One of the most helpful things with this product is the fact that it will run through everyone's mailbox and remove any malicious email after someone submits one. This helps prevent anyone else from clicking on something they shouldn't. Review collected by and hosted on G2.com.

There wasn't much to dislike about it. Maybe the AI recognizing malicious emails could be better, but it's already very good. Review collected by and hosted on G2.com.

That we have an actionable portal in which to sandbox potential threats. In most cases, it does a good job determining if a reported email is either a threat, spam or clean. Review collected by and hosted on G2.com.

PhishER is lacking in key areas including features, reporting, and support. It does not offer the robust capabilities found elsewhere in the KnowBe4 ecosystem, particularly when compared to KSAT. The interface feels unpolished, and the platform frequently struggles to process requests, often running slowly and encountering errors more often than is acceptable for a security product.

Automation capabilities are minimal. Beyond basic keyword-based tagging, there is very little available to meaningfully streamline workflows or reduce manual effort. Reporting is another major weakness—built-in reports provide limited actionable insight and pale in comparison to the comprehensive reporting available in KSAT.

My experience with PhishER support has been particularly disappointing. Issues are routinely minimized or described as “expected behavior,” even when the platform becomes difficult or impossible to use. It is apparent that frontline support agents lack sufficient training and escalation support from senior staff and the development team.

If you are considering PhishER because you have been impressed with KnowBe4’s KSAT product, be aware that the same level of polish, investment, and maturity has not been applied here. Based on my experience, PhishER does not currently meet the expectations one would reasonably have for a product in this space. Review collected by and hosted on G2.com.

I like the automated triage that helps prioritize risky emails, the threat intel that helps us confirm if something is malicious, and the ability to group similar phishing emails so we can clean them up faster across the company. Review collected by and hosted on G2.com.

I’d like to see the automation and similar message detection become more consistent. Sometimes it misses emails that are clearly part of the same campaign and needs manual tuning. It would also be nice to have a bit more flexibility and visibility when building and troubleshooting automation workflows. Review collected by and hosted on G2.com.

Easy to use platform. I find that the percentages for clean-spam-threat are spot on and provide an outstanding gauge for deciding if a message is a threat or not. Review collected by and hosted on G2.com.

My issue is not necessarily a PhishER issue but an internal process issue at our company. We have several administrators and we all tend to process the PhishER messages a little differently. Some of the administrators tend to skip steps - the ability to incorporate some type of recommended process flow into the system would be helpful - nothing complex - perhaps something AI-driven that would simply have reminder steps such as: run PhishRIP, mark the message as resolved, etc. Review collected by and hosted on G2.com.

Very easy to use. Intuitive interface. Everything can be sorted and automated Review collected by and hosted on G2.com.

A few pre-built templates that could be very useful. Review collected by and hosted on G2.com.

I found the PAB button reports most helpful. I like getting them and seeing just what gets reported to us and by which users. Review collected by and hosted on G2.com.

The rules need to be explained a bit better for making things more automatic. I have learned more here at the convention about the rules and we found that two of my rules were cancelling each other out. A better guide linked to that would be great. Review collected by and hosted on G2.com.

PhishER lets us tailor campaigns to our specific needs, including curated tests for particular roles across the organization. The admin center is intuitive and easy to navigate, and it brings the most pressing issues to the surface so they get the attention they need. Review collected by and hosted on G2.com.

The search feature is a bit rigid, and I would like more flexible options for how to filter through thousands of reported emails, PhishRIP queries, and similar items. Review collected by and hosted on G2.com.

- New UI/ interface but the experience is bad. One click Phishing remediation doesn't works across all the inboxes. Review collected by and hosted on G2.com.

No direct integration with Google SPAM button. Need to install a separate button which no user bother's to use. Very hard to adopt. Review collected by and hosted on G2.com.

I really like that KnowBe4 PhishER/PhishER Plus lets users across our company simply click a button to report suspicious emails, which significantly boosts its adoptability. It's also very easy to set up. The initial automated analysis is crucial in making our decision-making process quick and effective, allowing us to evaluate emails and determine the correct course of action almost instantaneously. Review collected by and hosted on G2.com.

I wish the tool had a partnership with a company like any.run to allow us to analyze attachments in a safe environment real-time within the platform to see if there's malicious code or additional attack vectors embedded inside attachments. Review collected by and hosted on G2.com.

I love that users can submit suspicious emails and then if we find that they are a threat we can do a "rip" to identify if other users have received the same email and pull it from their inboxes. Review collected by and hosted on G2.com.

Some of the selection processes within the platform take a bit of getting used to. You need to make sure that you deselect an option because it doesn't automatically do that - so I've sometimes inadvertently sent a response to a previously selected email, instead of only to the one that I wanted to address. Review collected by and hosted on G2.com.