
    Comparison of Incident Response Platforms features of KnowBe4 PhishER/PhishER Plus and Microsoft Defender for Endpoint
    Feature
    KnowBe4 PhishER/PhishER Plus
    8.6
    94 Ratings
    2% below category average
    Microsoft Defender for Endpoint
    -
    Ratings
    Company-wide Incident Reporting8.876 Ratings00 Ratings
    Integration with Other Security Systems8.572 Ratings00 Ratings
    Centralized Dashboard8.793 Ratings00 Ratings
    Machine Learning to Prevent Incidents8.679 Ratings00 Ratings
    Live Response for Rapid Remediation8.680 Ratings00 Ratings
    Endpoint Security
    Comparison of Endpoint Security features of KnowBe4 PhishER/PhishER Plus and Microsoft Defender for Endpoint
    Feature
    KnowBe4 PhishER/PhishER Plus
    -
    Ratings
    Microsoft Defender for Endpoint
    8.3
    56 Ratings
    3% below category average
    Anti-Exploit Technology00 Ratings7.653 Ratings
    Endpoint Detection and Response (EDR)00 Ratings9.155 Ratings
    Centralized Management00 Ratings8.955 Ratings
    Hybrid Deployment Support00 Ratings7.110 Ratings
    Infection Remediation00 Ratings9.454 Ratings
    Vulnerability Management00 Ratings7.252 Ratings
    Malware Detection00 Ratings8.955 Ratings
    Best Alternatives
    KnowBe4 PhishER/PhishER PlusMicrosoft Defender for Endpoint
    Small Businesses
    No answers on this topic
    Acronis Cyber Protect Cloud
    Score9.1 out of 10
    Medium-sized Companies
    No answers on this topic
    Watchguard Endpoint Security
    Score8.8 out of 10
    Enterprises
    No answers on this topic
    ESET PROTECT
    Score9.1 out of 10
    All AlternativesView all alternativesView all alternatives
    User Ratings
    KnowBe4 PhishER/PhishER PlusMicrosoft Defender for Endpoint
    Likelihood to Recommend
    8.8
    (99 ratings)
    8.4
    (99 ratings)
    Likelihood to Renew
    8.3
    (6 ratings)
    8.4
    (8 ratings)
    Usability
    7.9
    (14 ratings)
    -
    (0 ratings)
    Support Rating
    8.2
    (4 ratings)
    9.0
    (5 ratings)
    Implementation Rating
    9.1
    (1 ratings)
    -
    (0 ratings)
    Configurability
    7.3
    (7 ratings)
    -
    (0 ratings)
    Ease of integration
    8.2
    (1 ratings)
    -
    (0 ratings)
    User Testimonials
    KnowBe4 PhishER/PhishER PlusMicrosoft Defender for Endpoint
    Likelihood to Recommend
    KnowBe4
    PhishER comes with some good features, such as PhishML, PhishRIP, PhishFlip, etc. These features help us manage phishing email reporting incidents. From reporting emails via Phish Alert Button plug-in to collecting all reported emails in one place at the PhishER dashboard. Now, the PhishML comes into play, scanning all reported emails and tagging each as clean, spam, or threat. With the help of this machine learning-based algorithm, our investigation process becomes easier. Other features, such as PhishRip, help to search and quarantine phishing emails, and PhishFlip converts a real phishing campaign to a test phishing campaign.
    Incentivized
    Read full review
    Microsoft
    Because of its integration with Windows, it is very easy to deploy and manage. Any IT department should be able to leverage the software and interface. The admin portal provides weighted recommendations that comprise the Secure Store, offering admins, security teams, and business owners valuable insights into their security footprint without requiring a strong security background. The software would be ideal for small and mid-sized businesses that cannot dedicate resources to security. Larger enterprises would also benefit, but may require the enhanced license.
    Incentivized
    Read full review
    Pros
    KnowBe4
    • One platform that integrates reported emails and using PhishFlip to educated staff.
    • Automation to remove malicious emails from mailboxes.
    • Instantly report back to users if an email is safe or malicious.
    • Easily review vital technical information to help you make a decision if an email is a threat.
    • Allow comments to be left from staff and IT.
    Incentivized
    Read full review
    Microsoft
    • One, it's crazy lightweight, so compared to some of the competitors that we also have used with our security services, it's really lightweight and so I don't have a lot of overhead on the system that it's running on.
    • It does really fantastic PowerShell integration.
    Incentivized
    Read full review
    Cons
    KnowBe4
    • Issues with Global Blocklist
    • Email Template Modification - Simplification
    • Target Specific Users vs. Groups
    • PhishRIP info tabs (i.e. if improperly check ripped emails are turned into tests. This has caused issues.) Info tabs or markers allow user to hover and get more information about what action a check box or slider provides.
    Incentivized
    Read full review
    Microsoft
    • So the fact that Defender for Endpoint still works with signatures is actually, I don't know, a little difficult for us because, I mean, since Microsoft trusts those signatures, you can easily inject code. And we've done it many times. To show that you can inject code through vulnerabilities like CV 2013, 99, and 33 but still keep the signature. So because of the trust of those signatures, the malware just kind of slides into the environment without Defender knowing. That's the first part. The second part is that the behavioral analysis is not precisely its Prime. It's not Defender's best capability for endpoints. So, Defender does not identify all behaviors considered by other EDRs in the market.
    Incentivized
    Read full review
    Likelihood to Renew
    KnowBe4
