It saves our IT department a lot of time. Users can send suspicious emails straight to the service vs our inbox.

We do not have any issues with the PhishER at the moment.

It saves us a lot of time and they help us by scanning the emails before they come to our department.

The ability to remove (PhishRip) unwanted emails from user's inboxes.

How long it takes to generate a PhishRip query.

Phishing emails are reported to information security through PhishER and we are able to investigate there saving time.

User interface is simple. Automation is very good. Insight into potential attacks. Insight into legit emails that are incorrectly reported.

Most reported emails require my direct review to determine if they are a threat or not. It would be nice if the tool provided more help in thsi matter.

Easy reporting of phishing attacks. All phishing reports are in a tool designed for managing them.

The onboarding team is the best - whiteglove all the way. Setup and integrations are very easy to setup and support has not been an issue if needed.

A few setup items need to be done, but overall, it wasn't that bad, especially with the support and onboarding team.

Phishing awareness and education - reporting and triage of emails using PhishAlert and PhishER. PhishER is automated!! Takes less time to manage the security awareness program.

The Phish Alert Button as a Chrome extension

detailed reporting

the ability to scan with Virus Total

The ability to identify patterns to improve our controls

the need to re-authorize the extension, users are not notified about it and the reporting doesn't work if authorization is missing

besides that there isn't anything else

1. Lack of streamlined reporting tool

2. Lack of information when users are simply forwarding the suspicious email

3. Motivation to report a suspicious email

4. Compliance

I've clicked on a link on accident last week that a friend sent. The link was blocked by PhishER which sparked me to reach out to that friend and confirm it was from her. Turned out she was hacked. However, I wasn't due to PhishER. :)

I personally can't say that I dislike anything. PhishER has really saved me more than once. Kudos to the team that works there for that. Without them, I'd be changing my password all the time.

The biggest is that even though I am vigilant, I do fall prey to phishing schemes. However, with the automagical blocker, I feel a sense of protection. It also helps me from changing all my passwords after an accidental click.

PhishER can automatically determine if an e-mail submitted by a user, via the Phish Alert Button, is phishing threat.

If PhishER cannot automatically determine if an e-mail submitted by a user is a phishing threat, then the administrator needs to manually determine if it s a threat.

Experiment with all the settings and ask your KnowBe4 rep a lot of questions. They are very knowledgeable about their products, and technical support is very good.

PhishER, in conjunction with the Phish Alert Button, allows users to flag potential phishing e-mail that an organization's spam filters fail to catch. Once an e-mail is determined to be a genuine phish, then PhishER can pull the same e-mail received by other users from their respective inboxes and quarantine the message.

Ability to find the Details about the activities in our system.

Reporting to clients promptly about the attacks immediately are best I felt.

If it can find bots that would be great but can be enhanced later part

Ability to find out Email attacks and links in it.

Look for unknown apps that got installed internally.

To find out the Injections in applications that's possible

PhishER applies AI/ML to the phishing process. It greatly reduces the amount of security analyst time needed, then allows us to remove similar phishing emails from any company accounts (PhishRIP)... this is the solution that phishing has needed for years. The ability to setup custom rules for managing phishing emails is great too.

The workflow is not as intuitive as it could be, so analysts really need to take PhishER training before working with it. Having said that, KnowBe4 makes that available weekly for free. The other thing is that you have to open a new tab to go to PhishER (i.e., it is not bundled into the 'normal' KnowBe4 console except via a link), but this is a minimal hassle.

If you are concerned about responding to user identified phishing emails I cannot think of a better investment.

Phishing continues to be one of the biggest risks to enterprise security, and PhishER is a tremendous advantage for security teams tackling the issue. It has drasticaly cut down the time to research and react to suspected phishing emails.

The dashboard has all the information you need on it. You can also create custom rules for inbound messages. It has a powerful search "query" within the inbox, and the integration with PAB is flawless!

I wish the query aspect could be automated for quarantining messages based on system or custom rules.

PhishER is worth it!

Being able to quarantine several emails from one query automatically has saved a lot of time.