--- title: Proofpoint Threat Response Auto-Pull Reviews meta\_title: 'Proofpoint Threat Response Auto-Pull Reviews 2026: Details, Pricing, & Features | G2' meta\_description: Filter 24 reviews by the users' company size, role or industry to find out how Proofpoint Threat Response Auto-Pull works for a business like yours. aggregate\_rating: rating\_value: 4.5 review\_count: 24 scale: '5' date\_modified: '2026-08-07' parent\_category: name: System Security url: https://www.g2.com/categories/system-security ---

# Proofpoint Threat Response Auto-Pull Reviews & Product Details

Claimed

###### Profile Status

This profile is currently managed by Proofpoint Threat Response Auto-Pull but has limited features.  
  
Are you part of the Proofpoint Threat Response Auto-Pull team? [Upgrade your plan](https://sell.g2.com) to enhance your branding and engage with visitors to your profile!

Proofpoint Threat Response Auto-Pull (TRAP) enables messaging and security administrators the ability to automatically retract threats delivered to employee inboxes and emails that turn malicious after delivery to quarantine. It is also a powerful solution to retract messages sent in error as well as inappropriate, malicious, or emails containing compliance violations and also follows forwarded mail and distribution lists and creates an auditable activity trail. With Proofpoint Threat Response Auto-Pull, you can protect your people, data, and brand from today’s threats by: • Automatically pulling malicious or unwanted messages from an end-users inbox. • Enriching each message by checking every domain and IP address against premium intelligence feeds. • Including built-in reporting, showing stats like: Email quarantine success or failures, email retraction read status, targeting by active directory attribute • Reducing the remediation time needed from hours to minutes.

* * *

Seller
[Proofpoint](https://www.g2.com/sellers/proofpoint)
Discussions
[Proofpoint Threat Response Auto-Pull Community](https://www.g2.com/products/proofpoint-threat-response-auto-pull/discuss)
Languages Supported

Arabic, Bulgarian, Czech, Danish, German, English, Finnish, French, Hebrew, Hindi, Hungarian, Indonesian, Italian, Japanese, Korean, Malay, Dutch, Norwegian, Polish, Portuguese, Romanian, Russian, Slovak, Spanish, Swahili, Swedish, Tamil, Thai, Turkish, Ukrainian, Urdu, Vietnamese, Chinese (Simplified)

Overview by
Ryan Kalember (EVP, Cybersecurity Strategy)

Show More

## Value at a Glance

Averages based on real user reviews.

### Time to Implement

1 month

### Return on Investment

18 months

[
View More Pricing Information
](https://www.g2.com/products/proofpoint-threat-response-auto-pull/pricing)

## Top-Rated Alternatives

[

 ![KnowBe4 PhishER/PhishER Plus](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "KnowBe4 PhishER/PhishER Plus")

KnowBe4 PhishER/PhishER Plus

4.5/5(572)

](https://www.g2.com/products/knowbe4-phisher-phisher-plus/reviews)

[

 ![Sumo Logic](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Sumo Logic")

Sumo Logic

4.3/5(404)

](https://www.g2.com/products/sumo-logic/reviews)

[

 ![CrowdStrike Falcon Endpoint Protection Platform](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "CrowdStrike Falcon Endpoint Protection Platform")

CrowdStrike Falcon Endpoint Protection Platform

4.6/5(441)

](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews)

[
View All Alternatives
](https://www.g2.com/products/proofpoint-threat-response-auto-pull/competitors/alternatives)

## User Insights

Average based on 24 real user reviews.

Implementation Time

1 month

Perceived Cost

$$$$$

[Log in to unlock pricing and user insights](/login)

 ![Michael B.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Michael B.")
MB

Michael B.

Infrastructure and Systems Engineer

Enterprise (\> 1000 emp.)

12/7/2022

"TRAP has had a huge impact in reducing our exposure to malicious email"

5/5

What do you like best about Proofpoint Threat Response Auto-Pull?

The most helpful thing about TRAP is automation. We don't need a team scouring potentially malicious emails. When TRAP is told to get to work, it does 24/7. We, being a global company find this invaluable Review collected by and hosted on G2.com.

What do you dislike about Proofpoint Threat Response Auto-Pull?

While TRAP is more or else a black box, it resides on-prem so it's another VM that needs to be taken care of etc. We will move tot he cloud edition when the time comes Review collected by and hosted on G2.com.

What problems is Proofpoint Threat Response Auto-Pull solving and how is that benefiting you?

TRAP allows us to manage email security on a minimal staff effective. This gives us peace of mind, enabling us to do other important things. No need to babysit. Review collected by and hosted on G2.com.

Show More

6/27/2023
Current UserValidated ReviewerIncentivizedSource: G2 invite on behalf of seller

LA

louisa A.

Mid-Market (51-1000 emp.)

