IRONSCALES Reviews

My main use case for IRONSCALES is the UI and the convenience of having detailed information available to me.

A specific example of how I use the UI and detailed information in my day-to-day work is that it provides correspondence history with all the mails being sent and also the way it passes the headers. It's very easy to read and make out where exactly vulnerabilities lie.

IRONSCALES' platform makes it very easy and user-friendly. For the technical part, there's always a further drill down that can be done for information.

The best features IRONSCALES offers are the investigation tabs, headers, and correspondence history, which stand out the most for me.

The investigation tabs are valuable for my work because reporting goes a long way in terms of playbooks and having a full investigation. The investigation tab knows exactly how to put the information in a way that makes it very easy for reports to get done fast.

Security awareness training is a big part of IRONSCALES. The platform offers a broad spectrum in terms of what campaigns can be run for security awareness for users as well as reporting back on how users interact with their mails and understanding where the vulnerabilities lie.

IRONSCALES has positively impacted my organization by making email security simple in terms of controlling mails, understanding where the threats are, and protecting the organization itself.

I would really prefer to drill down more on correspondence history. It provides detailed background information to actually understand what's going on. If there were clickable drill downs on specific users or specific correspondence to relate them to certain types of mails, that would be beneficial.

I have been working in my current field for about one year and two months now.

IRONSCALES is very stable.

Customer support for IRONSCALES is outstanding. I've never had to wait more than a day for feedback from support, and they're very interactive with our users as well as our analysts.

Positive

I did not previously use a different solution.

A team investigated other platforms before choosing IRONSCALES. We settled on it because it is interactive and user-friendly for certain types of analysts. The fact that there are always ongoing updates and products being added is a bonus.

My advice to others looking into using IRONSCALES is to exercise caution as to how the platform works. Everything is not obviously as it seems. The product uses AI and the information that's provided. Looking at it at face value shouldn't be your final classification. It's a tool that we use to better our understanding of email security, and it's not a one and done situation. People starting to use IRONSCALES should really look into understanding email security and using it as a tool becomes a necessary part of proceeding with email security.

IRONSCALES is a really good platform, and it's ever-growing. This is just the start of what they are able to do with the AI, especially with Themis, and also the way it's structured, and that overall understanding of email security and how certain events should be handled.

I rate IRONSCALES 9 out of 10.

IRONSCALES provides email security for my previous customer environment, which is a big inventory customer. The entire email security is monitored by IRONSCALES. It monitors all activities including invoices, customer domain communications, phishing emails, suspicious emails, and VIP member communications. We investigate suspicious mails in IRONSCALES.

The best features of IRONSCALES are that most alerts are validated through AI, which reduces the fatigue of alerts that need to be worked on by the team handling the alerts investigation part. Only a small number of alerts require manual review.

IRONSCALES is a useful tool that detects every malicious file delivered to our customer domain emails. It safeguards against phishing emails and malicious files that are inbound to our customer services.

IRONSCALES reduces processing time significantly. There can be multiple alerts where the team handles and reviews them. The SOC team participates in bridge calls to investigate all emails delivered in the sandbox, and if required, we keep them in junk or contaminate them after analysis.

The user interface could be more attractive to users. The UI is not brightened or appealing. Having a more user-friendly UI would make it easier to identify features and options when using the tool.

I have used IRONSCALES for two years.

IRONSCALES is a stable tool.

Customer support for IRONSCALES was great.

Positive

I would advise that it is a necessary tool when comparing to other email security tools. If we are getting it for a lesser quotation, organizations should have this AI-automated email security which saves time and money.

The automated alerts generated are integrated into our SIEM solution. We can create logics according to our investigation in our SIEM solution from logs pulled from IRONSCALES to SIEM solution via API call. We monitor all triggered alerts in the same solution.

The user interface could be more user-friendly and attractive to use. I rated this solution 9 out of 10 overall.

The main use cases for IRONSCALES demonstrate its artificial intelligence capabilities because it utilizes AI to detect phishing and has specialized engines for detecting both phishing and spam, making it very efficient at these tasks.

The automated incident response helps my security team by automating many tasks that only require console review to check incidents. If they notice something suspicious or potential AI false positives, these cases are minimal.

