Supervisor, Infraestructura Information Technology at Refineria Dominicana de Petroleo
Real User
Top 5
Sep 8, 2025
Sophos Phish Threat is a good product, but it has some limitations. We prefer Spanish language content, and the video selection has limitations. The catalog is very small compared with products such as Terranova or KnowBe4. My recommendation for Sophos Phish Threat is to expand their catalog and include other languages, specifically Spanish. Regarding the comprehensive reporting feature, we would prefer a better reporting system. While you can segment by department or other criteria, you can only export the report as a CSV which then requires manual organization in Excel.
To make Sophos Phish Threat better, the user interface should be improved. They can enhance the preview of the campaigns and the templates of the phishing simulation. I see some difficulty there. The performance and phishing simulation emails are good, but the preview and user interface could be improved.
There is a need for improvement regarding false negatives dealing with Office 365. The issue stems from policies in Office 365 that prevent scanning certain elements, which might trigger errors. I would like more clarity on how to address false negatives and reduce false positives.
Integration with other products could be improved. There is potential for enhancing the dashboard. Additionally, the feature utilizing AI for phishing detection should be further developed.
I cannot suggest which areas in the solution need improvement since Sophos has a research and development team that updates Sophos Phish Threat, and users mostly get the upgraded firewall online. The product's price is an area of concern, and it can be improved if Sophos reduces the prices by seven to nine percent, considering the current market price at which the product is offered.
Sophos should offer tests where we can emulate new attacks happening now. For example, people use traveling companies, so we could simulate a new test based on that. Sophos could update tests because we have tests for old attacks. We need new emails with new attacks, something that's happening now. Phish Threat has a lot of features that need to be improved, such as reporting. This is not just with EDR but with Sophos Central as well. For example, if we wanted to find the top ten machines that had been attacked the most last month, we could identify what the problem could be, whether it's the user or something happening with the machine. The report could say, "Last month, 20 machines were affected," maybe thanks to a virus or malware.
Sophos Phish Threat emulates a range of phishing attack types to help you identify areas of weakness in your organization’s security posture, and empower users through engaging training to strengthen your organizations defenses.
Sophos Phish Threat is a good product, but it has some limitations. We prefer Spanish language content, and the video selection has limitations. The catalog is very small compared with products such as Terranova or KnowBe4. My recommendation for Sophos Phish Threat is to expand their catalog and include other languages, specifically Spanish. Regarding the comprehensive reporting feature, we would prefer a better reporting system. While you can segment by department or other criteria, you can only export the report as a CSV which then requires manual organization in Excel.
To make Sophos Phish Threat better, the user interface should be improved. They can enhance the preview of the campaigns and the templates of the phishing simulation. I see some difficulty there. The performance and phishing simulation emails are good, but the preview and user interface could be improved.
There is a need for improvement regarding false negatives dealing with Office 365. The issue stems from policies in Office 365 that prevent scanning certain elements, which might trigger errors. I would like more clarity on how to address false negatives and reduce false positives.
Integration with other products could be improved. There is potential for enhancing the dashboard. Additionally, the feature utilizing AI for phishing detection should be further developed.
I cannot suggest which areas in the solution need improvement since Sophos has a research and development team that updates Sophos Phish Threat, and users mostly get the upgraded firewall online. The product's price is an area of concern, and it can be improved if Sophos reduces the prices by seven to nine percent, considering the current market price at which the product is offered.
Sophos should offer tests where we can emulate new attacks happening now. For example, people use traveling companies, so we could simulate a new test based on that. Sophos could update tests because we have tests for old attacks. We need new emails with new attacks, something that's happening now. Phish Threat has a lot of features that need to be improved, such as reporting. This is not just with EDR but with Sophos Central as well. For example, if we wanted to find the top ten machines that had been attacked the most last month, we could identify what the problem could be, whether it's the user or something happening with the machine. The report could say, "Last month, 20 machines were affected," maybe thanks to a virus or malware.
Sophos Phish Threat can improve load balancing.
Sophos Phish Threat can improve by adding other languages, such as Mandarin or Cantonese to their online trainer video center, it would be helpful.
The security could be simplified within the product.
It would be great if the price was reduced.
The security of the solution could improve.
I would like to see more manager-level training that teaches what needs to be done after a phishing email attack is found.
The pricing of Sophos Phish threat can be improved. The installation can be optimized.