# KnowBe4 PhishER/PhishER Plus vs Splunk SOAR (Security Orchestration, Automation and Response) Comparison
---
## AI Generated Summary
- **G2 reviewers report** that KnowBe4 PhishER/PhishER Plus excels in user-friendliness, making it easy for IT departments to triage and report spam emails efficiently. Users appreciate how straightforward it is to create effective phishing tests, which streamlines the process of managing reported phishing emails.
- **Users say** that Splunk SOAR offers a robust set of features for automating security tasks, with one reviewer highlighting its flexibility in orchestrating workflows and integrating with existing security tools. This capability allows teams to customize the platform to fit their specific business security needs.
- **According to verified reviews** , KnowBe4 PhishER/PhishER Plus has a significantly higher G2 Score, indicating greater overall user satisfaction. With 543 reviews compared to Splunk SOAR's 39, the feedback for KnowBe4 is more reliable and reflects a broader user experience.
- **Reviewers mention** that while Splunk SOAR is packed with features, some users find the initial setup process to be challenging. However, once accustomed to the platform, they appreciate the ability to automate repetitive security tasks, which enhances their workflow.
- **Users highlight** that KnowBe4 PhishER/PhishER Plus simplifies the management of user-reported phishing emails, turning what could be an overwhelming task into a streamlined process. This automation is particularly beneficial for IT teams needing to address phishing threats quickly.
- **G2 reviewers note** that Splunk SOAR provides strong support and quality of service, with users praising the platform's ability to analyze and detect security threats effectively. This aspect is crucial for organizations looking to enhance their security posture through automation.



| | KnowBe4 PhishER/PhishER Plus | Splunk SOAR (Security Orchestration, Automation and Response) | 
|---|---|---|
| **Star Rating** | 4.5 out of 5 | 4.4 out of 5 | 
| **Total Reviews** | 571 | 40 | 
| **Largest Market Segment** | Mid-Market (75.0% of reviews) | Mid-Market (41.0% of reviews) | 
| **Entry Level Price** | $1.50 1 Seat Per Month | No pricing available | 

---
## Top Pros & Cons

### KnowBe4 PhishER/PhishER Plus

Pros:
- Phishing Prevention (42 reviews)
- Email Security (25 reviews)

Cons:
- Email Management (8 reviews)
- False Positives (8 reviews)

### Splunk SOAR (Security Orchestration, Automation and Response)

Pros:
- Automation (16 reviews)
- Security (13 reviews)

Cons:
- Expensive (16 reviews)
- Learning Curve (7 reviews)

---
## Ratings Comparison
| Rating | KnowBe4 PhishER/PhishER Plus | Splunk SOAR (Security Orchestration, Automation and Response) | 
|---|---|---|
  | **Meets Requirements** | 9.0 (402 reviews) | 8.7 (36 reviews) | 
  | **Ease of Use** | 8.8 (468 reviews) | 8.2 (36 reviews) | 
  | **Ease of Setup** | 8.5 (434 reviews) | 7.9 (17 reviews) | 
  | **Ease of Admin** | 8.9 (382 reviews) | 8.1 (13 reviews) | 
  | **Quality of Support** | 9.2 (374 reviews) | 8.8 (35 reviews) | 
  | **Has the product been a good partner in doing business?** | 9.4 (378 reviews) | 8.3 (13 reviews) | 
  | **Product Direction (% positive)** | 9.3 (392 reviews) | 8.7 (37 reviews) | 

---
## Pricing

### KnowBe4 PhishER/PhishER Plus

#### Entry-Level Pricing

Plan: 101-500 Seat 3 Year

Price: $1.50 1 Seat Per Month

Key Features:
- Priced per seat, per month

[Browse all 2 editions](https://www.g2.com/products/knowbe4-phisher-phisher-plus/pricing)

