I really like the outlook integration experience. Was easy to get up and running and users are excited about it.

I'm not sure if I could've easily set it up without the help of my CSM. With that said, my CSM had me up and running in a matter of minutes.

Helping to identify potentially malicious emails with a simple 1 click integration for end users to report with.

It provides us with the ability to view the history of reported threats. Several of these have been used to facilitate tabletop exercises within our Incident Response Team (IRT).

PhishRIP was a great add-on to the product and was doing a lot to provide additional security to our end users. It, however, stopped working over a year ago. I requested status updates from technical support multiple times and still do not have a reason for the failure or an estimate on when the issue will be corrected.

We are finding common attack vectors coming into our company. It aligns with spear-phishing research showing the primary targets in our company are our executives. It justifies the cost spent on protecting email. It is also a great resource for reporting the attack vectors being used against our organization.

the classification of emails into a threat, spam, clean etc is very intuitive.

API access (put and post) and other integration with tools is lacking.

investigation of emails (headers and raw) on the reported emails.

The training material is brief which is nice. I like the multiple examples of phishing emails and the exercises to spot them. And, as mentioned before, I like that the material is up-to-date and does not feel dated.

The administrative console could use some improvement. I was able to setup a campaign with help but it could be a bit more intuitive. I also think the way to add single users to the system is a bit strange with an import option that requires one line of text or a one line CSV. And then the user must be edited to add their full name and manager's email/name if using the single line import. I also found the magic link for licenses to be sort of downplayed when that is most certainly required for the users to get licenses.

The product is worthwhile and a good way to improve security awareness in any organization.

We are basically just raising security awareness across the board. I originally was skeptical we needed the phishing training since most of our users are software developers. But, after getting the results, I see that we still have folks who need the extra training.

I am impressed with the vast library of resources and extending and creating unique content for targeting.

The UX was a lot to take in at first, but the account reps onboarded us with ease!

The impression that we are "secure". Opening the eyes of executives and setting us up for success with a security-first mindset across the organization.

customization and notifications that are sent

I don't dislike anything in particular to report.

It prevents user attacks and provides data and notifications of occurrences.