Listing Thumbnail

    PhishER Plus

     Info
    Deployed on AWS
    PhishER Plus is your lightweight Security Orchestration, Automation and Response (SOAR) platform to orchestrate your threat response and manage the high volume of potentially malicious email messages reported by your users.
    4.5

    Overview

    Introducing PhishER Plus - the most powerful anti-phishing defense available in the world. PhishER Plus is a light-weight SOAR platform that automatically analyzes and prioritizes reported email messages to identify and quarantine malicious email across your organization. Additionally, transforms in-the-wild phishing emails into training opportunities by flipping them into simulated phishing campaigns.

    PhishER Plus adds AI-and-human-validated, crowdsourced blocklist and PhishRIP capabilities to proactively block and remove active phishing attacks that have bypassed email filters BEFORE your user gets exposed to them. PhishER Plus is powered by an active global threat feed (Global Blocklist) that is crowdsourced from more than 10 million highly trained KnowBe4 end users from across the globe to spot and report on active phishing and social engineering attacks in the wild. The reported email-based threats are subject to three levels of human and AI-based validation and analysis: the collective initial reporting from all KnowBe4 trained users; each PhishER customer organization's own SOC/IT security team; and the KnowBe4 Threat Research Lab team, which examines and vets each submitted threat for validity.

    Machine learning and AI-powered analysis eliminates the guesswork of identifying high-risk phishing threats from all the user-reported messages and to automate the security workstream for managing the "other 90%" of user-reported emails. This allows your organization to build a fully orchestrated and highly effective SOC team that can identify and mitigate social engineering threats in near real-time.

    WHY IS THIS DIFFERENT?

    -Cut through the mail clutter and allow your IR and SOC teams to focus on the high-level threats -Group or cluster messages based on patterns to allow incident response teams to quickly identify a widespread phishing attack -Automatically remove phishing emails from users' inboxes at the email server level -Harness the power of blocklisting and crowdsourcing to prevent malicious emails -Take real-world phishing attacks and change them into simulated phishing templates to train your employees, strengthen your organization's human firewall against future assaults -Global Blocklist: Fingerprints of validated threats are used to automatically block matching new incoming messages from reaching your users' inboxes. This constantly updated Global Blocklist threat feed syncs with your Microsoft 365 mail server -Global PhishRIP: Messages that match an identified phishing threat other PhishER customers have removed and have been validated by the KnowBe4 Threat Research Lab can be automatically quarantined by removing (ripping) them from all of your users' inboxes

    Contact us with any questions or for custom pricing at AWS@knowbe4.com 

    "Buy Now" Disclaimer: When you click "Create Contract" your purchase request will be forwarded to KnowBe4 for additional evaluation. You will receive a notification confirming the acceptance of your order as soon as it has been reviewed and approved. Your subscription will not begin until your order has been fully accepted in accordance with the EULA.

    Highlights

    • Block email threats that have bypassed other email security filters or systems before they reach your users' mailboxes
    • Isolate malicious emails that already bypassed your mail filters through automated quarantine with Global PhishRIP
    • Crowdsource threat intelligence from 10+ million KnowBe4 trained users

    Details

    Delivery method

    Deployed on AWS
    New

    Introducing multi-product solutions

    You can now purchase comprehensive solutions tailored to use cases and industries.

    Multi-product solutions

    Features and programs

    Financing for AWS Marketplace purchases

    AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
    Financing for AWS Marketplace purchases

    Pricing

    Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
    Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator  to estimate your infrastructure costs.

    12-month contract (1)

     Info
    Dimension
    Description
    Cost/12 months
    Users
    Users per month
    $18.00

    Vendor refund policy

    All Orders are non-cancellable and all fees and other amounts you pay under this Agreement are non-refundable, except in the event KnowBe4 is unable to cure a valid warranty claim within thirty (30) days of notice, as provided in further detail in Section 9 of the KnowBe4 Terms of Service.

    Custom pricing options

    Request a private offer to receive a custom quote.

    How can we make this page better?

    Tell us how we can improve this page, or report an issue with this product.
    Tell us how we can improve this page, or report an issue with this product.

    Legal

    Vendor terms and conditions

    Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .

    Content disclaimer

    Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.

    Usage information

     Info

    Delivery details

    Software as a Service (SaaS)

    SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.

    Support

    Vendor support

    When you have questions, we have answers. We make it easy to connect with us when you need technical support, the way you want to connect: Online Community, Support Knowledgebase, and full time dedicated Technical Support teams worldwide. With an average Median Response Time of an hour in responding to new support tickets and a 98% customer support satisfaction rate, KnowBe4's tech experts respond quickly and get your issues resolved super-fast! Visit:

    AWS infrastructure support

    AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.

