That it is a force maximizer for my program

There is nothing that I dislike about the product.

PHishER is a great tool to take the daily issue of phishing and automate it.

I am solving for the lack of staff. I can now prioritize their time on other activities.

PhishER has a beautiful dashboard with the option to search, find reported messages by priority, category, and a summary of messages. Either issue are manually resolved or automatically resolved. We get to setup rules and action configurations.

PhishML is a little tricky for me to decipher and find out how it works. Priorities are not user adjustable and always have to be system-dependent. Tuning anti-phishing protection is time taking and tricky.

We have our end-users report phishing emails through PhishER platform, and doing that ingrains the concepts learned in the training campaigns for phishing. This raises awareness in general among the workforce.

PhishER's ability to flip a phishing attack into a training exercise for your employees to learn from and reduce the threat to your business.

Navigation in the administration tool can be challenging to locate what you are trying to find.

The ability to analyze and prioritize messages promptly has been a significant benefit. Before, it would take days to determine if a message was a threat.

I like the knowledge that the program provides, our IT department used to get slammed with spam and phishing attempts and now the users are able to better distinguish what is a legitimate email and what is a phishing attempt.

Using the PhishRIP function allows us to recieve fewer requests so we can get back to our larger projects.

Initally we had a hard time getting up to speed, we wanted to hit the ground running so maybe if we had a knowledge base for new users with more advanced features. Like how to use wildcards when performing a PhishRIP.

added time for IT not dealing with the same phishing requests.

Being able to block an email after it has already been sent to minimize these requests

The automated rating of emails makes finding the high-risk emails a breeze. I have been able to create rules to carry out specific actions based on the risk rating or the likelihood that the email is spam or phishing. Users can forward an email to PhishER or use the phish alert button to kick off the once manual process of investigation automatically.

The GUI is somewhat clunky and takes some time to get used to. Initial setup is required to get PhishER talking to the KMSAT platform, which I wish is built-in natively, but this is not a deal-breaker by any means.

Manual investigation of emails and users deleting emails rather than having a way to report them. End users are identifying the benefits as well, with a reduction in spam hitting their inbox.

The central console is very friendly to use. I love the ability for users to send this to a central console. The deployment is quite simple and you can probably do it centrally using GPO or any other solution.

I was not able to find a version for other Operating Systems thank Windows, which can represent a problem when you have so many users using Linux or MACs. This is something that they probablye want to invest in the future.

You want to plan this correctly before deploying, make sure the configuration is right so you don't have to do this mulitple times.

The report back from phishing attemps is is a critical KPI for Information Security that everyone should be calculating