IRONSCALES Reviews

The tool runs on an API, and it communicates with all of our users' inboxes. The tool is just for keeping spam in check and, more importantly, to deal with the dangerous phishing emails out of our users' hands. It can see if it lets something pass and it goes to the inbox, then after 20 minutes, if it gets new information that it is a potentially dangerous email, the solution will yank it right out of the user's inbox.

With the tool, users can report things that they think are phishing activities, meaning it allows IRONSCALES to take another look at it and then determine the final disposition, which is a good feature. More importantly, we just kind of let it run and do its thing, and then the tool comes up with two to three possibilities. If something is clean, we never hear from IRONSCALES. If it is spam, it will be categorized as spam. If an email is considered to be a phishing email, it'll categorize it as a phishing activity. If an email is spam or comes under the phishing category, the tool will pull the email out of the inboxes so that it is not available.

We needed it for mail relay and phishing awareness training.

We use the IRONSCALE solution on all our email platforms, including mobile apps, web access, and Outlook on computers.

Our deployment model is hybrid. Our private environment is in Microsoft 365 and we also have SaaS through BDO.

Since we are using Microsoft 365 and everybody is basically connected to that infrastructure for their emails, all we had to do was implement IRONSCALES into 365 and that covered my whole organization. There are about 175 email boxes. We expect that to at least double that amount in the next couple of years

There is buzz around phishing awareness training. When I make a campaign, all of a sudden people in our organization are talking, thinking, and wondering about it. Therefore, it keeps people on their toes. That is perfect because it does exactly what we want it to do. 

Everything seems fine with the mail relay. I can't complain.

We mainly use the solution for email security and threat mitigation through that vector, which could be phishing, malware, and malicious attacks. It allows us to inspect emails and enables end-users to report and quarantine potential threats in a sandbox, which is very valuable. The response time is imperative for us, a notification gets to me as the tech very quickly, and I can mitigate any issues we may have.

We have IRONSCALES deployed over two companies. The leading company owns the account, and we have two companies under that: Mason Law and Planning Company and Warrior Insurance. They're in the same building on different floors, but both companies are situated with IRONSCALES at all endpoints for all users. We don't have any off site users, with the occasional exception. The vast majority of our staff work on-site. We don't have anyone working from outside the office. 

We spend significantly less time dealing with email issues. For example, the routine process of determining if an email is a threat or not is now taken care of in a minute or less, instead of up to five or ten minutes. This adds up and results in a lot of time saved. This product also makes our end-users feel comfortable. Our employees are more confident in their email abilities because of the training and their months of experience using this program. 

We are using it for email security. Microsoft's built-in spam and phishing filter was completely inadequate. We were looking at tackling spear phishing and phishing in general for the organization, as well as educating our staff through targeted phishing campaigns and training.

Our email provider Microsoft doesn't supply anti-phishing functionality as part of our licensing with them. They provide antivirus and anti-spam. We don't pay for their advanced protection features.

In terms of deployment, it is a SaaS platform. It connects to the Office 365 API.

It has helped immensely because it has gotten rid of malicious links and malicious attachments that have been targeted at our different staff members. It has definitely protected us on more than one occasion.

Their integrated approach of combining email security and employee awareness training is excellent because the training is a reminder for staff to continually be on their feet and look out for the ever-changing landscape. It also lets us know who has been trained, who hasn't been trained, and what they're like. It integrates a risk ratio for all our employees.

Its artificial intelligence and machine learning capabilities are very important because I don't want to have to manage 24/7. Having the AI to do a lot of the work for me is invaluable.

Its automated detection and response capabilities are excellent. It does a wonderful job. They provide all the stats on what it has done. It gives you information about how much time is saved and all that kind of good information.

Its automated detection and response capabilities have massively decreased the time we spend manually reviewing email events. Since May, it has taken care of 170 hours. So, it has saved 88 hours per analyst.

It is very good in terms of the customization of the automated detection and response capabilities. It is granular, and you can adjust it however you want. If it is too high, you can turn it down. If it is too low, you can turn it up.

The main challenge that we wanted to solve with this solution was the email-based attacks. They are a major threat for our staff and customers. So, we are using this solution for protection from threats and remediation of phishing emails. We also use it for simulation to train our staff to recognize a phishing email. For those users who click on the phishing email, we provide the training content to improve their awareness.

Its artificial intelligence and machine learning capabilities are really important and helpful in saving time. It saves a lot of hours, and we don't have to do a manual review of each incident or email. Without IRONSCALES, we will have to rely on our staff to report emails that might be malicious, but you can't always depend on the staff to do that.

It is an important part of our security infrastructure. It gives us confidence that we are protected from email threats.

It allows us to report an email as spam. If our staff suspects an email to be malicious, they can report it as spam.

It is helpful in assessing the awareness level of our staff. We compare the metrics of every new phishing campaign with the metrics of previous campaigns. We also determine if the awareness training we are conducting for our staff is effective. We can see all the data. If a lot of people have clicked on the phishing email, we get to know that we need to step up our efforts on phishing awareness.

Its automated detection and response capabilities save a lot of time. We are a financial institution, and we get quite a lot of emails. If someone has to manually review and investigate each alert or email event, it would be a full-time job. On a daily basis, it would take more than three hours of analysis work. A financial institution like ours receives quite a lot of emails from customers and internal staff, and IRONSCALES saves a lot of our time. We don't have to dedicate someone to manually review alerts or emails.

The time that we have saved by not having to manually review each incident can now be used to focus on other tasks. 

It has also helped reduce the number of people or analysts needed to deal with and respond to email incidents.

