Abnormal Security vs. KnowBe4 PhishER/PhishER Plus

Another local organization was compromised, and we were one of the targets of their further attempts. We were 100% protected because the behavioral analysis protected us, but also allowed me to contact that organization and report their compromise. This has actually happened more than one time since going live.

Incentivized

If you are already using KnowBe4 for Security and awareness training this is a no brainer for a security boost and reduction of alerts to the it department for simulations. If you have a more advance email security platform like Abnormal Security this may not be a good fit, but then the cost is pennies in comparison.

Incentivized

• Spam filtering...we have been able to turn our spam sensitivity down on Exchange allowing more legitimate messages through to user inboxes.
• Malicious email filtering...we experienced several successful phishing attacks over the past year. Abnormal Security has prevented hundreds of individual campaigns since going live in August '22. I cannot thank them enough!
• Automated response for reported emails...my team is small and we do not have enough hours in a day to review and respond to each reported email. Abnormal Security performs additional analysis on those reports and automatically responds for us. If the message is spam or malicious, copies of those emails are looked for throughout the server and deleted.

Incentivized

• Phish Alert Button makes the email reporting process very easy, we just need to install the plug-in to end-user's outlook and then in a few clicks, they can report any email and that will go to the KnowBe4 PhishER inbox for investigation.
• The inbuilt AI feature PhishML of KnowBe4 PhishER helps us to analyze the reported emails very quickly and easily as it already categorizes the emails and provides tags like Clean, Spam, and Threat.
• PhishRIP query is a very good feature to run a query and quarantine the suspicious emails that have reached to the end-users inboxes.
• With the help of PhishFlip, we can convert a real phishing campaign to a simulated phishing test and test our users.
• Third-party tool integration is good as we can add them to take full advantage of applications that can help us to analyze the reported emails more efficiently like VirusTotal.

Incentivized

• None so far, I have been extremely happy with their service.

Incentivized

• When customizing simulated phishing campaign emails the ability to add a upload a custom image would be helpful.
• Some of the menu options take a bit to get used to - not as intuitive as I'd like. You select a user, then you can choose from a different menu to add them to a group. Once you know, it is not difficult - but not as easy as it should be.

Incentivized

Phish ER has reduced the time my team and I spend on reported emails by over 80%. With the volume of emails reported and a small team this is a must have.

The configuration is a bit complicated, but easy once you get the hang of it. Once configured, it is easy to manage our malicious emails that are reported by our staff.

Incentivized

Support has been easy to get along with and easy to understand.

Incentivized

Work with support or rep for some basic steps, the rest is pretty straight foward.

Incentivized

Abnormal Security blocks malicious emails that both PhishER and Cisco Secure Email Threat Defense miss. One thing that PhishER does have is the ability to flip a malicious message into a user education phishing email. That's cool, but I think we can just copy/paste the same info into a custom campaign.

Incentivized

KnowBe4 PhishER has a lot of features that other companied does not have. Its AI capability, integration with VirusTotal, PhishRIP and PhishFlip features make it totally different from other solutions. Its Phish Alert Button directly installed on users Outlook without affecting them and the reporting technique is very simple, just clicking on the Phish Alert Button and the email will be directly reported to the KnowBe4 PhishER dashboard. KnowBe4 PhishER dashboard is a very good example of centralized dashboard where you can find all things related to that reported email.

Incentivized

• Preventing compromises that have historically led to payroll or accounts payable threats.

Incentivized

• It has greatly increased phishing / security awareness by our staff by having a designated button & process for reporting phishing emails
• It provides greater protection through the ability to delete emails from multiple recipients even if not all of them reported the email
• It saves time for me to have to evaluate whether or not an email reported is a real threat through the ML/AI/VirusTotal scores

Incentivized