Systems Engineer at a tech services company with 10,001+ employees
Real User
Top 20
2024-09-11T19:39:36Z
Sep 11, 2024
I think maybe on the side of the awareness training, the tool can improve a little more information and have some other languages since even though English is good, Spanish is not so good. The tool can improve the content in Spanish and other languages. The tool supports 15 to 16 languages, but the content it uses in the training in Spanish has certain limitations.
Senior Systems Engineer at Accurate Corrosion Control, Inc.
Real User
Top 5
2024-08-12T18:22:43Z
Aug 12, 2024
I think the tool can continue to hone the product to ensure the detections are accurate. The tool also involves some crowdsourcing. It is a pretty good product. We use IRONSCALES in conjunction with Proofpoint since the latter tool is an email gateway. Between IRONSCALES and Proofpoint, the idea of filtered security solutions, especially with emails because phishing is so dangerous, has kept us from harm for five-plus years.
IRONSCALES should bundle more features together instead of separating them and charging additional licensing fees. The solution’s scalability could be improved.
Systems Administrator at The Public Library of Cincinnati & Hamilton County
Real User
2022-06-29T19:06:00Z
Jun 29, 2022
The simulation and training piece could be improved by having more granularity in terms of scheduling how campaigns are run and allowing people to directly take the training rather than having to go through an official campaign. That's not available yet.
Information Security Officer at a financial services firm with 201-500 employees
Real User
2022-06-28T05:55:00Z
Jun 28, 2022
Even though they have been continuously improving it, it is not 100% there. We have had a few incidents where legitimate emails were getting blocked, and we had to manually remove those emails from quarantine. It is 90% effective or accurate because, on rare occasions, some emails from customers were not getting delivered. In one or two instances, their emails got blocked by IRONSCALES, and we had to manually remove the emails from quarantine. I would like them to improve their algorithm to avoid flagging genuine emails as malicious. I would also like to be able to whitelist certain email addresses. I'd love to be able to whitelist a particular customer. It is good for user awareness, but I would love to have more content for our staff that is related to not only phishing but also general awareness. I don't know whether it is a functionality that is already available and we have not subscribed to it, but I would love to be able to send awareness emails to staff on different topics related to email security. They should provide us with more security awareness content. Based on the current trends in the security landscape, they can give us security content in emails that I can easily share with my staff to keep them aware. I use IRONSCALES' mobile app. The mobile app doesn't notify me about the incidents, but I get email alerts instantly, which are helpful when I'm on the move. I get them a lot on my mobile. I get notifications in the email that an incident has been automatically remediated. If an email doesn't have the specified threshold level, I can quickly log in to the IRONSCALES app and do a manual authentication. It helps a lot when I'm on the go, or I don't have my PC with me. Email alerts are fine with me, but it probably would be good to have push notifications from the mobile app. If someone doesn't have an email client on their mobile, they can get notifications through the app.
Information Security Analyst at a sports company with 1,001-5,000 employees
Real User
2022-06-23T20:28:00Z
Jun 23, 2022
I speak to the customer success manager regularly, and he does update me on what they're working on. They're always releasing new updates. There is a feature called Account Takeover, which isn't what I want it to be able to do. I know that they're working on that, but when they first started the Account Takeover feature in incident management, it didn't have much information. It didn't have any usability to it. I already had tools in place that were better. Some elements of the Phishing Awareness campaign need to be improved. When you're creating a campaign, the visibility over some of the user interface options needs to be improved. They're aware of that, and they have worked on some of them. It is by no means bad, but it could be slightly better. There are no additional features that I would like to be included in the next release.
I would love to see the indication of compromise and how the solution utilizes open source resources. It would be good to see that included in the paid versions. It would be a small addition but add a lot of value for clients.
IT Manager at LAVI Light Rail Operation & Maintenance
Real User
2022-06-22T20:56:00Z
Jun 22, 2022
As far as training awareness, I would give it 6.5 to 7 out of 10. In regards to phishing awareness training, I have been having some issues with the Hebrew aspects of IRONSCALES since most of our company's employees need the Hebrew language, and the phishing awareness in Hebrew is so-so. In addition, the biggest problem that I have is with people who fail since most of them just don't do the training, and IRONSCALES doesn't have some sort of reminder feature. When someone fails, if they open up the email and push on the link, then they get to a dedicated website which is supposed to give them basic information, e.g., what they could have noticed, then some sort of link to an instructional video, and in the end, training. I just noticed that 95% of the people who click on the email are flunking. For the awareness training, they don't continue to watch the video or do the training. Instead, they just exit the screen and move on. I would like it if IRONSCALES had some sort of reminder mechanism, meaning IRONSCALES knows if a user completed the training or not. As long as it hasn't been completed, it keeps reminding every so often, alerts the manager, etc. Right now, it is all in the hands of the employee, and not all of them continue the process, which is a shame. I would like to have more of an ability to intervene in the landing page for phishing awareness, e.g., more design options, change logos, color, and fonts. Right now, it is a template.
I really don't see anything to be improved upon just yet. We haven't gotten into the training, although we do plan on using it. As far as email security, as far as community support, I haven't really found anywhere that I feel as though I could comment on making a change for the better. The only thing that I could say is that some of the reporting features could be better. If I could have just a separate section for specific reports or have the ability to maybe create reports and put them down that left-hand navigation to be able to access them a little bit easier would be great.