3/6/2023

"TRAP USER EXPERIENCE"

5/5

What do you like best about Proofpoint Threat Response Auto-Pull?

I like the direct connection to TAP dashboard. Review collected by and hosted on G2.com.

What do you dislike about Proofpoint Threat Response Auto-Pull?

I DISLIKE THE FACT THAT IT DOESNT CONNECT TO THREAT INTELLIGENCE AND DOESNT LET YOU SEE THE REPUTATION OF A DOMAIN Review collected by and hosted on G2.com.

What problems is Proofpoint Threat Response Auto-Pull solving and how is that benefiting you?

I have the ability to see the systems dispositions and am able to manually review and analyse the email headers Review collected by and hosted on G2.com.

Show More

9/6/2023
Validated ReviewerIncentivizedSource: G2 invite on behalf of seller

 ![Verified User in Banking](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Banking")
AB

Verified User in Banking

Enterprise (\> 1000 emp.)

11/4/2021

"Great product"

5/5

What do you like best about Proofpoint Threat Response Auto-Pull?

Workes very well. Easy to maneuver and excellent insight on each email. Review collected by and hosted on G2.com.

What do you dislike about Proofpoint Threat Response Auto-Pull?

There tend to be issues from time to time with synching and manual csv pulls. Review collected by and hosted on G2.com.

What problems is Proofpoint Threat Response Auto-Pull solving and how is that benefiting you?

Malicious emails. Review collected by and hosted on G2.com.

Show More

Current UserValidated ReviewerSource: Seller invite

DS

Dana S.

Enterprise (\> 1000 emp.)

10/26/2020

"Taking email threat response to the next level."

4.5/5

What do you like best about Proofpoint Threat Response Auto-Pull?

The addition of Proofpoint's TRAP has added another level of response to email security. Feature additions such as the 'Search' function makes it quick and easy to extract malicious emails from ones inbox, reducing the time to act to a threat. Review collected by and hosted on G2.com.

What do you dislike about Proofpoint Threat Response Auto-Pull?

Yet another dashboard to access. Would be nice to see this rolled into one view with TAP. Review collected by and hosted on G2.com.

What problems is Proofpoint Threat Response Auto-Pull solving and how is that benefiting you?

Proofpoint's TRAP great reduces the time in an email attack situation, no longer having to wait for the email team to respond to our requests. Review collected by and hosted on G2.com.

Show More

Current UserValidated ReviewerSource: Seller invite

AT

Amir T.

Small-Business (50 or fewer emp.)

5/5/2020

"Proofpoint TRAP helped our organization to automate reported phishing"

5/5

What do you like best about Proofpoint Threat Response Auto-Pull?

Remediation portion and capability to analyze reported emails through TAP. This will allow us to automatically mitigate any risk in our environment. TRAP will provide detailed info on the attack and it will be able to auto pull emailed related to the attack Review collected by and hosted on G2.com.

What do you dislike about Proofpoint Threat Response Auto-Pull?

I like to see more integration possibilities. We do have other security tools that we would like to see more integration to them. also bidirectional access to SIEM would be nice also. Review collected by and hosted on G2.com.

Recommendations to others considering Proofpoint Threat Response Auto-Pull:

If you have Proofpoint Trap is the must and it will help you with reported phish emails. It will make everything automated Review collected by and hosted on G2.com.

What problems is Proofpoint Threat Response Auto-Pull solving and how is that benefiting you?

it reduced the time it takes to review reported phish. each analyst used to spend about 2 hours per reported phish and now this is automated and we dont spend as much time Review collected by and hosted on G2.com.

Show More

Current UserValidated ReviewerIncentivizedSource: G2 invite on behalf of seller

 ![Michael H.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Michael H.")
MH

Michael H.

Lotus Notes Administrator

Computer Hardware

Enterprise (\> 1000 emp.)

9/26/2019

"TRAP makes Proofpoint near perfect"

5/5

What do you like best about Proofpoint Threat Response Auto-Pull?

No email security product will ever be perfect. If you want true protection, you NEED a product like TRAP that can mitigate threats that may get through to your mailboxes. With TRAP, we have peace of mind that we're doing everything we can to protect our endpoints. Review collected by and hosted on G2.com.

What do you dislike about Proofpoint Threat Response Auto-Pull?

I wouldn't say I dislike anything about TRAP, but there is definitely a learning curve to the product. I'm still feeling my way through the interface and incidents that are automatically created by TRAP and getting more comfortable on how to follow up on certain incident types. Review collected by and hosted on G2.com.

What problems is Proofpoint Threat Response Auto-Pull solving and how is that benefiting you?

We've always just accepted the fact that our users will always be vulnerable to threats getting through in email. With TRAP, we have that added protection of pulling threats out of our users' inboxes and sending them to a quarantine mailbox.

