Phishing Simulation Training Sources

tedjamestedjames Member Posts: 1,182 ■■■■■■■■□□
Can you recommend some good companies for phishing simulation training? I'm looking for programs similar to what SANS offers: https://www.sans.org/security-awareness-training/products/phishing

If you have current pricing, that would be great.

I've been looking at SANS, Proofpoint, and KnowBe4 so far.

Comments

  • chrisonechrisone Member Posts: 2,278 ■■■■■■■■■□
    We use PhishMe to simulate phishing attempts and to educate our users. 
    PhishMe has been bought out re-branded and upgraded by Cofense.

    https://cofense.com/ 


    Certs: CISSP, EnCE, OSCP, CRTP, eCTHPv2, eCPPT, eCIR, LFCS, CEH, SPLK-1002, SC-200, SC-300, AZ-900, AZ-500, VHL:Advanced+
    2023 Cert Goals: SC-100, eCPTX
  • UnixGuyUnixGuy Mod Posts: 4,570 Mod
    I used Wombat Security recently, they have good products. They have cool video training material, and a phishing simulation solution as well https://www.wombatsecurity.com/
    (they're owned by ProofPoint).


    Certs: GSTRT, GPEN, GCFA, CISM, CRISC, RHCE

    Learn GRC! GRC Mastery : https://grcmastery.com 

  • MeggoMeggo Registered Users Posts: 197 ■■■■■□□□□□
    edited January 2019
    @tedjames have you checked out the latest Gartner Magic Quadrant for Security Training & Awareness? We're (InfoSec Institute) in it this year as a Challenger, so of course we purchased distribution rights for the reprint. It also includes good info on the brands you listed above. If you're interested in taking a look, you can access it here: 

    https://www.infosecinstitute.com/gartner-magic-quadrant-2018/

    Completing the form on that page will put you in our database. If you'd rather chat about it, let me know. I use it (our solution) frequently to try to phish my marketing coworkers with Salesforce password reset notifications. ;)

    Director of Product Marketing at Infosec
    Who we are | What we do 
  • tedjamestedjames Member Posts: 1,182 ■■■■■■■■□□
    Thanks for all of the great info! I've made note of it all.

    @Meggo shortly after I created this post, I found this: https://www.infosecinstitute.com/securityiq/phishing

    Looks really good. I'll follow up with an IM.
  • FSF150FSF150 Member Posts: 119 ■■■□□□□□□□
    KnowBe4 user here. Have been pretty happy with the interface. They offer both the phishing and the secawareness training modules so good tracking for audits. 

    Not really qualified to speak on the others, but happy with KnowBe4 so far. 
    First we drink the coffee. Then we do the things. :neutral:
  • tedjamestedjames Member Posts: 1,182 ■■■■■■■■□□
    FSF150 said:
    KnowBe4 user here. Have been pretty happy with the interface. They offer both the phishing and the secawareness training modules so good tracking for audits. 

    Not really qualified to speak on the others, but happy with KnowBe4 so far. 
    Thanks for the recommendation. KnowBe4 is on my list. Actually, they've been hounding me almost daily for a long time now. Attend a vendor-sponsored webinar and they won't leave you alone. But it is good to know that their services are worthwhile.
  • McxRisleyMcxRisley Member Posts: 494 ■■■■■□□□□□
    My company uses KnowBe4. They arent bad if you can stand Kevin Mitnick. Every single video starts with "Hi, I'm Kevin Mitnick. The world's most famous hacker!"
    I'm not allowed to say what my previous occupation was, but let's just say it rhymes with architect.
Sign In or Register to comment.