The Phish Alert button is great and easy for users to help them identify possible bad email. It also takes the load off the help desk for replying to users that, "Yes, indeed you have properly ID a bad email".

Cost is always a concern and the cost for the three year renewal has doubled compared to what we payed 3 years ago. But we are still customers because it is so easy to use and manage.

The Phish Alert button is one method users can be self-sufficient in reporting and contributing to helping organizations ID bad emails. It makes the users feel as if they are really helping mitigate bad actors.

This tool in itself is useful to review and determine what threats my users are seeing. It makes it easy to go through and analyze messages as they are reported. Overall it has many features to it that make it versitile.

While its many features and functions are awesome. Attempting to implement and troubleshoot can be cumbersome, espically when you are working through multiple high level tasks.

Assisting to give us visibility to what our users are seeing which helps to ensure our filters are working appropriately.

1. Automation and integration.

2. Efficienty in handling phish alerts.

3. Customizable rules.

1. Dependency of user reporting.

2. Cost (for the smaller organizations).

Analyzing and responding to a variety of phishing email threaths, reducing manual workload.

PhishER automates the bulk of the work we were using to track phishing emails. The program was easy to implement and was added as part of our KnowBe4 training program.

The training was helpful but there are a lot of features that I am not sure that are being used to the fullest potential.

Government organizations are constantly batteling with phishing email scams. PhishER has allowed us to turn legimate Phish attempts into training for end users. Works very well for keeping our users trained and vigilant.

This product provides great training and testing for our staff. We have been using this product for two years and have seen a significant reduction in phishing success while seeing an increase in attempts. The training and testing campaigns are automated, and the reporting tools are easy to use as well. The variety of phishing styles and the real world delivery has helped our users become very proficient with identifying these attempts. The easy deployment of the PhishAlert tool in O365 simplified integration.

PhishER is a good tool but could use some interface streamlining. PhishRiP is less effective than you would expect it to be, with a general inability to find similiar messages automatically.

Phishing attempts to users of varying technical skills.

I love that i have the opportunity to view all emails in the dashboard before the end user is able to see them. Also, they can be quarantined and deleted before the end user knows they exist.

The only downside i've experienced with KnowBe4ER is the constant meetings in the beginning of the service. Initially, i understood why we needed to meet and onboard as much as we did, but we are nearly a year into using the service. At this point we should be trusted to fly freely, but we still are having meetings once a month.

KnowBe4 is soloving our issue with phishing, and potentially threatening emails. We all know that the weakest point in any organization is the end user. KnowBe4 PhishER is the bodyguard to that weakness.

Our IT department recently installed a plugin in Microsoft Outlook that allows you to report a suspected phishing attempt with the click of a button. It's simple and effective to use.

I haven't found anything that I dislike about PhishER so far. It's not a free service, so it could be cost-prohibitive for some nonprofits, organizations, and companies, but it's a great service.

Our IT department implemented required phishing training to all employees and then implemented PhishER in our Outlook email program. Our employees are now more knowledgeable about phishing attempts and this gives us a great way to report phishing emails without having to contact IT every time. IT even sends out fake phishing attempts to see how employee awareness has changed.

Before PhishER, IT had to manually check every suspect email reported to us. Now, we only need to check email with an "Unknown" verdict. Saves us a LOT of time, and risk! Since email remains the primary vector by which cybersec threats are successfully delivered, having this additional layer of protection for the email that gets through our front-end scanners is critical.

The only downside in my opinion is that as an engineer, I would like to see the specific reasons that PhishER assessed a particular email as a threat. This is a small negative, however!

PhishER is adding additional protection to our email environment, and of course that is of great benefit. It's also providing a business benefit by automating the reporting and initial assessment of suspect email.

The best part of PhishER is the ease of reviewing all reported suspicious emails and how it learns which email flagged as clean to automatically do the same if similar email messages were reported again. The most helpful part of PhishER is the capability to query for similar email messages, and further action can be taken.

The capability to query for similar email messages and quarantine is great but it's lacking because it fails to find many similar messages where similar messages ends up reported by the users instead of already being quarantine.

The IT department usually get emails individually or an IT ticket asking if a suspicious email is legitimate or not. PhishER decreased that interaction (where IT staff have to take time to review the suspicious email, take action, and respond back to the user) as it is complete that same task automatically. It also provides a timely response if the email is clean. This is benefitting us because actions are being taken to address suspicious emails received.

Its a good testing tool and it helps me to know if im performing phishing tactics correctly.

Nothing to dislike the tool does what you need it to do and help educate your staff.

It let me know if I can identify phishing attacks correctly.