Also, we've found that we can also use it as a sort of message recall service. Microsoft's message recall feature is highly lacking and won't let you retrieve messages that were already ready. With TRAP, we can pull anything from the mailbox (if not deleted) and have actually had to use this a couple of times already. Review collected by and hosted on G2.com.

Show More

10/16/2025
Current UserValidated ReviewerIncentivizedSource: G2 invite on behalf of seller

 ![Verified User in Non-Profit Organization Management](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Non-Profit Organization Management")
AN

Verified User in Non-Profit Organization Management

Mid-Market (51-1000 emp.)

7/22/2019

"A must have Tech!"

5/5

What do you like best about Proofpoint Threat Response Auto-Pull?

Automated remediation for delivered mails.

Easy to setup and upgrade.

OVF appliance makes is easy.

AD integration. Review collected by and hosted on G2.com.

What do you dislike about Proofpoint Threat Response Auto-Pull?

Separate portal to manage from.

Not available as a Azure/AWS instance.

Requires local AD for SSO. Review collected by and hosted on G2.com.

Recommendations to others considering Proofpoint Threat Response Auto-Pull:

Great product and recommend getting TRAP with the email protection gateway. Review collected by and hosted on G2.com.

What problems is Proofpoint Threat Response Auto-Pull solving and how is that benefiting you?

Automated deletion of malicious email which no longer requires manual content search and deletes. Review collected by and hosted on G2.com.

Show More

4/7/2020
Current UserValidated ReviewerIncentivizedSource: G2 invite on behalf of seller

 ![Verified User in Hospital & Health Care](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Hospital & Health Care")
AH

Verified User in Hospital & Health Care

Mid-Market (51-1000 emp.)

9/10/2019

"Auto-Pull Emails"

5/5

What do you like best about Proofpoint Threat Response Auto-Pull?

When a threat comes in through our email system it aids in our process to remove potentially threatening emails from our user's email accounts before they do something that may hurt our network. Review collected by and hosted on G2.com.

What do you dislike about Proofpoint Threat Response Auto-Pull?

There are not very many down falls for using PP Threat Response Auto-Pull. There are however a few things that we don't like. There are times when some emails are pulled but others get through. Also some emails get pulled which should not be pulled. But of course that really cannot be avoided. I don't expect PP to get it right all the time so overall I say my Likes out weigh the Dislikes. Review collected by and hosted on G2.com.

Recommendations to others considering Proofpoint Threat Response Auto-Pull:

The Auto-Pull is a very efficient Review collected by and hosted on G2.com.

What problems is Proofpoint Threat Response Auto-Pull solving and how is that benefiting you?

The time it took us to manually pull Threat/Spam emails we encountered many user's opening the email and clicking on links. We currently have 6 email servers so the time to pull emails takes forever. With the Auto-Pull in Proof Point it has greatly improved our response time and saved our Network from being vulnerable. Review collected by and hosted on G2.com.

Show More

Current UserValidated ReviewerIncentivizedSource: G2 invite on behalf of seller

 ![Verified User in Food & Beverages](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Food & Beverages")
AF

Verified User in Food & Beverages

Enterprise (\> 1000 emp.)

9/8/2019

"I don't know how we could move on without it"

5/5

What do you like best about Proofpoint Threat Response Auto-Pull?

Proofpoint Threat Response Auto Pull is a great asset your company can have when it come to remediation. If you have deployed TAP and Report Alarm button to your users this is something you need to integrate using TRAP. Review collected by and hosted on G2.com.

What do you dislike about Proofpoint Threat Response Auto-Pull?

It would be nice if we could have single sign on (SSO). I would like to have better breakdown report in order to analyse that type of threats people are reporting without seeing TAP data. Review collected by and hosted on G2.com.

Recommendations to others considering Proofpoint Threat Response Auto-Pull:

Try to automate as much as you can but if you end up with 5% is incidents you cant automate you should be fine. Some tasks you'll need an analyst to take a look Review collected by and hosted on G2.com.

What problems is Proofpoint Threat Response Auto-Pull solving and how is that benefiting you?

The biggest problem we are solving is quarantine emails report by TAP and automate the work we had with Report Phish button. Threat Response Auto Pull is something all organizations must have. Review collected by and hosted on G2.com.

Show More

Current UserValidated ReviewerIncentivizedSource: G2 invite on behalf of seller

 ![Verified User in Higher Education](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Higher Education")
AH

Verified User in Higher Education

Enterprise (\> 1000 emp.)

6/11/2019

"Proofpoint TRAP - excellent add-on to Proofpoint TAP"

5/5

What do you like best about Proofpoint Threat Response Auto-Pull?

Automatically identifies email that passed initial scan which has later been identified as a new threat and pulls it from recipient mailboxes.

Lifesaver! Review collected by and hosted on G2.com.