    Product comparison

     Info
    Updated weekly

    Accolades

     Info
    Top
    50
    In Backup & Recovery
    Top
    10
    In Data Security and Governance

    Customer reviews

     Info
    Sentiment is AI generated from actual customer reviews on AWS and G2
    Reviews
    Functionality
    Ease of use
    Customer service
    Cost effectiveness
    0 reviews
    Insufficient data
    Insufficient data
    Insufficient data
    Insufficient data
    Positive reviews
    Mixed reviews
    Negative reviews

    Overview

     Info
    AI generated from product descriptions
    Security Orchestration and Automation
    Lightweight SOAR platform that automatically analyzes, prioritizes, and orchestrates response to reported email messages to identify and quarantine malicious emails across the organization
    AI and Machine Learning-Powered Threat Analysis
    Machine learning and AI-powered analysis to identify high-risk phishing threats from user-reported messages and automate security workflows for threat prioritization
    Crowdsourced Global Threat Intelligence
    Active global threat feed powered by crowdsourced intelligence from over 10 million trained end users with three levels of human and AI-based validation from collective reporting, customer SOC teams, and dedicated threat research lab
    Automated Threat Remediation
    Automatic removal of phishing emails from users' inboxes at the email server level and quarantine of matching threats through Global PhishRIP capability that syncs with Microsoft 365 mail servers
    Threat Pattern Clustering and Campaign Conversion
    Message clustering and pattern-based grouping to identify widespread phishing attacks, with capability to convert real-world phishing attacks into simulated phishing training templates
    AI-Powered Threat Detection and Response
    Leverages AI engine to detect and block phishing, malware, ransomware, spear phishing, spam, and account takeover threats through cloud email gateway and API-based inbox defense mechanisms.
    DMARC Authentication and Domain Spoofing Prevention
    Provides DMARC reporting with granular visibility and analysis of SPF/DKIM/DMARC configurations to prevent email domain spoofing and minimize false positives.
    Cloud-to-Cloud Backup and Data Protection
    Offers unlimited Microsoft 365 backup for OneDrive and SharePoint environments with automated data recovery capabilities against malicious or accidental data deletion.
    Sensitive Data Discovery and Remediation
    Includes Data Inspector tool that scans OneDrive and SharePoint for sensitive information and malware-containing files, with visibility into file sharing and automated remediation for improper shares.
    Security Awareness Training and Attack Simulation
    Provides simulation-based training with localized content library and continuous attack simulation testing with reporting capabilities for security awareness and user education.
    AI-Driven Threat Detection
    Utilizes artificial intelligence to detect and prevent advanced email attacks, phishing, credential theft, ransomware, business email compromise, and cloud account takeover threats.
    Unified Cross-Channel Visibility
    Provides centralized dashboard with holistic view of user interaction and threat telemetry across cloud, email, endpoint, and web channels in a cloud-native interface.
    Automated Incident Response
    Enables automated remediation and consistent, scalable incident response to sophisticated email attacks with reduced manual triage requirements.
    Behavioral and Content Analysis
    Correlates user activity, behavior patterns, and content analysis with threat intelligence and data movement to identify and prevent data loss and insider threats in real time.
    Data Protection and Privacy Controls
    Implements anonymization of user data, content snippet masking, and regional data residency management to protect user privacy while defending against data loss scenarios.

    Security credentials

     Info
    Validated by AWS Marketplace
    FedRAMP
    GDPR
    HIPAA
    ISO/IEC 27001
    PCI DSS
    SOC 2 Type 2
    No security profile
    No security profile
    -
    -
    -
    -
    -

    Contract

     Info
    Standard contract
    No
    No
    No

    Customer reviews

    Ratings and reviews

     Info
    4.5
    565 ratings
    5 star
    4 star
    3 star
    2 star
    1 star
    76%
    21%
    2%
    0%
    1%
    0 AWS reviews
    |
    565 external reviews
    External reviews are from G2 .
    nathan d.

    Excellent Email Quarantine and Fast Release Controls

    Reviewed on May 13, 2026
    Review provided by G2
    What do you like best about the product?
    I love that users can quarantine emails and I can release them back or have those emails be flagged and pulled from all users' email inboxes.
    What do you dislike about the product?
    There currently isn't single sign on but I heard that is coming.
    What problems is the product solving and how is that benefiting you?
    Keeping our users inboxes safe from phishing and spam and strange emails.
    Information Technology and Services

    Effortless Email Review and PhishRIP in PhishER

    Reviewed on May 13, 2026
    Review provided by G2
    What do you like best about the product?
    Ability to review emails and phishrip them.
    What do you dislike about the product?
    I’m unable to remove multiple copies of the same email based on a single email from the PhishER platform when running a phishrip.
    What problems is the product solving and how is that benefiting you?
    Email security that get past email filters.
    Financial Services

    Fast, Easy Email Threat Reporting and Detection

    Reviewed on May 13, 2026
    Review provided by G2
    What do you like best about the product?
    I like how my users are able to report emails easily and how quickly the platform checks it and lets me know if a threat is detected.
    What do you dislike about the product?
    the manual part of having to PhishRIP it and manually delete emails from other user's inbox
    What problems is the product solving and how is that benefiting you?
    It is helping us get malicious emails out of our environment that get through our email security vendor
    Mike T.

    Automated Phishing Simulations with Smart Scoring

    Reviewed on May 13, 2026
    Review provided by G2
    What do you like best about the product?
    Automated phishing attempts sent randomly and scoring as necessary.
    What do you dislike about the product?
    Nothing at this time. The products works well.
    What problems is the product solving and how is that benefiting you?
    This is helping our staff to learn of potential phishing attack formats and what to watch for.
    Rick B.

    Great Visibility into User-Flagged Messages with PAB

    Reviewed on May 13, 2026
    Review provided by G2
    What do you like best about the product?
    The ability to see all the messages that users flag with the PAB
    What do you dislike about the product?
    Tough to move between massages and back to the rooms
    What problems is the product solving and how is that benefiting you?
    Our ability to see the target attacks our users are facing and the PhishRIP ability to remove those emails from everyones inbox
    View all reviews