For example, if people in the organization receive 50 suspicious emails in a day that are detected by IRONSCALES, maybe one or two might be false positives. The interesting aspect is that with the intervention of the security analyst's human knowledge, they can contribute to this intelligence. It creates a merger of AI intelligence and human intelligence where the model is continuously learning.

What I appreciate most about IRONSCALES is that it detects not only actual phishing attempts but also potential preliminary phases of phishing. Some attackers plan their strategy by sending non-offensive emails designed to capture users' attention. IRONSCALES excels at analyzing the intention, not just the content itself, but the sender's attempt to gain user attention. When attackers employ social engineering and prepare their real attack, IRONSCALES effectively detects these intentions. This is a particularly valuable feature.

There are areas that could be improved with this product. Regarding the Spanish language awareness training, while they are producing good content, it appears to be initially produced in English and then translated to Spanish. Though this isn't problematic for our users, the content could be updated more frequently.

I have ongoing experience using IRONSCALES.

I would rate their technical support as very good, as they respond promptly when my team opens a ticket.

Positive

While I don't specifically oversee the pricing details, I understand that IRONSCALES is in the range of similar solutions while offering better results.

The company name is Silicon Valley Technology, Inc. My review rating for IRONSCALES is 10 out of 10.

The tool runs on an API, and it communicates with all of our users' inboxes. The tool is just for keeping spam in check and, more importantly, to deal with the dangerous phishing emails out of our users' hands. It can see if it lets something pass and it goes to the inbox, then after 20 minutes, if it gets new information that it is a potentially dangerous email, the solution will yank it right out of the user's inbox.

With the tool, users can report things that they think are phishing activities, meaning it allows IRONSCALES to take another look at it and then determine the final disposition, which is a good feature. More importantly, we just kind of let it run and do its thing, and then the tool comes up with two to three possibilities. If something is clean, we never hear from IRONSCALES. If it is spam, it will be categorized as spam. If an email is considered to be a phishing email, it'll categorize it as a phishing activity. If an email is spam or comes under the phishing category, the tool will pull the email out of the inboxes so that it is not available.

I think the tool can continue to hone the product to ensure the detections are accurate. The tool also involves some crowdsourcing. It is a pretty good product. We use IRONSCALES in conjunction with Proofpoint since the latter tool is an email gateway. Between IRONSCALES and Proofpoint, the idea of filtered security solutions, especially with emails because phishing is so dangerous, has kept us from harm for five-plus years.

I have been using IRONSCALES for three years. I am a customer of the tool.

It is a totally stable solution. The tool has never had downtime.

I can't rate the support of IRONSCALES because our support comes through the company we got the tool from, and it is called Constant Edge. Constant Edge is a reseller of the tool to SMBs because IRONSCALES doesn't want to get caught up with just 100 user licenses since it is just too small for it to worry about. Constant Edge has done an incredible job of providing support to our company. Constant Edge also provides our company with Proofpoint.

The company we get IRONSCALES from is not big enough to sell the product directly.

The solution can be deployed in a day.

One person can deploy the solution.

My organization got the tool from Constant Edge out of the UK, and they came in and set it all up for us.

The email security management costs take up a large portion of our IT security budget because everybody needs security in our company. We really have to watch out for trying to keep our users in a safe zone.

The tool is affordable. Our company has a pretty tight IT budget. We had to make room for IRONSCALES in our budget, and we have kept it since, after three years, we plan to renew it. The tool is not very cheap, but it is affordable. It is much cheaper to have the tool than to have a phishing email get clicked and see your whole network being brought down. On a scale of one to ten, if ten means it is an expensive tool, I rate the product's price as six or seven.

The AI engine is, like anything else that is similar to machine learning, so it is going to get smarter as time goes on. In our company, we put a lot of time into the tool to see if it detects something that is clean, making sure that it understands that it was not a malicious email. The tool has become pretty darn smart at this point.

If there is a situation where I need to manage the tool, I would say that there is an AI engine for the product, Themis Copilot, for Microsoft Outlook. When the tool pulls an email, it says that even though it pulled it out, it cannot give it a final disposition, so I won't know if it is spam or phishing activity. In that case, you need to go in and manually let the tool know that a particular email is spam, is associated with some phishing activity, or is clean. The tool tries to improve the accuracy of the machine learning and AI aspects. Occasionally, the tool requires some manual intervention.

