--- title: Proofpoint Threat Response Auto-Pull Reviews meta\_title: 'Proofpoint Threat Response Auto-Pull Reviews 2026: Details, Pricing, & Features | G2' meta\_description: Filter 24 reviews by the users' company size, role or industry to find out how Proofpoint Threat Response Auto-Pull works for a business like yours. aggregate\_rating: rating\_value: 4.5 review\_count: 24 scale: '5' date\_modified: '2026-08-07' parent\_category: name: System Security url: https://www.g2.com/categories/system-security --- # Proofpoint Threat Response Auto-Pull Reviews & Product Details Claimed ###### Profile Status This profile is currently managed by Proofpoint Threat Response Auto-Pull but has limited features. Are you part of the Proofpoint Threat Response Auto-Pull team? [Upgrade your plan](https://sell.g2.com) to enhance your branding and engage with visitors to your profile! Proofpoint Threat Response Auto-Pull (TRAP) enables messaging and security administrators the ability to automatically retract threats delivered to employee inboxes and emails that turn malicious after delivery to quarantine. It is also a powerful solution to retract messages sent in error as well as inappropriate, malicious, or emails containing compliance violations and also follows forwarded mail and distribution lists and creates an auditable activity trail. With Proofpoint Threat Response Auto-Pull, you can protect your people, data, and brand from today’s threats by: • Automatically pulling malicious or unwanted messages from an end-users inbox. • Enriching each message by checking every domain and IP address against premium intelligence feeds. • Including built-in reporting, showing stats like: Email quarantine success or failures, email retraction read status, targeting by active directory attribute • Reducing the remediation time needed from hours to minutes. * * * Seller [Proofpoint](https://www.g2.com/sellers/proofpoint) Discussions [Proofpoint Threat Response Auto-Pull Community](https://www.g2.com/products/proofpoint-threat-response-auto-pull/discuss) Languages Supported Arabic, Bulgarian, Czech, Danish, German, English, Finnish, French, Hebrew, Hindi, Hungarian, Indonesian, Italian, Japanese, Korean, Malay, Dutch, Norwegian, Polish, Portuguese, Romanian, Russian, Slovak, Spanish, Swahili, Swedish, Tamil, Thai, Turkish, Ukrainian, Urdu, Vietnamese, Chinese (Simplified) Overview by Ryan Kalember (EVP, Cybersecurity Strategy) Show More ## Value at a Glance Averages based on real user reviews. ### Time to Implement 1 month ### Return on Investment 18 months [ View More Pricing Information ](https://www.g2.com/products/proofpoint-threat-response-auto-pull/pricing) ## Top-Rated Alternatives [ ![KnowBe4 PhishER/PhishER Plus](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "KnowBe4 PhishER/PhishER Plus") KnowBe4 PhishER/PhishER Plus 4.5/5(572) ](https://www.g2.com/products/knowbe4-phisher-phisher-plus/reviews) [ ![Sumo Logic](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Sumo Logic") Sumo Logic 4.3/5(404) ](https://www.g2.com/products/sumo-logic/reviews) [ ![CrowdStrike Falcon Endpoint Protection Platform](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "CrowdStrike Falcon Endpoint Protection Platform") CrowdStrike Falcon Endpoint Protection Platform 4.6/5(441) ](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) [ View All Alternatives ](https://www.g2.com/products/proofpoint-threat-response-auto-pull/competitors/alternatives) ## User Insights Average based on 24 real user reviews. Implementation Time 1 month Perceived Cost $$$$$ [Log in to unlock pricing and user insights](/login) ![Kyle S.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Kyle S.") KS Kyle S. Senior Network Engineer Mid-Market (51-1000 emp.) 3/31/2019 "Great feature" 4/5 What do you like best about Proofpoint Threat Response Auto-Pull? This system is pretty cool. It sits as an OVA in our environment and will pull a message out of our Exchange server if a message is later deemed malicious. Not only does it pull from the recipient but it will also pull from anyone that they forwarded the message to. You can also export message from SmartSearch in Proofpoint Protection and import that into TRAP and it will pull all the messages you exported...useful for message that may not be malicious but inadvertently sent. TRAP doesn't care if anyone read the messages, unlike Exchange's built-in retrieval system. It also will tell you if someone read the message or not. Review collected by and hosted on G2.com. What do you dislike about Proofpoint Threat Response Auto-Pull? I don't like that