Digital Risk Intelligence Partner at a comms service provider with 1-10 employees
Real User
2021-08-16T16:11:01Z
Aug 16, 2021
The integration with Google Suite needs to be better. it's something they can work on. The pricing is a bit high. In the future, I'd like to see digital exposure of the users, such as credential exposure, or this kind of feature.
IRONSCALES secures against business email compromises, phishing, and email-based attacks. Protects Microsoft 365 users by enhancing spam filters, automating threat mitigation, and providing phishing awareness training.
Deploy IRONSCALES to inspect, report, and quarantine threats with a sandbox feature, and run simulations to train staff worldwide, adding an extra security layer. Communicates via API to ensure ongoing email security. Offers threat-sharing capability, AI, easy setup,...
I think maybe on the side of the awareness training, the tool can improve a little more information and have some other languages since even though English is good, Spanish is not so good. The tool can improve the content in Spanish and other languages. The tool supports 15 to 16 languages, but the content it uses in the training in Spanish has certain limitations.
I think the tool can continue to hone the product to ensure the detections are accurate. The tool also involves some crowdsourcing. It is a pretty good product. We use IRONSCALES in conjunction with Proofpoint since the latter tool is an email gateway. Between IRONSCALES and Proofpoint, the idea of filtered security solutions, especially with emails because phishing is so dangerous, has kept us from harm for five-plus years.
IRONSCALES should bundle more features together instead of separating them and charging additional licensing fees. The solution’s scalability could be improved.
The simulation and training piece could be improved by having more granularity in terms of scheduling how campaigns are run and allowing people to directly take the training rather than having to go through an official campaign. That's not available yet.
Even though they have been continuously improving it, it is not 100% there. We have had a few incidents where legitimate emails were getting blocked, and we had to manually remove those emails from quarantine. It is 90% effective or accurate because, on rare occasions, some emails from customers were not getting delivered. In one or two instances, their emails got blocked by IRONSCALES, and we had to manually remove the emails from quarantine. I would like them to improve their algorithm to avoid flagging genuine emails as malicious. I would also like to be able to whitelist certain email addresses. I'd love to be able to whitelist a particular customer. It is good for user awareness, but I would love to have more content for our staff that is related to not only phishing but also general awareness. I don't know whether it is a functionality that is already available and we have not subscribed to it, but I would love to be able to send awareness emails to staff on different topics related to email security. They should provide us with more security awareness content. Based on the current trends in the security landscape, they can give us security content in emails that I can easily share with my staff to keep them aware. I use IRONSCALES' mobile app. The mobile app doesn't notify me about the incidents, but I get email alerts instantly, which are helpful when I'm on the move. I get them a lot on my mobile. I get notifications in the email that an incident has been automatically remediated. If an email doesn't have the specified threshold level, I can quickly log in to the IRONSCALES app and do a manual authentication. It helps a lot when I'm on the go, or I don't have my PC with me. Email alerts are fine with me, but it probably would be good to have push notifications from the mobile app. If someone doesn't have an email client on their mobile, they can get notifications through the app.
I speak to the customer success manager regularly, and he does update me on what they're working on. They're always releasing new updates. There is a feature called Account Takeover, which isn't what I want it to be able to do. I know that they're working on that, but when they first started the Account Takeover feature in incident management, it didn't have much information. It didn't have any usability to it. I already had tools in place that were better. Some elements of the Phishing Awareness campaign need to be improved. When you're creating a campaign, the visibility over some of the user interface options needs to be improved. They're aware of that, and they have worked on some of them. It is by no means bad, but it could be slightly better. There are no additional features that I would like to be included in the next release.
I would love to see the indication of compromise and how the solution utilizes open source resources. It would be good to see that included in the paid versions. It would be a small addition but add a lot of value for clients.
As far as training awareness, I would give it 6.5 to 7 out of 10. In regards to phishing awareness training, I have been having some issues with the Hebrew aspects of IRONSCALES since most of our company's employees need the Hebrew language, and the phishing awareness in Hebrew is so-so. In addition, the biggest problem that I have is with people who fail since most of them just don't do the training, and IRONSCALES doesn't have some sort of reminder feature. When someone fails, if they open up the email and push on the link, then they get to a dedicated website which is supposed to give them basic information, e.g., what they could have noticed, then some sort of link to an instructional video, and in the end, training. I just noticed that 95% of the people who click on the email are flunking. For the awareness training, they don't continue to watch the video or do the training. Instead, they just exit the screen and move on. I would like it if IRONSCALES had some sort of reminder mechanism, meaning IRONSCALES knows if a user completed the training or not. As long as it hasn't been completed, it keeps reminding every so often, alerts the manager, etc. Right now, it is all in the hands of the employee, and not all of them continue the process, which is a shame. I would like to have more of an ability to intervene in the landing page for phishing awareness, e.g., more design options, change logos, color, and fonts. Right now, it is a template.
I really don't see anything to be improved upon just yet. We haven't gotten into the training, although we do plan on using it. As far as email security, as far as community support, I haven't really found anywhere that I feel as though I could comment on making a change for the better. The only thing that I could say is that some of the reporting features could be better. If I could have just a separate section for specific reports or have the ability to maybe create reports and put them down that left-hand navigation to be able to access them a little bit easier would be great.
The integration with Google Suite needs to be better. it's something they can work on. The pricing is a bit high. In the future, I'd like to see digital exposure of the users, such as credential exposure, or this kind of feature.