Phishing simulator/training

Posted by heartgoldt20@reddit | sysadmin | View on Reddit | 7 comments

We are currently using Knowbe4 as our Phishing simulation and training. But we are not using the most out of it are there any alternatives that are better or can someone help me with a guide to fully optimize Knowbe4 or just take a look with me. We are just using a phishing test every 6 months and have training modules avaible but that is about it.

Reply to Post

7 Comments

[-]

Advanced_Ball5132@reddit

Check out "Bob's Business" - They build their training campaigns through positive reinforcement, and the content is actually enjoyable to watch. You can also bespoke your own training packages & simulations.

[-]

Ok-Recognition-1666@reddit

We are uisng Bullphish ID. It is a very good tool and it's a bit easier to set up automated campaigns than with Knowbe4. Your only concern is to check the reports weekly or monthly.

[-]

Lonely_Protection688@reddit

I also prefer bullphish. It's definitely easier to set up a monthly campaing in a set-it-and-forget-it kind of way with much less time investment compared to something like Knowbe4 or the Huntress SAT.

[-]

HaMAwdo@reddit

At work we use BullPhish ID, and it is great. Their phishing simulations are solid, and we have seen changes in our collaborators.

[-]

no_regerts_bob@reddit

if you want a hands off low effort system, Huntress (formerly Curricula) does a managed training and phishing program where they pick the content each month and you basically just get the reports

[-]

GrowthVector@reddit

My team was tasked with finding an alternative as my CISO didn't like the lack of reporting flexibility and test personalization. We went through a 6 month process and have narrowed it down to HoxHunt and PhishCloud. The refresh on the content, automation of continuous testing and better support on custom tests are the leading factors right now. Good luck

[-]

NowThatHappened@reddit

In all honesty, you should do your own phishing tests, and tailor the emails/phone calls specifically for each department and even down to use for those who fail. You get much better results that way.