IRONSCALES has gotten smarter as our company has trained the machine learning and improved the AI engine, and it has reached to the point now that it is set and forgotten. We visit the tool maybe once a week just to make sure that there are no emails that haven't given a final disposition.

I recommend the tool to others, along with Proofpoint.

I rate the tool a nine out of ten.

The solution captures a bit more of the unknown, quantifies it, and applies intelligence to it to pick out and stop a lot of phishing emails that come through. The solution improved our response to phishing attempts. IRONSCALES has a virtual assistant and some AI intelligence that's applied to it. That was the main differentiator between IRONSCALES and Microsoft.

The solution's AI automation clearly identifies phishing emails and gives you an overall indication of why it found the mail to be malicious. It does the whole analysis for you to see why the email was deemed a phishing email. The solution's response time is better than that of our previous tool. The solution's user interface is pretty straightforward and user-friendly.

IRONSCALES should bundle more features together instead of separating them and charging additional licensing fees. The solution’s scalability could be improved.

I have been using IRONSCALES for one year.

I rate the solution a seven out of ten for scalability.

We did a side-by-side comparison of Microsoft and IRONSCALES. Microsoft generally has a lot of features, but for me, Microsoft is behind in terms of the more advanced and smarter solutions. I wouldn't recommend using Microsoft as a main filter for email protection. IRONSCALES performed better in terms of what it was catching than Microsoft.

The solution’s initial setup was straightforward.

IRONSCALES is an expensive solution. The solution has certain add-on features, and its pricing depends on how you scale it. You have to pay additional licensing fees for some specific features.

IRONSCALES has a pretty smart technology, which is different from the traditional gateway kind of technology.

Overall, I rate the solution an eight out of ten.

We mainly use the solution for email security and threat mitigation through that vector, which could be phishing, malware, and malicious attacks. It allows us to inspect emails and enables end-users to report and quarantine potential threats in a sandbox, which is very valuable. The response time is imperative for us, a notification gets to me as the tech very quickly, and I can mitigate any issues we may have.

We have IRONSCALES deployed over two companies. The leading company owns the account, and we have two companies under that: Mason Law and Planning Company and Warrior Insurance. They're in the same building on different floors, but both companies are situated with IRONSCALES at all endpoints for all users. We don't have any off site users, with the occasional exception. The vast majority of our staff work on-site. We don't have anyone working from outside the office. 

We spend significantly less time dealing with email issues. For example, the routine process of determining if an email is a threat or not is now taken care of in a minute or less, instead of up to five or ten minutes. This adds up and results in a lot of time saved. This product also makes our end-users feel comfortable. Our employees are more confident in their email abilities because of the training and their months of experience using this program. 

The report function through Gmail is probably the most valuable feature. The next most valuable features are simulation and training.

I would say IRONSCALES is probably one of the best products of its class that I've seen. I've seen some other companies that offer similar technology and a similar product, where the training is an afterthought or add-on. IRONSCALES do offer premium training, but the regular training is very well-rounded. The integration of excellent reporting, single sign-on, and freedom from logins and passwords for end-users makes this a fantastic product. 

The AI and machine learning capabilities of the solution are significant. I have a small background in AI and machine learning, and we discussed how those functions would operate in our system with IRONSCALES. I've never seen a machine learning program work as effectively and often as this one. There aren't as many hitches as I would expect to find in a solution of this kind.

If I had to put a number on it, I would say 95% of the time, it works flawlessly. The remaining 5% of the time, a tech like myself would have to intervene, but in my opinion, that's an excellent standard to have. 

The automated detection and response capabilities have reduced the time we have spent manually reviewing emails and events a hundredfold.

I think the ability to customize offered by the solution works well. 

The solution has allowed me to spend more time on other activities. It's sped up our business process, and our response time has gone from five to ten minutes to less than a minute. Sometimes even more time is saved, especially in the last couple of months. The first week we implemented the solution, the saved time wasn't as noticeable. Three or four months down the road, I can see we have saved many hours, if not more. 

I would love to see the indication of compromise and how the solution utilizes open source resources. It would be good to see that included in the paid versions. It would be a small addition but add a lot of value for clients. 

We have been using the solution for nine days.

