The integration of PhishER with the Phish Alert Button and Microsoft365 has proven to be the most valuable.

The reporting is lacking quite a bit. I would love to be able to do more in generating dashboard widgets that tell the story I want told that could then be exported to a report for my ITSC without much manipulation.

Removal of malicious emails from user mailboxes. When a user reports a suspicious email and that email is deemed a "Threat" then PhishRIP does it's thing.

PhishER saved me time with automated respsonses to normal business emails, automated reports, scans, etc that are flagged as phishing emails. 2/3s of our emails are handled automatically. Integration with VirusTotal has been helpful to quickly identify certain types of threats. This has improved my time to focus on real issues, attacks or clean emails falsely flagged.

PhishER can be slightly difficult to configure without much experience with YARA rules. When I configured it I would have prefered more tips, training and practice rules to review before I configured my rules.

Before PhishER, the department responded to about 10% clean emails with no understanding what the customer impact was. These emails had unexpected PDF scans from customers or were vendors sending emails that looked odd. Now we respond to 100% of customer impacting clean emails and about 60% of clean emails. All threats are identified, investigated and responded to quickly with PhishRip.

PhishRIP, by far, is the best feature of PhishER. The ability to hunt and remove malicious emails across all my tenants is amazing!

The system is not perfect, and will occasionally not catch all emails in the PhishRIP. Likewise block listing URL's will occasionally fail.

Remediating malicious emails and preventing them from landing in users' inboxes.

We have seen an increase in reporting of phishing emails. As our training and testing has been going users are reporting and responding to real threats.

More Integrations and reporting capabilities

This product solves the problem of phishing emails getting lost in the background and not reviewed. It allows automated responses to be sent to end users to ensure confidence

Once the system is synchronized with your O365 environment the process is seamless and very user friendly. This integration has allowed me to increase our awareness as well.

At this time there are no functions within the PhishER platform that I do not like.

PhishER is helping manage our inbound email threats and helping me organize our environment.

New content is added regularly allowing us to provide monthly training with new content.

Occasionally we get a template that will result in false positives for any user who it gets assigned to. In that case there is no quick way to identify who all has received the template and then remove the false failure.

Reporting of suspect emails is way up, but our time invested is lower.

PhishER was a perfect fit for our small organization. We can submit phishing emails and get reporting without the expensive cost of an email filter with our O365 Exchange setup.

I think the Phish ER RIP application is useful, and I just hope there are more suggestions in the future for setting up SPF, DMARC and tightening default security settings.

Easy setup, works out of the box

Staff will pickup easy to report messages

Tracking how many phishing emails bypass our security, what types of messages, a central, secure way to submit malicious messages without having our IT Team click to analyze them in person

Once setup it is running almost on auto pilot

Sometimes it is doing such a good job I have gotten multiple calls from my team to know if and why they are getting some of these email. Nothing you can do here

We are going through a SOC audit and feel it has helped in our efforts

I love the fact that it can take (based on confidence levels you set) automatically take actions to submitted emails. I looked yesterday and found a dozen auto-handled emails where users had marked things as spam, and it checked, found them clean and safe, and sent them back with a note that explained the returned phish alert. Very handy time-saver.

It is a tad confusing to use at times, especially around configuring the auto-actions. There is a lot of time spent going back and forth with the documentation as to how to set up the remediation - all things that a setup wizard should/would take care of, but it is left to you to discover it all by trial and error.

False-flag phishes - we spend less time reviewing user-submitted emails for things like messages from email lists they specifically signed up for, alerts from internal systems, etc. PhishER can auto-remediate these with pretty darn good accuracy.

Hands-off analysis and informative push notifications.

need an easier method to process the manual process of categorization

Breaking down real threats from spam.