PhishER
PhishER: A focused phishing-response platform with automation, enrichment, and remediation. Ranked #19 of 22 in SOAR Software by our editors (7.2/10); pricing: Paid; best for teams focused on phishing-response automation.
At a glance
- Editor score7.2 / 10
- PricingPaid
- Best forTeams focused on phishing-response automation
- Free planNo
- Paid from$1.15/seat/mo
- Playbook automationYes
- Founded2010 · Clearwater, Florida, United States
- Facts checked20 Sep 2026
Where it wins
- Automates phishing classification, dispositioning, quarantine, and remediation
- Adds PhishML, YARA rules, threat-intelligence, and scanning integrations
- Supports API, syslog, webhook, and third-party security integrations
Where it doesn't
- Focuses on phishing-response workflows rather than broad SOAR coverage
- Does not include case management
- 1001+ seat pricing requires a quote
Our verdict on PhishER
PhishER is KnowBe4’s cloud security orchestration, automation, and response platform for managing suspicious emails and Microsoft Teams messages reported by users. It classifies reported content and can categorize, notify, quarantine, block, or remove threats. Teams that need a focused workflow for phishing triage and response will find its scope more relevant than a general-purpose automation platform.
Pricing is paid monthly per seat. PhishER Plus costs USD 1.50 per seat per month for 101–500 seats and USD 1.15 per seat per month for 501–1000 seats. These published prices apply under a 3-year term, while 1001+ seats require a quote. The product can operate as a standalone platform or an optional add-on. Its integration surface includes Blumira, Cortex XSOAR, CrowdStrike Falcon Sandbox, FortiSOAR, Swimlane, Tines, VirusTotal, VMRay, and other security platforms, with API, syslog, and webhook support.
Its main depth is phishing-response automation: automated rules and actions work with PhishML classification, YARA-based custom rules, PhishRIP email quarantine and mailbox remediation, and threat-intelligence URL analysis. PhishER Plus adds Global Blocklist and Global PhishRIP, while PhishFlip can convert reported attacks into simulations. The platform also supports attachment and URL scanning through VirusTotal. Choose PhishER when reported phishing is the priority and integrations can connect it to the wider security stack. Teams seeking broad orchestration across many incident types or built-in case management should choose a fuller SOAR platform instead.
Your product? Our editors can test PhishER in depth and publish a review, labelled as paid · from $149/mo →
PhishER pricing
All 3 PhishER plans and prices →
PhishER fact sheet
| Free plan | No |
|---|---|
| Paid from | $1.15/seat/mo |
| Playbook automation | Yes |
| Alert enrichment | Yes |
| Threat intel actions | Yes |
| Case management | No |
| Deployment model | Cloud |
| Published integrations | Not verified |
| Deployment | Cloud, Browser extension |
| Platforms | Web |
| Support | Live chat, Phone, Tickets, Community, Docs · 24/7 |
| Built for | Mid-market, Enterprise (editorial estimate) |
| Integrations | 12 integrations: Blumira, Cortex XSOAR, CrowdStrike Falcon Sandbox, Exaforce, FortiSOAR, Onyxia … See all → |
| Pricing | Paid (source) |
| Website | knowbe4.com |
| Facts checked | 20 Sep 2026 |
PhishER integrations
PhishER lists 12 integrations on its own site.
- Blumira
- Cortex XSOAR
- CrowdStrike Falcon Sandbox
- Exaforce
- FortiSOAR
- Onyxia
- Swimlane
- Tines
- VirusTotal
- VMRay
- Webroot BrightCloud
- XM Cyber
See all PhishER integrations →
Alternatives to PhishER
- Cortex XSOARA case-driven SOAR platform for enterprise security operations teams.9.3
- ShuffleA value-focused SOAR platform for teams that want open-source and self-hosted options.9.2
- Splunk SOARA strong-value SOAR platform with broad automation, case management and a free edition.9.1
See all PhishER alternatives →
Used PhishER? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used PhishER for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
PhishER is listed in our SOAR Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/phisher/"><img src="https://www.itechguides.com/best/badge/phisher.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update