TrustRadius: an HG Insights company

Sophos Phish Threat

Score8.3 out of 10

13 Reviews and Ratings

What is Sophos Phish Threat?

Sophos offers security awareness and phishing training and preparation testing via Sophos Phish Threat, the company's phishing attack simulator.

Categories & Use Cases

Product Demos

Top Performing Features

  • Phishing Simulations

    Administrators can run simulated phishing attacks to test the effectiveness of the training and assess vulnerabilities.

    Category average: 9.1

  • Security Reporting

    Reports available may include statistics on phishing simulations, training completion, etc.

    Category average: 8.6

  • Single sign-on capability

    The software system supports a centralized authentication mechanism allowing the user to access multiple systems with a single, centrally managed password.

    Category average: 9.3

Areas for Improvement

  • Training Content Library

    A pre-built library of security awareness training content that can be used immediately.

    Category average: 8.8

  • Industry-Specific Security Training

    Security training can be tailored based on industry-specific requirements, such as HIPAA, PCI DSS, GDPR, etc.

    Category average: 7

  • Training Gamification

    Training content is available in a gamified format.

    Category average: 8.6

Who Buys & Uses Sophos Phish Threat

Sophos Phish Threat easy test your users knowledge on phishing

Pros

  • Updated phishing scams and training
  • Ease of use interface
  • Reports on Passing and failing.

Cons

  • I wish I could mark manually that someone passed the training that way if a big group gets caught we can sit down and use our training class for the users.

Return on Investment

  • Our employees have become more aware of different phishing tactics used since we have started using Sophos Phish Threat
  • We have had an increase in reporting of possible phishing emails since we started using Sophos Phish Threat
  • We have also been able to block certain IP addresses from sending us emails since all they do is send phishing emails to us

Alternatives Considered

KnowBe4

Other Software Used

Sophos Intercept X, Sophos Intercept X for Server, HPE Nimble Storage

Usability

Worth it if you aren't using Microsoft Insider Risk

Use Cases and Deployment Scope

We used to to get an insight on our insider risk by performing a phishing simulation on all staff at a client site. The software provides a very helpful dashboard of the simulation and provides training for the users who were caught by the simulation.
This helped us provide a client with ways they could improve their security and reduce the impact of insider risks.

Pros

  • Dashboards
  • Details of user interactions with the training
  • Templates for the simulations
  • Integrating well with Office 365

Cons

  • The templates can be quite basic, they are more suited to Gsuite than Office 365

Most Important Features

  • Analysis of users interactions with the emails, including how long it was before they clicked on the email
  • Templates make setting up simulations really quick and easy

Return on Investment

  • Provided us with good insights to our insider risk of our clients

Alternatives Considered

Microsoft Defender for Office 365

A no-brainer add-on for existing Sophos users

Pros

  • Set up an easy-to-use low overhead system of training and protection.
  • Works through a single pane of glass when using other Sophos products.

Cons

  • It could be more robust.
  • Better variety of phishing emails.

Return on Investment

  • Users are more aware of and react better to phishing emails.
  • We know who is the most gullible or susceptible to phishing campaigns.

Alternatives Considered

Barracuda PhishLine and Cofense PhishMe

Other Software Used

Sophos Intercept X, VMware ESXi, Citrix Virtual Apps (formerly XenApp)

Awareness training for end users made easy

Pros

  • Great templates for the setup of phish threats.
  • The overview is simple.
  • Easy to set up and use with other Sophos products.
  • The training and awareness videos and tutorials are spot on.

Cons

  • It should be easier to follow up with a user when they haven't completed training.
  • More options for reporting would be nice.
  • Better choice of users as all emails have been imported (aliases, dist. list. etc) taking up licenses.

Return on Investment

  • A lot of awareness of phishing emails has resulted in fewer attacks.
  • Fewer phishing attacks = less money used on tracing the outcomes of an attack.
  • Happier clients who know we're very focused on our security and infrastructure.

Sophos - quick & efficient way to scale digital threat protection

Use Cases and Deployment Scope

Sophos allows my colleagues and me to safely engage in all of our digital activities without fear of researching on the wrong website or getting hit with spam that might lead to vulnerabilities. It's quick & works silently in the background providing a seamless experience that doesn't interrupt my daily workflows.

Pros

  • Seamless.
  • Fast.
  • Over-protection.

Cons

  • Suggest times to run.
  • Run out of working hours for full checks.
  • Provide context around threats & how to avoid.

Most Important Features

  • Scalable.
  • Remote start.
  • Runs in the background.

Return on Investment

  • ROI seems to be there though I have no direct stats.
  • Positively impacts my web-browsing experience. As an Account Executive, it enables me to do my company research quickly without engaging with any bad actors.
  • It runs in the background so it never impedes my workflows.

Other Software Used

Salesforce CPQ (formerly SteelBrick), Outreach, Bonusly