It allows us to customize the automated detection and response capabilities. Each email that IRONSCALES detects has a confidence level rating. For example, it has 90% or 70% confidence in a phishing email. We have the ability to configure the threshold for automatic remediation. For example, we can say that for emails with a 70% or higher confidence level, it can automatically remediate, but for emails with a 69% confidence level, it should raise an alert, and we'll manually investigate. It gives us the ability to raise or reduce the threshold.

It is a glorified email spam filter. IRONSCALES catches whatever the built-in Microsoft spam filter doesn't catch. Its intelligence is different. Microsoft spam filters are only strong to a certain extent, and IRONSCALES catches what falls through the cracks, which is super important. It checks the links and other things, and our mailboxes are much cleaner.

Every company is different. In our company, it is helpful because it lets people know what to look out for. The reason we got IRONSCALES was that you can train all day long, but not everyone is going to get it. That's just the nature of working in the industry. It helps to remind people from time to time, but the scams evolve, and IRONSCALES has also evolved. So, the training is much less important than it used to be in terms of how to determine what's what in the malicious message, whether it is phishing, etc.

Its artificial intelligence and machine learning capabilities are the most important pieces. It is just good to know that it is watching when we don't have to watch. I can go to sleep, and it is still working. The AI knows what to pick up on. It learns from other companies. The key is that it is not just our tenants that it is examining; it is examining all the tenants. So, it can take what it learns from a different company that has nothing to do with us and apply it to our mailbox. So, the whole system gets smarter overall.

It provides the ability to customize the automated detection capabilities. The system is set up for that when you start, and there is not a whole lot of going back in and reteaching it after the fact. Only when we're doing the training, to teach people what to look out for, we intentionally do white list certain messages that are designed to be spammed. This way we can go back, look and find out which employees need a refresher on how to find a malicious email because they opened the wrong email or clicked the wrong link. That's the only time that we would go and update anything. Most of the time you leave it alone.

It enabled us to spend more time on other activities. Previously, when we had very strong spam filters, a lot of things were positive. It took a lot of digging. Every time somebody would send an email saying that they are missing something, we'd have to go back and release it. IRONSCALES doesn't do that. The messages that are legit go through because the false positive rate is very low. It seems to catch real problems, and it lets the clean ones through, which is what it is supposed to do. The only time we have an issue is when people word an email poorly, it might be considered a SPAM message, whereas it is not. It is legit. In such a case, I just have to release it, and it is fine. 

I've used IRONSCALES in multiple scenarios. I first used the solution in the Asia-Pacific region to review suspicious phishing emails in the mailbox instead of reviewing them manually. The primary goal was to have an automated solution for suspicious or weird emails. It automatically reviews them and maybe provides some kind of response. That was our first goal with the product. It reviews the emails, attachments, and links at the same time.

There is an automated piece where people can send an email or forward the email to a review team. It adds an additional mailbox layer on top of our spam quarantine. IRONSCALES captures everything our existing spam quarantine couldn't capture. It also helps us with additional phishing campaigns. 

IRONSCALES has what they call a "911 mailbox" that lets your organization share information about threats. It sets up an address like phish@whateverorganization.com where everyone in the company can forward suspicious emails. IRONSCALES has access to that account to review the emails. All of the phishing emails or anything suspicious goes in that queue.

IRONSCALES will automatically categorize mail if something looks legitimate based on what the admins have already reviewed. It saves us a lot of time. We previously had a regular mailbox to accept suspicious mail from members of organizations. It was tough because everything was all manual, and we had to review a ton of emails some days. Now, people just send everything to the 911 mailbox or click on the "report phishing" button.

If employees have any other questions, they can message or call me. IRONSCALES saved me tremendously because I don't have to worry about manually reviewing that mailbox anymore. Sometimes, the email doesn't reach the queue, and I wonder what's going on. It's probably due to multiple forwards. The phishing campaign assimilation also helps.

At the time, we had an email gateway system, but we didn't have something that could remove malicious and unwanted emails from company mailboxes on the fly. That was one of the main draws for using IRONSCALES. It is very simple and easy to remediate malicious emails. 

We also didn't have a user awareness training platform. We needed something that we could use to test phishing emails to train the staff in our company and increase cybersecurity awareness. These are the main tools of the platform that we use that we didn't have before.

By having an integrated approach of combining email security and employee awareness training, they've hit the nail on the head. It is very easy to learn and use the platform for both of those functions.

When I send out phishing campaigns, which is usually once a month or every two months, where we do a different scenario, we calculate all the results. On an ongoing basis, I can see that our reporting rate has gone up over the last six months or so. Running the campaign is obviously having an effect on the awareness of our staff. I can see that in facts and figures. Before me, we didn't have a dedicated role for doing this. In my time, after about three or four campaigns, you start to notice the benefits. After a campaign, I also communicate with each department. I liaise with them, not through IRONSCALES, and I send out the results from the campaign to them, but it is the phishing campaign that has helped. So, you start to realize the benefits after three or four campaigns.

It definitely reduces risk. In email security, the main risk is users. 99% of it is making sure your users don't click things. So, if you're using the platform to teach people, you're reducing that risk. As long as you're doing the incident part of it on a timely basis, your risk is going to be a lot lower. For me, the biggest risk reducer is just educating users.

IRONSCALES’ mobile app notifies me when a new incident is created. Within the settings of IRONSCALES, you have a collaboration app. We work with Microsoft Teams in the company, and I've linked it with that. Every time an incident is raised in IRONSCALES, it sends a notification on my Teams channel and my security channel. It is instant. As soon as an incident is raised, I get a notification in Teams that there is something to look at to review. So, whether I'm at my desk or on my phone, I will get that notification straight away. I can solve something in less than a minute. The notifications are very good and helpful, and I'm happy with this feature. I couldn't suggest any improvement there.