Cofense PhishMe - Detailed Review

Cofense PhishMe Overview

Cofense PhishMe is a comprehensive email security solution that integrates AI, machine learning (ML), and human intelligence to combat sophisticated phishing attacks. Here are the main features and how they work:

AI-Powered Spam Filtering

Cofense has introduced an AI-driven spam reduction capability within their Phishing Threat Detection and Response (PDR) platform. This feature uses Bayesian Machine Learning to customize the spam filter to each client’s unique environment. It “learns” the specific spam patterns in a client’s SOC, automatically filtering out spam that would otherwise overwhelm analysts. This approach reduces SOC analyst spam overhead by 30% or more and ensures complete data privacy by keeping emails local, without the need for external cloud data lakes.

PhishMe Email Security Awareness Training (SAT)

The PhishMe SAT platform trains employees to recognize and report real-world phishing attacks that bypass traditional and AI-based Secure Email Gateways (SEGs). This training includes simulations of observed SEG-miss threats to build employee resilience. The platform also includes an optional Learning Management System (LMS) for core knowledge building and Risk Validation to identify and focus on risk points within the training program.

Malicious Email Reporting

The PhishMe Reporter tool makes it easy for employees to report suspicious emails with just a single click, turning them into active participants in email defense. This reporting is integrated into the overall threat detection and response system, enhancing the human-vetted intelligence used to combat phishing.

Triage Email Analytics

This tool speeds up the analysis and threat determination from user-reported emails. It provides powerful visibility and automated analysis into indicators of compromise (IOCs) generated both by the user’s own reporting and the Cofense global reporting network. This helps in quickly identifying and mitigating phishing threats.

Cofense Intelligence

Cofense Intelligence is a phishing-focused threat intelligence offering that leverages data from the world’s largest global phishing reporting network. Every IOC in this intelligence is human-vetted by Cofense analysts for high accuracy (99.998%). This intelligence connects to and informs all parts of the Cofense and PhishMe solution architecture, ensuring that organizations can effectively identify and mitigate emerging risks.

Vision Email Auto-Quarantine

This is a high-performance, automated phishing indexing tool for rapid detection and quarantining of malicious emails that leak past the SEG. It includes automatic quarantining of major IOCs from Cofense’s phishing threat intelligence product, significantly reducing the dwell time of malicious emails.

Human-Vetted Intelligence at Scale

Cofense combines human intelligence with AI and ML to create a virtuous cycle of threat detection and response. The platform leverages a global network of over 35 million Cofense-trained employees who report phishing threats 24/7/365. This human-vetted intelligence is automated and analyzed using AI/ML, providing a scalable and diverse defense against phishing attacks.

Managed PDR Service

Cofense offers a managed email security service powered by the Cofense Phishing Defense Center (PDC), a global, phishing-focused Security Operations Center (SOC) operation. This service provides additional support and expertise to help organizations detect and remediate phishing threats effectively.

Integration with Azure Active Directory

Cofense PhishMe integrates with Azure Active Directory, allowing for automatic user provisioning and updates, enterprise single sign-on, and easy configuration. This simplifies user onboarding and account maintenance, ensuring seamless integration with existing organizational systems.

Conclusion

These features collectively ensure that Cofense PhishMe provides a comprehensive and effective solution for detecting, reporting, and remediating phishing threats, leveraging both AI-driven technologies and human intelligence.