I'd say 98 to 99% time, the product is up and running. It has minimal downtime, if at all.

The solution is entirely scalable. We have up to 50 licenses at the moment. It wouldn't be difficult if we needed more than that. I would say it's perfect as far as scalability. 

I would give the technical support a nine out of ten only because when we did contact support for the unprotected mailboxes, my contact was out on vacation. That happens, but the backup solution was another customer service rep who said we should re-do the whole integration process. I wasn't satisfied with that, as I didn't want to restart the program, break it, and make more work for myself. That was my one issue with the customer service. 

Positive

We tried other solutions. We've had a secure gateway, and tested traditional VPNs and a few other options. The good customer service is the main reason we moved to IRONSCALES. They are excellent at ensuring everything is up to date and working, and the follow-ups are phenomenal. Next, I would say the technology integrates well with our office setup. Because it's a SaaS product and lives in the cloud, it doesn't affect other things like a gateway. Gateways can influence IP addresses, and printers don't like change. We previously had a lot of compatibility issues with other products because they would affect the network, whereas IRONSCALES sits on top of it, in a sense, which fits in well with our use case.

It was more straightforward than the other Google Workspace app installations I've carried out. I also received advice from our other company. I would say that IRONSCALES goes above and beyond to make sure everything is connected correctly. When we first implemented the solution, it showed our emails as unprotected for a while, but the program was functioning correctly and checking emails. That was resolved within a couple of weeks and probably would've been much faster, but my customer support contact was out on vacation for about seven days, which is fine. Everything got taken care of, which was to my liking. 

I wouldn't necessarily say the system requires maintenance. I check that everything is working correctly on a daily basis, and that improves with time. As the ML algorithm understands the company functions better, the automation improves significantly. Initially, more manual labor was involved, but still less than if you didn't have IRONSCALES. After a month or so, the automation was functioning well and required less involvement from me. Now it requires at most a few minutes of my time every day.  

I implemented the solution with the help of an IRONSCALES rep. 

When it comes to cybersecurity it's hard to pinpoint an ROI, but I would say that, based on what this product has done for our company, there's no way it hasn't saved us money.

We pay $3000 plus a little more a year for the number of employees we have, and we're not even that big. The solution is at the higher end in terms of cost. It's not the most expensive product, but I would say it's worth the price if you have a high volume of email traffic. In our case, the solution has inspected over 162,000 emails between three and four months. It saved us a lot of time and money. It's a worthwhile investment because a bad actor only has to succeed once; we must defend against everything in our business. IRONSCALES offers a sense of security and confidence from being well protected. 

We looked at other gateways like Perimeter 81, and other antivirus software, but IRONSCALES is more of a dedicated email security tool we use in conjunction with our antivirus. 

The AI/ML program that IRONSCALES has is much more efficient and effective than any other ML program I've seen or experienced. The UI is very user-friendly and looks good, which aids in quicker information access. I would say a lot of the alternatives are very clunky; I wouldn't quite say MS-DOS, but Windows 98 style, old and blocky.

I would rate this solution a ten out of ten. I feel like nobody ever gets perfect scores, but the downsides are minimal and quickly resolved, so the product is quite remarkable.

The solution is only situated for employees with specific email addresses. Apart from that, it's a private cloud deployment. 

The biggest lesson I've learned is that even with my level of expertise, there are still emails that I probably wouldn't have noticed checking them manually.

We needed it for mail relay and phishing awareness training.

We use the IRONSCALE solution on all our email platforms, including mobile apps, web access, and Outlook on computers.

Our deployment model is hybrid. Our private environment is in Microsoft 365 and we also have SaaS through BDO.

Since we are using Microsoft 365 and everybody is basically connected to that infrastructure for their emails, all we had to do was implement IRONSCALES into 365 and that covered my whole organization. There are about 175 email boxes. We expect that to at least double that amount in the next couple of years

There is buzz around phishing awareness training. When I make a campaign, all of a sudden people in our organization are talking, thinking, and wondering about it. Therefore, it keeps people on their toes. That is perfect because it does exactly what we want it to do. 

Everything seems fine with the mail relay. I can't complain.

Monthly, we have been using the campaigns. Besides that, the actual work that it does as a mail relay, protecting our email infrastructure, is valuable. Also, the ease of integration into Microsoft 365.

