PhishingBox headquartered in Lexington provides a Security Awareness Ecosystem through a suite of tools and services to implement and maintain a high-level security awareness training program. Key components include a phishing simulation tool, security awareness training, a learning management system (LMS), KillPhish reporting button, and the 'Phishing Inbox,' which allows InfoSec teams to thoroughly investigate reported emails and related information.
N/A
Proofpoint Security Awareness Training
Score 10.0 out of 10
N/A
Proofpoint Security Awareness Training (formerly ThreatSim from Wombat Security) is a cloud-based training platform that simulates threat scenarios (e.g. phishing) and also provides assessment testing developed by Wombat Technologies, which was acquired by Proofpoint in March 2018.
N/A
Pricing
PhishingBox
Proofpoint Security Awareness Training
Editions & Modules
No answers on this topic
No answers on this topic
Offerings
Pricing Offerings
PhishingBox
Proofpoint Security Awareness Training
Free Trial
No
Yes
Free/Freemium Version
No
No
Premium Consulting/Integration Services
No
No
Entry-level Setup Fee
No setup fee
Optional
Additional Details
20% discount for yearly billing.
—
More Pricing Information
Community Pulse
PhishingBox
Proofpoint Security Awareness Training
Features
PhishingBox
Proofpoint Security Awareness Training
Security
Comparison of Security features of Product A and Product B
PhishingBox
8.0
Ratings
7% below category average
Proofpoint Security Awareness Training
9.0
Ratings
5% above category average
Single sign-on capability
8.00 Ratings
9.00 Ratings
Role-based user permissions
8.00 Ratings
9.00 Ratings
Security Awareness Training
Comparison of Security Awareness Training features of Product A and Product B
Basically for training purposes is what we've been using it for. I understand that for expert people this program would not be much help but for the vast majority of new workers that we receive at the company is pretty well suited. The editor is good because we let the students train by creating templates.
I think that Proofpoint is the best product on the market for Security Awareness Training. They make it easy, they have taken all the guess work out of it. You are supplied with everything you need to have a successful program and you don't have to be a "teacher" to do this. They have taken all of the guess work out of it.
The report phish Outlook add-in button has had a positive influence on our users. We have many users regularly reporting suspect phish emails.
The templates for the phish campaigns are very up to date, using real life recent phishing attacks. This makes our phishing campaigns much more realistic.
The training modules from PSAT are very effective and useful with our LMS system.
The platform provides options for many different reports (with some customization options), however, there are reports that I would want that are not available.
Adding new staff (we have a lot of turn-over) into an existing training plan can be cumbersome for the system administrator. Although End-User Sync can be set-up to "add" new users to the system, the new users still need to manually be added to the assignments and sent past assignments to complete. (NOTE: this was made more difficult because of our decision to implement a training plan the way we did).
Some of the ThreatSim campaigns (simulated phishing or malicious attachment emails) will only work if you are using their PhishAlarm plug-in (add-on button for Outlook, etc. for users to easily report suspected threats). Our users access email by iPhones, Android, iPads, PCs, and Macs. PhishAlarm cannot be used for all of these platforms.
We have a good relationship with our vendor/Proofpoint, which I believe is needed to be successful in Security Awareness and using tools like this
The package/service as a whole is incredibly helpful
The integrations with Proofpoint's Trap is one of the most valuable things we could do. It turns your entire email user base into members of IT security, to be on the look out to report cyber attacks, and have them pulled out of everyone's email if the email is condemed/found malicious.
Overall, PSAT is integral to what we do. PSAT is a helpful tool to help us improve our employees ability to recognize, report, and respond to phishing. It works for us to use a longterm partner, who is incredibly helpful/supportive, and also bringing Proofpoint's greater cybersecurity & attack intelligence into PSAT. Honestly, we are pretty happy and would make the choice to go with PSAT again (we evaluated the major players in the space via Gartner's Magic Quadrant). The team behind the products are excellent and the product of itself is both intuitive and expansive. This combination allows us to reach our 10k+ employees who are located in over 20 countries
I have never had any issues with receiving support and have always had my questions answered in a timely manner. When we do have suggestions, the support has been ready to step in and provide advice or take our suggestions seriously. But normally, there aren't any issues that come up when using this product.
The "Managed Service" (a dedicated ProofPoint Account Rep c/w weekly status calls) significantly reduces the resource demand on the area within your company managing the program. The KnowBe4 Platform does all the same stuff (Training Modules, Reports, ThreatSim Tools), but you (or your staff) need to do considerably more work to manage the Overall Program. The uplift in cost for this service is minimal.
I don't think there are hard and fast numbers when it comes to Security Awareness ROI, as it would be next to impossible to come up with any defined metrics.
Phishing campaigns vary in their effectiveness, what I've found is that there is always something that will trigger your employees to click. Finding what that is for your company can help you train everyone to see the red flags.