#### Free Trial

No

### Splunk SOAR (Security Orchestration, Automation and Response)

#### Entry-Level Pricing

No pricing available

#### Free Trial

No information available

---
## Features Comparison By Category

### AI SOC Agents

| Product | Score | Reviews |
|---|---|---|
| **KnowBe4 PhishER/PhishER Plus** | N/A | N/A |
| **Splunk SOAR (Security Orchestration, Automation and Response)** | N/A | N/A |

#### Threat Detection & Triage - AI SOC Agents

| Feature | KnowBe4 PhishER/PhishER Plus | Splunk SOAR (Security Orchestration, Automation and Response) | 
|---|---|---|
| **Anomaly Detection & Correlation** | Not enough data | Not enough data | 
| **False‑Positive Suppression** | Not enough data | Not enough data | 
| **AI‑Driven Alert Triage** | Not enough data | Not enough data | 

#### Investigation & Enrichment - AI SOC Agents

| Feature | KnowBe4 PhishER/PhishER Plus | Splunk SOAR (Security Orchestration, Automation and Response) | 
|---|---|---|
| **Autonomous Case Investigation** | Not enough data | Not enough data | 
| **Contextual Enrichment from Multiple Sources** | Not enough data | Not enough data | 
| **Attack Path Mapping** | Not enough data | Not enough data | 

#### Response & Remediation - AI SOC Agents

| Feature | KnowBe4 PhishER/PhishER Plus | Splunk SOAR (Security Orchestration, Automation and Response) | 
|---|---|---|
| **Mean Time Reduction Metrics** | Not enough data | Not enough data | 
| **Playbook‑Free Dynamic Workflows** | Not enough data | Not enough data | 
| **Automated Response Execution** | Not enough data | Not enough data | 

#### InfoSec Experience & Governance - AI SOC Agents

| Feature | KnowBe4 PhishER/PhishER Plus | Splunk SOAR (Security Orchestration, Automation and Response) | 
|---|---|---|
| **Conversational Analyst Interface** | Not enough data | Not enough data | 
| **Manual Feedback Learning Loop** | Not enough data | Not enough data | 
| **Explainability & Audit Trail** | Not enough data | Not enough data | 

### Incident Response

| Product | Score | Reviews |
|---|---|---|
| **KnowBe4 PhishER/PhishER Plus** | 8.2/10 | 295 |
| **Splunk SOAR (Security Orchestration, Automation and Response)** | 8.6/10 | 18 |

#### Response

| Feature | KnowBe4 PhishER/PhishER Plus | Splunk SOAR (Security Orchestration, Automation and Response) | 
|---|---|---|
| **Resolution Automation** | 8.3 (247 reviews) | 8.6 (17 reviews) | 
| **Resolution Guidance** | 8.2 (245 reviews) | 8.5 (17 reviews) | 
| **System Isolation** | Feature Not Available | 8.2 (18 reviews) | 
| **Threat Intelligence** | 8.5 (243 reviews) | 8.8 (17 reviews) | 
| **Incident Investigation** | 10.0 (7 reviews) | Not enough data | 

#### Records

| Feature | KnowBe4 PhishER/PhishER Plus | Splunk SOAR (Security Orchestration, Automation and Response) | 
|---|---|---|
| **Incident Logs** | 8.4 (237 reviews) | 8.9 (18 reviews) | 
| **Incident Reports** | 8.4 (256 reviews) | 9.0 (17 reviews) | 

#### Management

| Feature | KnowBe4 PhishER/PhishER Plus | Splunk SOAR (Security Orchestration, Automation and Response) | 
|---|---|---|
| **Incident Alerts** | 8.6 (259 reviews) | 8.8 (18 reviews) | 
| **Incident Case Management** | 7.9 (200 reviews) | 8.0 (16 reviews) | 
| **Workflow Management** | 8.3 (223 reviews) | 8.4 (17 reviews) | 

