KnowBe4 and Sophos Phish Threat are competing products in the security awareness training and phishing simulation space. KnowBe4 has the upper hand in pricing and customer service, while Sophos Phish Threat is praised for its comprehensive features, making it a worthy contender.
Features: KnowBe4 provides an extensive library of training content, customizable phishing templates, and a user-friendly approach, enhancing flexibility and effectiveness. Sophos Phish Threat offers sophisticated reporting, behavioral analysis tools, and detailed phishing readiness insights.
Room for Improvement: KnowBe4 could improve its analytical tools, advanced reporting capabilities, and scalability for large enterprises. Sophos Phish Threat might benefit from easier deployment procedures, more intuitive usability for non-technical users, and enhanced integration options with other security systems.
Ease of Deployment and Customer Service: KnowBe4 is recognized for its straightforward implementation process and responsive customer service, favoring quick deployment. Sophos Phish Threat, though slightly more complex to deploy, is valued for its robust support system and comprehensive documentation.
Pricing and ROI: KnowBe4 is viewed as cost-effective, offering clear ROI through structured pricing plans. Sophos Phish Threat, despite higher initial setup costs, provides significant ROI due to its advanced features. KnowBe4 offers a balance of cost and value, while Sophos Phish Threat justifies its pricing through rich features.
We learned extensively about cybersecurity with the training, and the automated trainings are very convenient and feasible for us.
This soft ROI shows value within the company and how security and data are being protected.
The solution proved valuable for audit reporting and successfully raised awareness while reducing phishing click rates.
Their support is very quick and informative.
We have escalated questions to KnowBe4's technical support, and it has been quite helpful in guiding us, especially when we request feature edits or face buggy issues.
The content is regularly updated to reflect current threats.
I would evaluate the scalability of KnowBe4 as quite scalable, giving it an 8.5 on a scale of one to ten.
The product is pretty much scalable.
KnowBe4 works without interruptions and is very stable.
In terms of stability, KnowBe4 is stable; based on the training we are receiving, I would rate it at nine out of ten.
During the last downtime, it caused significant disruption as users couldn't access the system.
KnowBe4 could educate people about OWASP Top 10 in web security testing and API security.
KnowBe4 should focus more on these issues and provide guidance on dealing with links received from individuals who attempt to manipulate our emotions, particularly on social media platforms such as Facebook and LinkedIn.
The more complicated things they do about phishing, AI, and social engineering are very important, and the way they do it is very structured and good.
It's about five dollars a seat per month.
The solution was considered expensive, particularly in government contexts.
As an exceptional product, they are relatively expensive, but it is worth it because compared to offline education with hired dedicated people, it would be much more expensive and not obviously more efficient.
The cost of Sophos Phish Threat is very reasonable for customers as they charge based on usage only.
Modern phishing emails appear authentic, as if from friends. This enables full-blown ATP operations using AI to generate convincing phishing emails, making it crucial to focus on AI-based detection against AI-generated threats.
This is the biggest benefit to raise caution in the digital world, making people aware of the importance of verifying the sources of information.
I appreciate the training methodology. It is detailed with videos and real examples about handling phishing emails and dealing with social media links received through WhatsApp, email, or other platforms.
Old school Security Awareness Training is static. It’s a one-time event without follow-up. KnowBe4's Kevin Mitnick Security Awareness Training starts with a baseline test to show the actual Phish-prone percentage of your users. Then it steps users through effective, interactive, on-demand browser-based training. As step three, you send frequent simulated phishing attacks to your employees to reinforce the training. This last feature, frequent simulated phishing attacks (we recommend at the very least once a month) really creates a change in behavior.
Sophos Phish Threat emulates a range of phishing attack types to help you identify areas of weakness in your organization’s security posture, and empower users through engaging training to strengthen your organizations defenses.
We monitor all Security Awareness Training reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.