The artificial intelligence and machine learning capabilities of the solution are very important because we don't know what we don't know. The fact that I can use the community for artificial intelligence based on other case studies is perfect. Why not learn from other people's experience?

We use the AI to determine if an email is phishing or dangerous.

For email security effectiveness, I would give it 8 out of 10. As far as the mail relay is concerned, we haven't had major attacks, concerns, or phishing emails. So, we can't complain. Thank God everything has been working fine, but we never really tested IRONSCALES to its fullest. We have been using its automatic features where it gives me advice that some email might be phishing and so on. As for that, it does work really well. However, I can't tell you that it is battle-tested. That is why I am not giving it more than 8.

As far as training awareness, I would give it 6.5 to 7 out of 10. In regards to phishing awareness training, I have been having some issues with the Hebrew aspects of IRONSCALES since most of our company's employees need the Hebrew language, and the phishing awareness in Hebrew is so-so. In addition, the biggest problem that I have is with people who fail since most of them just don't do the training, and IRONSCALES doesn't have some sort of reminder feature.

When someone fails, if they open up the email and push on the link, then they get to a dedicated website which is supposed to give them basic information, e.g., what they could have noticed, then some sort of link to an instructional video, and in the end, training. I just noticed that 95% of the people who click on the email are flunking. For the awareness training, they don't continue to watch the video or do the training. Instead, they just exit the screen and move on.

I would like it if IRONSCALES had some sort of reminder mechanism, meaning IRONSCALES knows if a user completed the training or not. As long as it hasn't been completed, it keeps reminding every so often, alerts the manager, etc. Right now, it is all in the hands of the employee, and not all of them continue the process, which is a shame.

I would like to have more of an ability to intervene in the landing page for phishing awareness, e.g., more design options, change logos, color, and fonts. Right now, it is a template.

We have been using IRONSCALES since February 2022.

I would rate the stability as 10 out of 10. It is always up and running. I have never seen downtime.

It requires someone from my help desk team to keep watch on the logs and see if there are any alerts or events. Besides that, there isn't much maintenance.

It seems to me that it is really easy to scale up or down, meaning I just need to add licenses. 365 is already implemented. So, as long as I just add email boxes, they are automatically within the system. Therefore, I just need to be up to par as far as licenses are concerned. It scales within seconds.

Since I have it as a SaaS, I never really need to talk to IRONSCALES. I just talk to BDO who just does whatever needs to be done. I would rate the support from BDO as nine out of 10.

Positive

My organization didn't use another solution before IRONSCALES.

The initial setup was straightforward. It took 10 minutes and then the product was up and running.

It provides an easy installation. It is a matter of minutes, which makes a big difference. Imagine the difference if you had to install a server or physical product. This solution is all software.

We started as a PoC. We implemented IRONSCALES as a trial version into our 365. From that point, we purchased it, then it became a non-evaluation version.

The deployment took one person and someone from IRONSCALES.

We realized the solution's benefits within the PoC.

IRONSCALES has enabled us to spend more time on other activities because it is just install and forget. Our main goal was not to deal with it, meaning I can implement it and it does what it's supposed to do without a lot of intervention on our side unless some sort of case or event happens. That is exactly what it did. I have a fully functioning mail relay that basically takes care of itself. Obviously, we have to view all the logs and everything, and that is something our SOC also does. It just takes a burden off my shoulders. I can let it run.

If we can prevent a phishing attack or ransomware attack, then the ROI will be immense. At this point in the game, when everything is okay, I can't really see an ROI. However, when time comes, it will be there.

They are pretty much the same as all the other competitors in the market.

There is an installation cost. Since we have this as a managed service, we pay for licensing and the managed service itself. Other than that, there are no additional costs.

We were looking for some sort of platform that we could use to do phishing awareness training. We were looking into Cisco and different solutions. Eventually, we came upon IRONSCALES because we also needed a mail relay. This actually gave us both solutions in the same spot.

We evaluated Cisco's trainee portal and Fortinet FortiMail. In the end, we went with IRONSCALES because it was both products in one solution. Another reason being that we wanted a managed solution. Our provider in Israel, BDO, is an official retailer of IRONSCALES. They work with IRONSCALES and offer this service as a service. Therefore, we got a managed IRONSCALES solution.

