Cofense PhishMe is a cyber threat and phishing simulator meant to be of use in training employees to be wary against threats and also to gain information about general employee threat knowledge and preparedness. A free trial is available for small business.
N/A
KnowBe4 Security Awareness Training
Score 9.4 out of 10
N/A
KnowBe4 is a security awareness and compliance training and simulated social engineering product. It is used by organizations worldwide to strengthen their security culture and reduce human risk. The product includes a comprehensive suite of awareness and compliance training, real-time user coaching, AI-powered simulated social engineering, crowdsourced anti-phishing defense and an AI suite that enhances human risk management through personalized training and automation. With…
Cofense PhishMe and KnowBe4 Security Awareness Training are both security awareness training software designed to train and test users on defending against social engineering attacks such as phishing. Both software options are most popular with larger enterprises, likely because as staff sizes increase, it becomes more difficult to train staff without a dedicated tool.
Features
Cofense PhishMe and KnowBe4 Security Awareness Training both provide essential features like phishing user training, they have a few standout features that set them apart from each other.
Cofense PhishMe boasts a powerful phishing reporting tool that allows users to report emails with a single click so that they can be assessed. When suspicious emails are reported, they go through Cofense Triage, which analyzes emails and clusters threats together before sending them to your security team. Additionally, Cofense PhishMe offers a simple to use user interface that users will be able to pick up on quickly with minimal training.
KnowBe4 Security Awareness Training provides over 2,000 phishing templates, allowing businesses to safely test their staff’s vulnerability to social engineering attacks and report on the results. Social Engineering tests can also be automated using KnowBe4 Security Awareness Training’s artificial intelligence tools, which can push social engineering tests out through email, text, or voicemail.
Limitations
Cofense PhishMe and KnowBe4 Security Awareness Training both help businesses secure themselves against social engineering attacks, but they also have some limitations that are important to consider.
Cofense PhishMe has robust reporting tools on potential vulnerabilities, but it doesn’t provide the variety of phishing templates the KnowBe4 Security Awareness offers. Additionally, social engineering tests aren’t as easy to automate using Cofense PhishMe. For businesses looking primarily to test their staff on social engineering, KnowBe4 Security Awareness Training may be preferred.
KnowBe4 Security Awareness Tarining helps businesses test their employees on social engineering attacks, but it doesn’t offer email threat analysis features that are as robust as Cofense Triage. For businesses looking not only to educate their staff, but also to analyze suspicious emails before sending them to the security team, Cofense PhishMe may be ideal.
Pricing
Cofense PhishMe is priced based on the number of users an organization has. Pricing starts at $10.00 per user per year, but can reach as high as $12.00 per user per year for smaller businesses.
Similarly, Pricing for KnowBe4 Security Awareness Training is dependent on the number of users, as well as the feature needs of the organization. Pricing starts as low as $8.00 per user per year, but can reach as high as $29.50 per user per year.
Features
Cofense PhishMe
KnowBe4 Security Awareness Training
Security
Comparison of Security features of Product A and Product B
Cofense PhishMe
7.8
Ratings
9% below category average
KnowBe4 Security Awareness Training
8.8
Ratings
3% above category average
Single sign-on capability
7.40 Ratings
9.50 Ratings
Role-based user permissions
8.20 Ratings
8.10 Ratings
Security Awareness Training
Comparison of Security Awareness Training features of Product A and Product B
It's a very apt tool for the scenario where there are multiple users and verticals in an organisation. Phishing Campaigns and recording their response actions is quite easier through this tool. Not suitable for a small organization (less than 500) that can maybe use some open tools or self-made emails for campaigns.
I don't have any frame of reference for comparison, but the training that I have used has proved impactful for my staff. Since starting KnowBe4 training, we've seen a great increase in the number of phishing attempts, but also a great increase in the number of attempts that have been recognized by staff, and we have thus not been the victim of phishing or other cyberattact vectors
Many of the URLs come in with an unknown reputation and although it may be challenging from threat intel feeds, somehow allowing a more in-depth analysis of the URL can provide better/quicker decision making or validation.
