The PML feature for threats PhishER has already analyzed allows us to automate our response.

Would like to see even more use of PML for more automation.

Quick analysis and automated responses to known messages, good or bad.

PhishER provided immediate ROI on visibility of reported emails and allowed for immediate response to users reporting potential phishing.

As of now I have not found anything I do not like about phishER. It is a tool I use daily.

PhishER allows me to automate much of the work I was previously doing with responding to alerts from users using the phish alert button. The tool also consolidates all of the investigations I would normally have to do into one easy pane of glass.

Phishing Threat and detection is great!

Reduces likelihood of a successful phish

Improved reporting and analytics

For large phishing campaigns, it needs to be faster at grabbing the emails

It's helping our overall Cyber Security initiatives.

A good tool is Live Response for Rapid Remediation

I like the easy to use interface and implementation of training. It was a smooth process and easy to train

I would say the UI could be a bit more attractive. It doesn't stand out too much but that isn't always a bad thing.

It's helping my team and firm combat cyber crime and for users in cyber security, this has proven to be very helpful

Ability to take real phish emails and make them part of the tool.

Sometimes UI is confusing. It is not always easy

Get our end users to understand phising emails vs just spam.

The ease of an employee being able to report a suspected phishing attempt, how the program categorizes spam and phishing emails, and the ability to turn a phish email into a test.

Honestly, I haven't found anything yet that I don't like!

It's helping our organization create a very effective Human Firewall. By running monthly phishing tests, being mindful of phish emails is kept at the forefront of employees minds.

PhishER has many great features, but PhishRIP really stands out. PhishRIP helps reduce risk and eliminate phishing emails from user's inboxes before they see them

There's really nothing that I dislike about PhishER.

The PhishML feature helps tag and categorize for easier review and PhishRIP helps us quickly remove phishing emails from inboxes before users even see it.

The PhishER dashboard is amazingly detailed with critical information right at your fingertips! We love that drilling down to the details is as simple as clicking on an icon. The "inbox" is where our administrators primarily work out of as they quickly and easily evaluate all of the reported phishing emails. The implementation team was extremely supportive and eager to see our onboarding be a success, and because of them it was! After onboarding, any question we submitted to support via email was taken care of very promptly, and it always included links to related FAQs or knowledgebase articles. Speaking of those articles, they have crisp and clean write-ups for nearly every situation, complete with screen shots and step-by-step instructions that any engineer can follow. The key to PhishER is the Phish Alert Button (PAB) and deploying that to the user community was straightforward and easy. We quickly had it deployed to O365 for both the web interface (thin client) and Outlook on the desktop (thick client). Add in the ability to automatically remove phishing emails from all mailboxes, and that is where the magic really happens!

Having a separate portal for the training & phishing testing vs the PhishER portal is cumbersome from an administrative perspective. These should be integrated in more ways than just a single link hidden under the username profile menu pull-down. It is akin to finding a needle in a haystack. The placement of the Phish Alert button in the Outlook web interface was changing as we implmented which made it very confusing for our users. While this may not have been KnowBe4's issue, it was not brought up that Microsoft could impact that placement. For PhishER to be effective, you must have user participation, and with that training is needed for your users. The administrator training skipped over that very important item, and it only came up after we were down the road of deploying it to our user community.

This solution is "post inbox delivery". In other words, it is not a filter between the internet and your user's inboxes. This tool is focused on "post delivery" remediation.

Work closely with the implementation engineer. PhishER is not a complex product to deploy, and they know the process far better than anyone else. Communication to your end-users is critical to your success, so build that into your plan. Do not rush. Include in your plan training the administrators on effectively using the PhishER system as users begin reporting messages.

Our small organization was getting a large number of phishing emails. Our employees are excellent at spotting malicious messages, the reporting and remediation process we had in place was disorganized and inefficient. PhishER gave us the ability to streamline the reporting process and, in some cases, automate the remediation.

I love the phishing hook & the capabilities to analyze the issues. I also love their phishing campaigns & security trainings

There is nothing I dislike about the product

In this current world of increased cyber-attacks through phishing & ransomware, it is very necessary to have some tool like PhishER to manage & administer this task using the Machine Learning & reducing the manual work my small team would be doing.

PhishER is easy to set up and link with our existing phish report button and gets to work instantly. It's easy to understand what is being reported, and PhishML greatly reduces analyst investigation time. Auto responses also greatly reduce SOC response times and let our users know that we are looking into their issues, making them more likely to report.

The YARL rules are a bit hard to set up, and I would like to see future development into the custom rule set up to be a bit easier to follow. Not impossible, but could be a bit more simple for adding tags to emails.

This is a top-tier SOAR platform for those in the KnowBe4 universe. Highly recommend in combination with the KnowBe4 phish report button.

PhishER has greatly reduced the time for our analysts to investigate and respond to email threats inside of our environment. We have seen a near 150% increase in malicious email reports, and a near 80% reduction in time to respond to threats from our internal SOC. PhishER allows us to quickly find threats that users report, and delete them from all user inboxes. A game-changer when it comes to SOAR platforms.

Another major benefit that we did not expect is that this platform encourages users to report more emails, and the ML capabilities allow us to get a clearer picture of what is clean, spam, and a threat.