Huntress vs. Proofpoint Security Awareness Training

A great product that highlights any and all persistent footholds on the network and does a great job on breach monitoring. The support staff are great, efficient, and are able to reach out when there is an issue. Most problems are cleared out/mitigated before we even know about them. A great product to add to your security stack.

I think that Proofpoint is the best product on the market for Security Awareness Training. They make it easy, they have taken all the guess work out of it. You are supplied with everything you need to have a successful program and you don't have to be a "teacher" to do this. They have taken all of the guess work out of it.

Incentivized

• Using the latest industry knowledge of threats that have been ongoing, but not previously known and projecting it back in time against their installed endpoints to identify machines that are vulnerable or breached and when it these events occurred
• Very quiet. If they alert, it is a thing.
• Very good at remediation.
• They communicate extremely well when it matters.
• While there are the most extensive products more often than not they are the first to alert us to a threat.

Incentivized

• The report phish Outlook add-in button has had a positive influence on our users. We have many users regularly reporting suspect phish emails.
• The templates for the phish campaigns are very up to date, using real life recent phishing attacks. This makes our phishing campaigns much more realistic.
• The training modules from PSAT are very effective and useful with our LMS system.

Incentivized

• Now that they have EDR capability, they need to fully participate in MITRE testing for direct comparison against other EDR products.
• Now that they are going into Managed Antivirus and EDR with isolation capabilities they need to update their SLA comparative to other vendors
• Support for non-Windows OSes for consistency in a network
• It would be nice to seed canary files in custom shares on servers.

Incentivized

• The platform provides options for many different reports (with some customization options), however, there are reports that I would want that are not available.
• Adding new staff (we have a lot of turn-over) into an existing training plan can be cumbersome for the system administrator. Although End-User Sync can be set-up to "add" new users to the system, the new users still need to manually be added to the assignments and sent past assignments to complete. (NOTE: this was made more difficult because of our decision to implement a training plan the way we did).
• Some of the ThreatSim campaigns (simulated phishing or malicious attachment emails) will only work if you are using their PhishAlarm plug-in (add-on button for Outlook, etc. for users to easily report suspected threats). Our users access email by iPhones, Android, iPads, PCs, and Macs. PhishAlarm cannot be used for all of these platforms.

Incentivized

• The product is great for what we use it for
• We have a good relationship with our vendor/Proofpoint, which I believe is needed to be successful in Security Awareness and using tools like this
• The package/service as a whole is incredibly helpful
• The integrations with Proofpoint's Trap is one of the most valuable things we could do. It turns your entire email user base into members of IT security, to be on the look out to report cyber attacks, and have them pulled out of everyone's email if the email is condemed/found malicious.

Incentivized

We dropped SentinelOne in favor of Huntress because the UI was much more simplistic for the tier 1 techs to maintain. It beats the old web design model of three clicks to where you want to go. It is very intuitive. No one needs training to figure out how to navigate its console.

Incentivized

Overall, PSAT is integral to what we do. PSAT is a helpful tool to help us improve our employees ability to recognize, report, and respond to phishing. It works for us to use a longterm partner, who is incredibly helpful/supportive, and also bringing Proofpoint's greater cybersecurity & attack intelligence into PSAT. Honestly, we are pretty happy and would make the choice to go with PSAT again (we evaluated the major players in the space via Gartner's Magic Quadrant). The team behind the products are excellent and the product of itself is both intuitive and expansive. This combination allows us to reach our 10k+ employees who are located in over 20 countries

Incentivized

I have never had any issues with receiving support and have always had my questions answered in a timely manner. When we do have suggestions, the support has been ready to step in and provide advice or take our suggestions seriously. But normally, there aren't any issues that come up when using this product.

Incentivized

Huntress may not be a complete SOC such as Blackpoint, but the level of protection is close. Huntress provides a set of human eyes always hunting for persistent threats on your endpoints. Huntress also seems less noisy with no false positives, so no time is wasted reviewing alerts.

Incentivized

The "Managed Service" (a dedicated ProofPoint Account Rep c/w weekly status calls) significantly reduces the resource demand on the area within your company managing the program. The KnowBe4 Platform does all the same stuff (Training Modules, Reports, ThreatSim Tools), but you (or your staff) need to do considerably more work to manage the Overall Program. The uplift in cost for this service is minimal.

Incentivized

• We have been able to lower operational costs by shifting to Huntress.
• We've been able to cut costs to our clients by utilizing Huntress over competing products.
• In spite of inflation, we've been able to keep our managed service prices at a steady, below market rate, because of Huntress.

Incentivized

• I don't think there are hard and fast numbers when it comes to Security Awareness ROI, as it would be next to impossible to come up with any defined metrics.
• Phishing campaigns vary in their effectiveness, what I've found is that there is always something that will trigger your employees to click. Finding what that is for your company can help you train everyone to see the red flags.

Incentivized