Adjustable widgets for reporting, although the provided are already built very well.
Provide in-house templates or summaries of actionable items, such as a single brief on a major phish.
Campaign settings are overwhelming and non-intuitive
While the domains available for sending phishing emails are numerous, they are still often obviously fake
Certain features are locked away behind paid addons, when they should be incorporated in the base tool/licence, e.g. PhishER. It's fine that, for example, Compliance+ is an added feature, but PhishER is practically integral to the task KnowBe4 Security Awareness Training performs
I chose 8 because Microsoft has a version of software bundled in Azure that may fulfill our needs. If this software does not measure up then we will be continuing with Knowbe4. They keep their offerings fresh so training is not redundant this is important when asking for engagement from employees
Its built with UX in mind and is aimed at non-tech people, to ensure that almost everyone can run the campaign. But if we go deeper - sometimes you will need an HTML editor or support in order to figure out some advanced edits you might want to add in your scenarios.
The training videos we have access to are high quality, and provide a wide variety. The Inside Man videos has a cult following within our organization, and has driven a much greater interest in security awareness. And KB4's willingness to negotiate pricing for us as a nonprofit has been very valuable to us as well.
There have only been a handful of outages in the 2 years we have had the product. Even during those instances, parts of the system were still operational
Pages load quickly, filter/sort quickly, and don't slow down or freeze. Everything is smooth and very easy to use. There are a places in the UI where you can forget how to get there, but other than that everything is great. We have had no issues using any part of the website.
I have not had to use their support for pretty much anything. The software works well, and is very intuitive. I would imagine their support would be rather basic as there is not too much that can go wrong with a report phishing button, and if it were I would probably consider a different software.
Tech prod support is great! I did have to ask for a new customer success rep, needed a more experienced person to match my 12 years of experience running Cybersec training programs. Would suggest that more matching of rep level of knowledge to client level knowledge would help.
confusing question. I inherited this application so I didnt get any formal training other than the person who was leaving. The CSM provided some later on when I asked in a zoom call
The implementation went really well and KnowBe4 was there the whole time on setup to make sure things were setup correctly. The only thing we had to figure out on our own was to script users automatically being added to security groups. So that when they sync to knowBe4 from AD they are placed into the same/correct groups.
PhishMe is a market leader in terms of phishing simulation solutions. The customization appears unmatched when compared with competitors and the support we have experienced from Cofense has been excellent. Phish me offers lots of realistic templates which are updated regularly which is far ahead of other solutions. Phish me also provides lots of detailed statistics as well as high-level numbers which are really useful for some clients who want details, and others who only want high-level overviews.
KnowBe4 offered a significantly more favorable cost-benefit ratio compared to other solutions. Its seamless integration with our existing infrastructure—particularly Active Directory and email systems—was the most compatible with our operational and security requirements.
The product scales greatly. As long as you upgrade the license to support the number of users you are needing, adding in those new users is easy. Also getting those users set up with trainings/campaigns is very easy as well
From a normal user's perspective, it's an easy and fast, very very user-friendly phishing email reporting structure. No need to remember any email address, no need for sophisticated handling of malicious emails while sending/ reporting. Just a click and it is done.
From the admin and analyst point of view: Easy and clutter-free triaging pane, IOC reputation check facility, Rules and Recipes section for automation and focused triaging, Notification to the reporter based on the triaging done is really a helpful feedback loop.
Overall: Simple to handle, less learning curve, well managed, less administration time, fewer issues, less maintenance time.
There is really no way one can make all the needed trainings with in house resources anymore! The cost for this would be way way more than that of any platform!
There is no way to even calculate the damage a company would suffer in case of a cybersecurity breach! So the cost for the use of the KnowBe4 Security Awareness Training platform if minimal compared to that of a possible breach!
The cost of creating content for security awareness training is no longer realistic for a company. This is really no option, and it is in no way comparable to the cost of access to the training material available in the KnowBe4 Security Awareness Training platform. Also the training content needs to be constantly updated!