#### Generative AI

| Feature | KnowBe4 PhishER/PhishER Plus | Splunk SOAR (Security Orchestration, Automation and Response) | 
|---|---|---|
| **AI Text Generation** | 7.0 (95 reviews) | Not enough data | 
| **AI Text Summarization** | 7.1 (97 reviews) | Not enough data | 

### Security Orchestration, Automation, and Response (SOAR)

| Product | Score | Reviews |
|---|---|---|
| **KnowBe4 PhishER/PhishER Plus** | 8.6/10 | 233 |
| **Splunk SOAR (Security Orchestration, Automation and Response)** | 8.8/10 | 22 |

#### Automation

| Feature | KnowBe4 PhishER/PhishER Plus | Splunk SOAR (Security Orchestration, Automation and Response) | 
|---|---|---|
| **Workflow Mapping** | 8.3 (161 reviews) | 8.5 (20 reviews) | 
| **Workflow Automation** | 8.6 (180 reviews) | 8.7 (22 reviews) | 
| **Automated Remediation** | 8.7 (196 reviews) | 8.6 (20 reviews) | 
| **Log Monitoring** | 8.5 (183 reviews) | 9.3 (20 reviews) | 

#### Orchestration

| Feature | KnowBe4 PhishER/PhishER Plus | Splunk SOAR (Security Orchestration, Automation and Response) | 
|---|---|---|
| **Security Orchestration** | 8.6 (192 reviews) | 8.8 (20 reviews) | 
| **Data Collection** | 8.6 (192 reviews) | 8.9 (21 reviews) | 
| **Threat Intelligence** | 8.7 (206 reviews) | 8.8 (20 reviews) | 
| **Data Visualization** | 8.6 (198 reviews) | 8.7 (20 reviews) | 

#### Response

| Feature | KnowBe4 PhishER/PhishER Plus | Splunk SOAR (Security Orchestration, Automation and Response) | 
|---|---|---|
| **Alerting** | 8.8 (211 reviews) | 8.8 (21 reviews) | 
| **Performance Baselin** | Feature Not Available | 8.8 (20 reviews) | 
| **High Availability/Disaster Recovery** | 8.4 (154 reviews) | 8.9 (19 reviews) | 

---
## Categories
**Shared Categories (2):** [Security Orchestration, Automation, and Response (SOAR) Software](https://www.g2.com/categories/security-orchestration-automation-and-response-soar), [Incident Response Software](https://www.g2.com/categories/incident-response)


**Unique to Splunk SOAR (Security Orchestration, Automation and Response) (1):** [AI SOC Agents](https://www.g2.com/categories/ai-soc-agents)


---
## Reviewer Demographics

### By Company Size

| Segment | KnowBe4 PhishER/PhishER Plus | Splunk SOAR (Security Orchestration, Automation and Response) | 
|---|---|---|
| **Small-Business** | 11.7% | 23.1% | 
| **Mid-Market** | 75.0% | 41.0% | 
| **Enterprise** | 13.3% | 35.9% | 

### By Industry

#### KnowBe4 PhishER/PhishER Plus

- **Financial Services:** 6.2%
- **Primary/Secondary Education:** 5.9%
- **Non-Profit Organization Management:** 5.7%
- **Hospital & Health Care:** 5.3%
- **Information Technology and Services:** 5.0%
- **Government Administration:** 4.6%
- **Manufacturing:** 4.6%
- **Computer Software:** 4.4%
- **Insurance:** 4.3%
- **Construction:** 3.9%
- **Other:** 50.1%

#### Splunk SOAR (Security Orchestration, Automation and Response)

- **Information Technology and Services:** 33.3%
- **Consulting:** 12.8%
- **Financial Services:** 7.7%
- **Computer Software:** 7.7%
- **Computer & Network Security:** 7.7%
- **Banking:** 7.7%
- **Telecommunications:** 2.6%
- **Security and Investigations:** 2.6%
- **Oil & Energy:** 2.6%
- **Management Consulting:** 2.6%
- **Other:** 12.8%