Microsoft 365 offers standard anti-phishing functionality, but nothing beyond that.

Try it. It takes seconds.

I would rate the product as nine out of 10.

Phishing emails and spam are challenges companies of all sizes face. IRONSCALES acts as a second layer on top of the Microsoft mail relay we use. It scans every email coming into our organization and automatically checks the validity. We also check manually in some cases.  

While we mainly use it for the mail relay, IRONSCALES can also act as a phishing campaign simulator. We can send simulated phishing emails to our colleagues to test their readiness. 

Our entire organization uses IRONSCALES across many locations worldwide in South America, Asia, Europe, and North America. All sites use the system to protect the mailboxes and just act as a mail relay. We have about 8,000 users.

The biggest benefit is that we get fewer phishing and spam emails, so using IRONSCALES has made our environment much safer. While I wasn't here when they deployed the system, I believe they saw benefits right away.

The feature I use the most is the main relay. IRONSCALES was designed around that, but phishing simulation management is also a handy tool that I don't see often. Combining these features enables a user to be more comfortable with the simulations. 

For example, one of IRONSCALES' features is an Outlook extension that lets you report phishing emails and other stuff that looks malicious. In our training, we encourage our colleagues to click this button to report as many emails as possible. Reporting suspicious emails should become part of our employees' everyday routine. The training campaign usually helps us catch our colleagues outside their comfort zone to see if they're paying attention to all these suspicious emails they receive.

AI and machine learning are essential components of the product. It automatically can identify phishing emails and classify them according to several factors. I'm not sure how it works, but there's a ranking system that ports onto every sender and email we receive. This artificial intelligence can conduct a thorough search that's sometimes better than humans. 

The automated detection and response feature handles most of the job. I only need to classify a few emails manually each day. Artificial intelligence does everything else automatically for me. Without this technology, we would have to sort 1,000 emails each day manually. IRONSCALES cuts that down to maybe 50.

The IRONSCALES mobile app is convenient to use outside working hours. It's not my primary tool, but it's nice not to need to open your laptop whenever you would like to classify something. You can use the app to check up on the system. 

There's room for improvement in the campaign management. IRONSCALES has many built-in templates that I use, but I can also build templates from scratch. However, the interface for creating custom templates needs to be updated. 

I've already contacted IRONSCALES with some features I'd like to see, and they've promised to implement them. For example, let's say I send campaigns using customized tags assigned to each user. If I would like to send a campaign to my colleagues in China, I would send the campaign using a tag that says China. In many cases, new users don't have tags. 

I asked IRONSCALES to add the ability to send campaigns to colleagues that don't have any tags. They promised this feature would be available during the next update.

I've been using IRONSCALES since I started working here at my current company about a year ago. 

IRONSCALES is stable. I can't think of any outages. 

We can grow as much as we want. We are growing right now and adding new sites to our company.

I rate IRONSCALES support 10 out of 10. They provide support in less than 24 hours. I have never had a problem with them, and they always solve my issues. 

Positive

The company previously used Microsoft ATP, which required a lot of manual work. I was told that they used to spend a lot of time manually sorting the emails by phishing, spam, etc. The company switched to IRONSCALES because they wanted something to help automatically sort stuff and get faster results.

Though I wasn't here when IRONSCALES was deployed, I saw the system requirements and a basic guide to implementing the system. It was straightforward. 

After deployment, it doesn't require much maintenance. It does everything automatically as well. IRONSCALES supports older versions of Exchange and local Exchange servers that require manual updates of the add-ons they use to protect the mailboxes, but we don't use those services.

I rate IRONSCALES nine out of ten. Some improvements to the campaign management might bring it up to ten. It's a great system. I would recommend it if you only need a mail relay. On top of that, there are additional advantages of using the system, like the campaign manager that complements the mail relay. 

We are using it for email security. Microsoft's built-in spam and phishing filter was completely inadequate. We were looking at tackling spear phishing and phishing in general for the organization, as well as educating our staff through targeted phishing campaigns and training.

Our email provider Microsoft doesn't supply anti-phishing functionality as part of our licensing with them. They provide antivirus and anti-spam. We don't pay for their advanced protection features.