What do you dislike about Proofpoint Threat Response Auto-Pull?

Resource heavy appliance,latest version requires 8 CPU cores and 16GB RAM, luckily it can be a virtual appliance Review collected by and hosted on G2.com.

Recommendations to others considering Proofpoint Threat Response Auto-Pull:

Also ask Proofpoint or your 3rd party vendor about CLEAR, it integrates TRAP with Phish Alarm and Phish Alarm Analyzer. These add a button to mail clients that allow end users to report messages they are unsure of and send them back through for a second scan. If it is found to be dangerous it will then look for all copies of the message and pull them, even ones forwarded by original recipients. Very useful tool Review collected by and hosted on G2.com.

What problems is Proofpoint Threat Response Auto-Pull solving and how is that benefiting you?

Previous email gateway was a one time scan and done. Proofpoint TAP, with the addition of TRAP provides a more robust protection model. TAP does the one time scan, TRAP sits and watches for updates to the filters and acts on items originally seen as safe that are now seen as a threat. I see it pull messages out of user mailboxes regularly where our previous system would have left them there and allowed users to open the message and attachments Review collected by and hosted on G2.com.

Show More

Current UserValidated ReviewerSource: Organic

## Questions about Proofpoint Threat Response Auto-Pull? Ask real users or explore answers from the community

Get practical answers, real workflows, and honest pros and cons from the G2 community or share your insights.

[
Ask about Proofpoint Threat Response Auto-Pull
](https://www.g2.com/products/proofpoint-threat-response-auto-pull/discussions/new)

GU

Guest User

What is Proofpoint Threat Response Auto-Pull used for?

0 Upvotes

0

[
Join the conversation
](https://www.g2.com/discussions/what-is-proofpoint-threat-response-auto-pull-used-for)

[
View all Discussions
](https://www.g2.com/products/proofpoint-threat-response-auto-pull/discuss)

## Pricing Insights

Averages based on real user reviews.

### Time to Implement

1 month

### Return on Investment

18 months

### Perceived Cost

$$$$$

[
View More Pricing Information
](https://www.g2.com/products/proofpoint-threat-response-auto-pull/pricing)

Proofpoint Threat Response Auto-Pull Comparisons

 ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_4f294ed71240479367e5bb9c7e7535c3/knowbe4-phisher-phisher-plus.png "Product Avatar Image")

KnowBe4 PhishER/PhishER Plus

4.5/5(572)

[
Compare Now
](https://www.g2.com/compare/knowbe4-phisher-phisher-plus-vs-proofpoint-threat-response-auto-pull)

 ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_1c049e97363993e399a92bc1a8bcb96e/vectra-ai-platform.png "Product Avatar Image")

Vectra AI Platform

4.3/5(20)

[
Compare Now
](https://www.g2.com/compare/proofpoint-threat-response-auto-pull-vs-vectra-ai-platform)

 ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_271865c827673867bf2618b0fdfc2103/trellix-endpoint-security.png "Product Avatar Image")

Trellix Endpoint Security

4.3/5(327)

[
Compare Now
](https://www.g2.com/compare/proofpoint-threat-response-auto-pull-vs-trellix-endpoint-security)

##### 
##### Proofpoint Threat Response Auto-Pull Features

Response

Resolution Automation

Resolution Guidance

Threat Intelligence

Records

Incident Logs

Incident Reports

Management

Incident Alerts

Workflow Management

[
View More Features
](https://www.g2.com/products/proofpoint-threat-response-auto-pull/features)

##### Categories on G2

[Incident Response](https://www.g2.com/categories/incident-response)

##### Explore More

[Which value selling tools provide the strongest ROI calculator and business case builder for complex B2B deals?](https://www.g2.com/discussions/which-value-selling-tools-provide-the-strongest-roi-calculator-and-business-case-builder-for-complex-b2b-deals)[Data Center Infrastructure Management (DCIM)](https://www.g2.com/articles/dcim)[Best Inbound Call Tracking Software](https://www.g2.com/discussions/looking-for-best-inbound-call-tracking-software-in-2025-what-s-worth-checking-out)

[What image optimization solutions scale well for a large ecommerce catalog with millions of product images without performance degrading as the library grows?](https://www.g2.com/discussions/what-image-optimization-solutions-scale-well-for-a-large-ecommerce-catalog-with-millions-of-product-images-without-performance-degrading-as-the-library-grows)[What salary benchmarking software is easiest to set up for an HR team that wants clean dashboards without a lengthy onboarding process?](https://www.g2.com/discussions/what-salary-benchmarking-software-is-easiest-to-set-up-for-an-hr-team-that-wants-clean-dashboards-without-a-lengthy-onboarding-process)[Best desktop expense management software](https://www.g2.com/discussions/best-desktop-expense-management-software)

[Show MoreShow Less](javascript:void(0);)