Having the button in the Outlook toolbar and also accessible on mobile devices to easily submit suspected phishing email is very convenient. The button submits the email and removes it from your Inbox. If it is determined to be malicious, that information is used to remove it from others Inboxes and/or prevent it's delivery in the first place.

I can't really complain, it works well. If I had to say something, finding how to report phishing on mobile devices is a little hard to find at first. In the desktop Outlook, it's just right there.

Easy and cerntralized reporting and submission of suspected malicious email. It also uses submissions and detections to preemptively protect others in the company/organization.

I like the PhishRIP feature combined with the PhishFlip which allows me to integrate nuetralized real world threats into my educational curriculum for my end users. It makes the training very relevant to current events.

Building rules for your enterprise is mostly manual. This means that it takes a while to tune the system to your environment. If you are not actively building rules then the generic rules have to be manually reviewed as they often miscategorize messages within an environment.

It is solving the problem of current education for my last line of defense. The users.

I love the ability to connect it to Exchange to purge mail quickly and more easily than doing it through Microsoft by using PhishRIP. It is very effective, and my security team loves it.

The only thing I can think of that I don't like about it, and maybe this is just a configuration oversight, is when a lot of people report an email as phishing, the system will automatically move it to Quarantine for everyone else. This is good and bad. It is great because, in the case of true phishing, it can handle Quarantining the bad email before IT gets to it. But the bad side is that when a lot of people flag a good email that they were told not to flag, then PhishER removes it for everyone else. IT then receives a lot of tickets about it and, if they don't think to check KnowBe4, it can be tricky trying to figure out what happened.

Another thing: Syncing the block list can be tricky. If KnowBe4 blocks a good sender and Microsoft has it too, your IT needs to know to unblock it from both systems at the same time. Otherwise, you might have one system sync it back to the other if you wait too long.

These are not terrible "dislikes".

It is a great assist to Microsoft email protection and the automation works well. My security team has an easier time working in the PhishER interface than the Microsoft portal. It protects us better.

Our users use KnowBe4's PAB (Phish Alert Button) to report emails to PhishER, the platform's machine learning algorithms and threat feeds automatically resolve and categorize emails into SPAM/Clean/Threat and let our users and us know what to do, virtually automatic.

All is working as expected. There have been no issues to resolve.

It automatically and with little lift solves the need to categorize and let our users know if an email is from a legit source, saving lots of time for staff and users. Not to mention reduced worry.

I like being able to filter out what's spam, a threat, or what's clean.

I haven't come across anything that I dislike.

It's giving the option to send any questionable emails to another inbox instead of just forwarding to IT.

Phish ML, Rooms, and PhishFlip were great

No sandbox provisioning to detonate a threat.

Phishing Emails

Good user friendly tool for tracking Phishing Emails from the general user population

You have to open the actual email in order to click on the PhishER plugin, so there are times when you are knowingly opening a SPAM/Phishing email which is not ideal.

Helps users easily categorize Phishing emails

PhishER provides a user friendly solution to help control email SPAM, a simply Outlook plug-in that users can move questionable emails to for scanning and disposition

The AI engine behind PhisER sometimes miscategorizes emails

PhishER is helping our organizational control email SPAM and also educating users on what may/may not be SPAM

PhishER has been very responsive. They have significantly increased the educational offerings and general awareness of the staff in our organization. It has been easy to work with them, and their customer service has been excellent. The reports look great and are easy to share with our leadership team and board. I'm approached by staff who are excited when they recognize a fake. PhishER has been great for increasing our email and online security awareness.

We have been using PhishER for about 6 months now, and there hasn't been anything to dislike thus far. It is easy to set up the trainings to address when employees click on something they shouldn't. However, some staff don't like the "extra training". I believe it has been beneficial and most are OK with it once they understand the seriousness of the threats facing facilities.

PhishER solves issues with the time it takes to create and administer education around information technology security, phishing, vishing, privacy, and more. It has also helped us to help our staff realize the types of attacks they may be vulnerable to.

Automatic resolution of known phishing email messages.

Always having to relearn how to do things within the tool.

Makes it easier to determine true threat phishing emails.