this isn't controlled from Proofpoint's main interface. I have to log into a separate interface to use this. Also, updates are downloaded from Proofpoint's site and uploaded and run separatly. There's no built-in update agent. It does have two images loaded so if something goes wrong it can be switched back to the working version. Review collected by and hosted on G2.com. Recommendations to others considering Proofpoint Threat Response Auto-Pull: You have to use Impersonation or a service account that has full access to you email users for this to work. Review collected by and hosted on G2.com. What problems is Proofpoint Threat Response Auto-Pull solving and how is that benefiting you? We benefit from this as message can be pulled automatically or manually if we so choose. Review collected by and hosted on G2.com. Show More 2/7/2022 Current UserValidated ReviewerIncentivizedSource: G2 invite ![Verified User in Management Consulting](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Management Consulting") AM Verified User in Management Consulting Enterprise (\> 1000 emp.) 4/15/2019 "TRAP is the missing piece of the phishing response puzzle" 3.5/5 What do you like best about Proofpoint Threat Response Auto-Pull? I like the fact that it automatically pulls bad mail from the inbox. Whether from TAP, or from PhishAlarm Analyzer, the identified threats can be quickly removed from users inboxes. Review collected by and hosted on G2.com. What do you dislike about Proofpoint Threat Response Auto-Pull? I don't like the duct-tape and bailing wire feel to the products. However, the front-end is really slick and makes up for it. Review collected by and hosted on G2.com. Recommendations to others considering Proofpoint Threat Response Auto-Pull: When configuring the product, be sure to allocate a couple of extra mailbox licenses up front. Also, be sure you know how to define the proper mailbox permissions to impersonate other mailboxes. This is crucial for the quarantine functions. Review collected by and hosted on G2.com. What problems is Proofpoint Threat Response Auto-Pull solving and how is that benefiting you? If you need to rely on a messaging team to remove mail from users inboxes as part of your Phishing Response plan, then you may have a minimum 1 hour wait time, and usually a couple of day response time. This allows identified phishing or malware emails to automatically be removed. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: G2 invite on behalf of seller ![Daniel R.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Daniel R.") DR Daniel R. Technical Security Officer Gambling & Casinos Enterprise (\> 1000 emp.) 8/7/2019 "Does mostly what is has to do" 4/5 What do you like best about Proofpoint Threat Response Auto-Pull? It autopulls the malicious email from the mailbox. Review collected by and hosted on G2.com. What do you dislike about Proofpoint Threat Response Auto-Pull? Well, there still is a bug where occasionally TRAP gets the recipient address incorrect (MD5 hashed, but not "unhashed") so TRAP cannot autopull. Review collected by and hosted on G2.com. Recommendations to others considering Proofpoint Threat Response Auto-Pull: Does what is has to do. Review collected by and hosted on G2.com. What problems is Proofpoint Threat Response Auto-Pull solving and how is that benefiting you? removing malicious email after it is in the user mailbox Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: G2 invite on behalf of seller ![Verified User in Hospital & Health Care](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Hospital & Health Care") AH Verified User in Hospital & Health Care Enterprise (\> 1000 emp.) 9/9/2019 "TRAP Works!" 4/5 What do you like best about Proofpoint Threat Response Auto-Pull? If there is an urgent issue you can count on TRAP to pull the email Review collected by and hosted on G2.com. What do you dislike about Proofpoint Threat Response Auto-Pull? Honestly? There are none that I can think of! Review collected by and hosted on G2.com. Recommendations to others considering Proofpoint Threat Response Auto-Pull: Try it, you won't be sorry as its quick and efficient! If you need to pull more than 50 emails this is your solution! Review collected by and hosted on G2.com. What problems is Proofpoint Threat Response Auto-Pull solving and how is that benefiting you? Pulling mass spams message with bad malicious links in them. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: G2 invite on behalf of seller ![Verified User in Wireless](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Wireless") AW Verified User in Wireless Mid-Market (51-1000 emp.) 11/20/2018 "ProofPoint Response survey" 3.5/5 What do you like best about Proofpoint Threat Response Auto-Pull? In depth analysis of threat locationForensic analysis is excellent. Provides a ton of information. Review collected by and hosted on G2.com. What do you dislike about Proofpoint Threat Response Auto-Pull? Does not always catch the threat before someone clicks on it. Phishing attacks are rampid Review collected by and hosted on G2.com. Recommendations to others considering Proofpoint Threat Response Auto-Pull: It pretty much runs by it's self. A quick steps guide would be helpful. The documentation is long and a lot to digest. Review collected by and hosted on G2.com. What problems is Proofpoint Threat Response Auto-Pull solving and how is that benefiting you? It notifies me so we can watch and notify the user. That has helped with training our users what to look for and what not to do. We are hit hard with Phishing attacks trying to get user credentials Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: Seller invite ## Questions about Proofpoint Threat Response Auto-Pull? Ask real users or explore answers from the community Get practical answers, real workflows, and honest pros and cons from the G2 community or share your insights. [ Ask about Proofpoint Threat Response Auto-Pull ](https://www.g2.com/products/proofpoint-threat-response-auto-pull/discussions/new) GU Guest User What is Proofpoint Threat Response Auto-Pull used for? 0 Upvotes 0 [ Join the conversation ](https://www.g2.com/discussions/what-is-proofpoint-threat-response-auto-pull-used-for) [ View all Discussions ](https://www.g2.com/products/proofpoint-threat-response-auto-pull/discuss) ## Pricing Insights Averages based on real user reviews. ### Time to Implement 1 month ### Return on Investment 18 months ### Perceived Cost $$$$$ [ View More Pricing Information ](https://www.g2.com/products/proofpoint-threat-response-auto-pull/pricing) Proofpoint Threat Response Auto-Pull Comparisons ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_4f294ed71240479367e5bb9c7e7535c3/knowbe4-phisher-phisher-plus.png "Product Avatar Image") KnowBe4 PhishER/PhishER Plus 4.5/5(572) [ Compare Now ](https://www.g2.com/compare/knowbe4-phisher-phisher-plus-vs-proofpoint-threat-response-auto-pull) ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_1c049e97363993e399a92bc1a8bcb96e/vectra-ai-platform.png "Product Avatar Image") Vectra AI Platform 4.3/5(20) [ Compare Now ](https://www.g2.com/compare/proofpoint-threat-response-auto-pull-vs-vectra-ai-platform) ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_271865c827673867bf2618b0fdfc2103/trellix-endpoint-security.png "Product Avatar Image") Trellix Endpoint Security 4.3/5(327) [ Compare Now ](https://www.g2.com/compare/proofpoint-threat-response-auto-pull-vs-trellix-endpoint-security) ##### ##### Proofpoint Threat Response Auto-Pull Features Response Resolution Automation Resolution Guidance Threat Intelligence Records Incident Logs Incident Reports Management Incident Alerts Workflow Management [ View More Features ](https://www.g2.com/products/proofpoint-threat-response-auto-pull/features) ##### Categories on G2 [Incident Response](https://www.g2.com/categories/incident-response) ##### Explore More [Which value selling tools provide the strongest ROI calculator and business case builder for complex B2B deals?](https://www.g2.com/discussions/which-value-selling-tools-provide-the-strongest-roi-calculator-and-business-case-builder-for-complex-b2b-deals)[Data Center Infrastructure Management (DCIM)](https://www.g2.com/articles/dcim)[Best Inbound Call Tracking Software](https://www.g2.com/discussions/looking-for-best-inbound-call-tracking-software-in-2025-what-s-worth-checking-out) [What image optimization solutions scale well for a large ecommerce catalog with millions of product images without performance degrading as the library grows?](https://www.g2.com/discussions/what-image-optimization-solutions-scale-well-for-a-large-ecommerce-catalog-with-millions-of-product-images-without-performance-degrading-as-the-library-grows)[What salary benchmarking software is easiest to set up for an HR team that wants clean dashboards without a lengthy onboarding process?](https://www.g2.com/discussions/what-salary-benchmarking-software-is-easiest-to-set-up-for-an-hr-team-that-wants-clean-dashboards-without-a-lengthy-onboarding-process)[Best desktop expense management software](https://www.g2.com/discussions/best-desktop-expense-management-software) [Show MoreShow Less](javascript:void(0);)