In terms of deployment, it is a SaaS platform. It connects to the Office 365 API.

It has helped immensely because it has gotten rid of malicious links and malicious attachments that have been targeted at our different staff members. It has definitely protected us on more than one occasion.

Their integrated approach of combining email security and employee awareness training is excellent because the training is a reminder for staff to continually be on their feet and look out for the ever-changing landscape. It also lets us know who has been trained, who hasn't been trained, and what they're like. It integrates a risk ratio for all our employees.

Its artificial intelligence and machine learning capabilities are very important because I don't want to have to manage 24/7. Having the AI to do a lot of the work for me is invaluable.

Its automated detection and response capabilities are excellent. It does a wonderful job. They provide all the stats on what it has done. It gives you information about how much time is saved and all that kind of good information.

Its automated detection and response capabilities have massively decreased the time we spend manually reviewing email events. Since May, it has taken care of 170 hours. So, it has saved 88 hours per analyst.

It is very good in terms of the customization of the automated detection and response capabilities. It is granular, and you can adjust it however you want. If it is too high, you can turn it down. If it is too low, you can turn it up.

Their anti-phishing platform is absolutely fantastic. The automated AI piece is amazing, and their technical support is fantastic. 

The simulation and training piece could be improved by having more granularity in terms of scheduling how campaigns are run and allowing people to directly take the training rather than having to go through an official campaign. That's not available yet.

I have been using this solution for about two years.

It is rock solid on any issues with stability. It just works great.

It is deployed for all active mailboxes. It is deployed across our entire organization. We use Office 365 for our email, and it is deployed to that.

As far as I know, it wouldn't have any problems with scalability. You pay for however many accounts you want it to monitor. I'm sure they would know better than me if there is a top end, but I doubt it.

Their support is excellent and super responsive. You get a real person right away. I would rate them a nine out of ten.

Positive

We did not use any other solution previously.

It was straightforward and easy. You just use an account with the proper information in Office 365, and all the rest is done on the back end.

We might have bought it through Logicalis. They're good. We've used them for many projects from hardware and software and everything in between.

For deployment, it was just me. I'm the administrator. It is really simple. We had to just count the proper permissions and select the accounts we wanted to monitor, and that's it. It does all the rest in the background.

It requires very low maintenance. Every now and then, I adjust the automated AI score. Usually, I adjust it down as the system learns or gets better. I adjust it as I get more confident that it is not going to catch anything that it shouldn't. They did change something recently around how it integrates with Office 365. So, I just had to redo that integration. It was the same process as the setup. It was super simple. That's all in the last two years.

We have absolutely seen a return on investment. It has automatically caught malicious links and emails sent directly to our fiscal department, which has theoretically saved us a big deal.

As compared to everything else we looked at, it was good. It was the best value for the dollars.

We've looked at a few. We looked at Agari, and we looked at Darktrace. Darktrace's sales team was pretty scammy. It was incredibly expensive. It was way out of our price range. Agari seemed fine, but it wasn't quite as polished. It didn't seem as polished and didn't fit our needs as well.

My advice would be to go for it. Its value is pretty clear right away. Its value becomes immediately clear as soon as it catches the first thing that is malicious and that would've gone through Microsoft's default filter.

I would rate it a ten out of ten.

The main challenge that we wanted to solve with this solution was the email-based attacks. They are a major threat for our staff and customers. So, we are using this solution for protection from threats and remediation of phishing emails. We also use it for simulation to train our staff to recognize a phishing email. For those users who click on the phishing email, we provide the training content to improve their awareness.

Its artificial intelligence and machine learning capabilities are really important and helpful in saving time. It saves a lot of hours, and we don't have to do a manual review of each incident or email. Without IRONSCALES, we will have to rely on our staff to report emails that might be malicious, but you can't always depend on the staff to do that.

It is an important part of our security infrastructure. It gives us confidence that we are protected from email threats.

It allows us to report an email as spam. If our staff suspects an email to be malicious, they can report it as spam.

It is helpful in assessing the awareness level of our staff. We compare the metrics of every new phishing campaign with the metrics of previous campaigns. We also determine if the awareness training we are conducting for our staff is effective. We can see all the data. If a lot of people have clicked on the phishing email, we get to know that we need to step up our efforts on phishing awareness.