---
## Alternatives

### Alternatives to KnowBe4 PhishER/PhishER Plus

- [Microsoft Sentinel](https://www.g2.com/products/microsoft-sentinel/reviews) — 4.4/5 stars (296 reviews)
- [Tines](https://www.g2.com/products/tines/reviews) — 4.7/5 stars (401 reviews)
- [Sumo Logic](https://www.g2.com/products/sumo-logic/reviews) — 4.3/5 stars (403 reviews)
- [IBM QRadar SIEM](https://www.g2.com/products/ibm-ibm-qradar-siem/reviews) — 4.4/5 stars (337 reviews)
- [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) — 4.6/5 stars (440 reviews)
- [n8n](https://www.g2.com/products/n8n/reviews) — 4.7/5 stars (291 reviews)
- [Cynet](https://www.g2.com/products/cynet/reviews) — 4.7/5 stars (258 reviews)
- [Proofpoint Threat Response Auto-Pull](https://www.g2.com/products/proofpoint-threat-response-auto-pull/reviews) — 4.5/5 stars (24 reviews)
- [Splunk Enterprise Security](https://www.g2.com/products/splunk-enterprise-security/reviews) — 4.3/5 stars (247 reviews)
- [SentinelOne Singularity Endpoint](https://www.g2.com/products/sentinelone-singularity-endpoint/reviews) — 4.7/5 stars (202 reviews)

### Alternatives to Splunk SOAR (Security Orchestration, Automation and Response)

- [Tines](https://www.g2.com/products/tines/reviews) — 4.7/5 stars (401 reviews)
- [Google Security Operations](https://www.g2.com/products/google-security-operations/reviews) — 4.4/5 stars (57 reviews)
- [Torq AI SOC Platform](https://www.g2.com/products/torq-ai-soc-platform/reviews) — 4.8/5 stars (150 reviews)
- [Palo Alto Networks Cortex XSOAR](https://www.g2.com/products/palo-alto-networks-cortex-xsoar/reviews) — 4.6/5 stars (28 reviews)
- [Microsoft Sentinel](https://www.g2.com/products/microsoft-sentinel/reviews) — 4.4/5 stars (296 reviews)
- [Sumo Logic](https://www.g2.com/products/sumo-logic/reviews) — 4.3/5 stars (403 reviews)
- [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) — 4.6/5 stars (440 reviews)
- [IBM QRadar SIEM](https://www.g2.com/products/ibm-ibm-qradar-siem/reviews) — 4.4/5 stars (337 reviews)
- [IBM QRadar SOAR](https://www.g2.com/products/ibm-qradar-soar/reviews) — 4.0/5 stars (29 reviews)
- [n8n](https://www.g2.com/products/n8n/reviews) — 4.7/5 stars (291 reviews)

---
## Top Discussions

### KnowBe4 PhishER/PhishER Plus

- Title: [What is a PhishER's tool?](https://www.g2.com/discussions/what-is-a-phisher-s-tool) — 4 comments
  > **Top comment:** "The short answer is that PhishER a very powerful set of tools that allows an organization to respond to phishing threats reported by users. It's also nicely..."
- Title: [Is KnowBe4 com legit?](https://www.g2.com/discussions/is-knowbe4-com-legit) — 2 comments
  > **Top comment:** "Yes. We have been using them for more than a year & we love it!"
- Title: [What is KnowBe4 Phish?](https://www.g2.com/discussions/what-is-knowbe4-phish) — 1 comment
  > **Top comment:** "It is an add-on to your email client that allows you to forward any suspicious email directly to your security team or KnowBe4 for review.  Once the review..."

### Splunk SOAR (Security Orchestration, Automation and Response)

No discussions available for this product.

---
**Source:** [G2.com](https://www.g2.com) | [Comparison Page](https://www.g2.com/compare/knowbe4-phisher-phisher-plus-vs-splunk-soar-security-orchestration-automation-and-response)