    When we first discovered that KnowBe4 released something like this, we saw a demo of it and were floored at what it could do and how it could help us from a security standpoint. Gone are the days of us in IT sending out a mass email saying please don't click on anything in the email from sender "X", and it allows us to quietly and easily ensure that people don't take any action on malicious emails.
    Incentivized
    Read full review
    Microsoft
    Cost add-ons for Security features is nickel and diming the process to keep pace with cybercrime. Limited Education budgets require us to be more pro-active in finding cost-effective measures to protect our devices, staff and students. Defender is a strong, well-featured product that is pricing itself out of the education market
    Incentivized
    Read full review
    Usability
    KnowBe4
    I give it an eight for the feature set. While I only give it an eight because the complexity and interconnectedness of the tools mean that there needs to be quite a bit of RTFM to get the most out of the products.
    Incentivized
    Read full review
    Microsoft
    It offers multiple security features and integrates well with Microsoft ecosystems. A workflow for threat detection, investigation, automated remediation, and a centralized dashboard is an added advantage. This application is mainly designed for experienced users; new users may feel challenged.
    Incentivized
    Read full review
    Reliability and Availability
    KnowBe4
    No answers on this topic
    Microsoft
    Microsoft Defender for Endpoint chugs along just fine no matter what we throw at it and what systems it's running on. It doesn't take up a lot of resources either, so that's welcomed.
    Incentivized
    Read full review
    Performance
    KnowBe4
    No answers on this topic
    Microsoft
    Microsoft Defender for Endpoint is easy on memory and resources on clients.
    Incentivized
    Read full review
    Support Rating
    KnowBe4
    Responses to questions were answered quickly and accurately.
    Read full review
    Microsoft
    The first time I tried to onboard my macOS endpoints to MDE I struggled for quite a bit. I had to reach out to Microsoft's MDE support team. The tech was very helpful in walking me through the steps during a screen share session
    Incentivized
    Read full review
    Implementation Rating
    KnowBe4
    It was very simple to implement - with just a few settings needed to connect it to our O365 environment
    Incentivized
    Read full review
    Microsoft
    Deployment was handled by our team here and everything went pretty smoothly. We did have a few hiccups in our test group, but that only took a bit to get ironed out.
    Incentivized
    Read full review
    Alternatives Considered
    KnowBe4
    Harmony does not provide security awareness training or simulated phishing emails like KnowB4. However, it does provide a phish alert button & workflow similar to PhishER & we may stop using PhishER because the Phish Alert reports from PhishER don't feed into Harmony to help train it from phishing emails that go through. We got Harmony after KnowB4 because we needed a tool to PREVENT phishing emails from getting to people's inboxes in the first place, which KnowB4 has very little capability for other than PhishER+ blacklists. It is a shame KnowB4 does not have the anti threat phishing prevention like Harmony considering all the email data it has & its existing AI analytic capabilities.
    Incentivized
    Read full review
    Microsoft
    Cylance's policy is to block everything and requires an active person to monitor and unblock legitimate processes. As updates and software continue to evolve, it is a full-time job to be a Cylance administrator. Microsoft Defender for Endpoint is a set-and-forget solution that catches threats when they occur and leaves you to focus on your work unimpeded.
    Incentivized
    Read full review
    Scalability
    KnowBe4
    No answers on this topic
    Microsoft
    Microsoft Defender for Endpoint is easily scaled from small orgs to giant enterprises.
    Incentivized
    Read full review
    Return on Investment
    KnowBe4
    • Phish/ER & PAD: Identifying email threats more quickly allowed us to send alert to the users' community in a timely manner based on the pattern of the threat.
    • KnowBe4 Training Campaigns have proven to noticeably increase users' awareness.
    • KnowBe4 Phishing Campaigns made users realize how dangerous and deceiving hacker can be.
    Incentivized
    Read full review
    Microsoft
    • Reduced incidents of security breaches lead to lower remediation costs and avoid potential financial losses and reputational damage.
    • Reduces the need for additional third-party security solutions and training, thereby lowering overall security management costs.
    • Increased efficiency and productivity of IT staff lead to better allocation of resources and cost savings.
    • Reduces the risk of fines and sanctions associated with non-compliance, ensuring business continuity and protecting revenue.
    Incentivized
    Read full review
    ScreenShots

    KnowBe4 PhishER/PhishER Plus Screenshots

    Screenshot of how PhishER Plus enables a critical workstream to help IR teams work together to mitigate the phishing threat and is suited for any organization that wants to automatically prioritize and manage potentially malicious messages.

    Microsoft Defender for Endpoint Screenshots

    Screenshot of blocked activitiesScreenshot of Detects & respondsScreenshot of discovers vulnerabilityScreenshot of Eliminates blind spotsScreenshot of Risk management