Its automated detection and response capabilities save a lot of time. We are a financial institution, and we get quite a lot of emails. If someone has to manually review and investigate each alert or email event, it would be a full-time job. On a daily basis, it would take more than three hours of analysis work. A financial institution like ours receives quite a lot of emails from customers and internal staff, and IRONSCALES saves a lot of our time. We don't have to dedicate someone to manually review alerts or emails.

The time that we have saved by not having to manually review each incident can now be used to focus on other tasks. 

It has also helped reduce the number of people or analysts needed to deal with and respond to email incidents.

It allows us to customize the automated detection and response capabilities. Each email that IRONSCALES detects has a confidence level rating. For example, it has 90% or 70% confidence in a phishing email. We have the ability to configure the threshold for automatic remediation. For example, we can say that for emails with a 70% or higher confidence level, it can automatically remediate, but for emails with a 69% confidence level, it should raise an alert, and we'll manually investigate. It gives us the ability to raise or reduce the threshold.

AI-driven phishing detection and incident remediation are valuable. It saves time from having to do manual analysis and investigation, and we also get alerts for phishing emails.

Even though they have been continuously improving it, it is not 100% there. We have had a few incidents where legitimate emails were getting blocked, and we had to manually remove those emails from quarantine. It is 90% effective or accurate because, on rare occasions, some emails from customers were not getting delivered. In one or two instances, their emails got blocked by IRONSCALES, and we had to manually remove the emails from quarantine. I would like them to improve their algorithm to avoid flagging genuine emails as malicious. I would also like to be able to whitelist certain email addresses. I'd love to be able to whitelist a particular customer.

It is good for user awareness, but I would love to have more content for our staff that is related to not only phishing but also general awareness. I don't know whether it is a functionality that is already available and we have not subscribed to it, but I would love to be able to send awareness emails to staff on different topics related to email security. They should provide us with more security awareness content. Based on the current trends in the security landscape, they can give us security content in emails that I can easily share with my staff to keep them aware.

I use IRONSCALES' mobile app. The mobile app doesn't notify me about the incidents, but I get email alerts instantly, which are helpful when I'm on the move. I get them a lot on my mobile. I get notifications in the email that an incident has been automatically remediated. If an email doesn't have the specified threshold level, I can quickly log in to the IRONSCALES app and do a manual authentication. It helps a lot when I'm on the go, or I don't have my PC with me. Email alerts are fine with me, but it probably would be good to have push notifications from the mobile app. If someone doesn't have an email client on their mobile, they can get notifications through the app.

I have been using this solution for just under a year. I joined the department in September, and I started using the product in September last year.

It is a cloud-based solution. So, I expect it to scale well regardless of the number of users we have. We don't expect to experience a drop in performance. Cloud-based solutions generally scale well.

We use it for every email account we have. We currently have between 700 to 800 users, and it is being used for all our departments, users, and group mailboxes.

We definitely have plans to increase its usage. We are currently growing, and we are expecting a significant addition to the number of users in Q3 and Q4.

We haven't had an issue so far. So, we haven't contacted their support. During implementation, we got full support from them, and we loved the support we got. We have no issues with their support. I would rate them a nine out of ten.

Positive

I am not aware of any other solution being used previously. IRONSCALES was already in the company when I joined.

It was already in place when I joined. In terms of maintenance, it doesn't require any maintenance from our end. All we have to do is integrate our Outlook email server with IRONSCALES, and that's it. 

We have definitely seen an ROI. The amount that we pay for licenses is definitely way less than what we would pay if we are hit by a ransomware attack. So, it definitely provides a return on investment.

We were able to realize its benefits immediately after the deployment. We started analyzing emails and getting alerts right from the time it was activated. You have to do a bit of tuning for the threshold, but the effect was immediate. We didn't have to wait even a bit for it to be effective.

Considering the value it provides, it is definitely worth the cost. We don't have to do manual analysis and remediation of phishing emails, which saves us a lot of hours.

Its licensing is based on the number of users being supported and the number of email addresses being protected. I'm not aware of any additional costs.

I would definitely recommend the product. It is definitely worth the investment.

I would rate it an eight out of ten because I would like to have some of the features. We don't have them currently, and I'm not sure whether these features are available with an additional license.