IRONSCALES Reviews

At the time, we had an email gateway system, but we didn't have something that could remove malicious and unwanted emails from company mailboxes on the fly. That was one of the main draws for using IRONSCALES. It is very simple and easy to remediate malicious emails. 

We also didn't have a user awareness training platform. We needed something that we could use to test phishing emails to train the staff in our company and increase cybersecurity awareness. These are the main tools of the platform that we use that we didn't have before.

By having an integrated approach of combining email security and employee awareness training, they've hit the nail on the head. It is very easy to learn and use the platform for both of those functions.

When I send out phishing campaigns, which is usually once a month or every two months, where we do a different scenario, we calculate all the results. On an ongoing basis, I can see that our reporting rate has gone up over the last six months or so. Running the campaign is obviously having an effect on the awareness of our staff. I can see that in facts and figures. Before me, we didn't have a dedicated role for doing this. In my time, after about three or four campaigns, you start to notice the benefits. After a campaign, I also communicate with each department. I liaise with them, not through IRONSCALES, and I send out the results from the campaign to them, but it is the phishing campaign that has helped. So, you start to realize the benefits after three or four campaigns.

It definitely reduces risk. In email security, the main risk is users. 99% of it is making sure your users don't click things. So, if you're using the platform to teach people, you're reducing that risk. As long as you're doing the incident part of it on a timely basis, your risk is going to be a lot lower. For me, the biggest risk reducer is just educating users.

IRONSCALES’ mobile app notifies me when a new incident is created. Within the settings of IRONSCALES, you have a collaboration app. We work with Microsoft Teams in the company, and I've linked it with that. Every time an incident is raised in IRONSCALES, it sends a notification on my Teams channel and my security channel. It is instant. As soon as an incident is raised, I get a notification in Teams that there is something to look at to review. So, whether I'm at my desk or on my phone, I will get that notification straight away. I can solve something in less than a minute. The notifications are very good and helpful, and I'm happy with this feature. I couldn't suggest any improvement there.

For me, the mobile app is most valuable. All other features are also very useful, but the mobile app makes it really easy for me to manage on the go. I don't have to be at my desk. I could be at the shops, or it could be in the evening when I am out, and I can get a notification on my phone that there is an incident that has been raised. I can sort it out very quickly without having to be at my work PC.

The awareness campaign has also been useful. Once you've completed the Phishing Awareness campaign for the users, you get the reporting functionality. You're able to send out training modules, individually or in bulk, to the staff members that need them.

It is very easy to manage. The user interface is very friendly.

I speak to the customer success manager regularly, and he does update me on what they're working on. They're always releasing new updates. There is a feature called Account Takeover, which isn't what I want it to be able to do. I know that they're working on that, but when they first started the Account Takeover feature in incident management, it didn't have much information. It didn't have any usability to it. I already had tools in place that were better. 

Some elements of the Phishing Awareness campaign need to be improved. When you're creating a campaign, the visibility over some of the user interface options needs to be improved. They're aware of that, and they have worked on some of them. It is by no means bad, but it could be slightly better.

There are no additional features that I would like to be included in the next release.

I'm fairly new to security, and I have been using this solution for about eight months, but my company has been using it for three or four years.

I've seen the platform being unavailable only a few times. It wasn't for very long, but I haven't had that for a while now. It might have gotten better. So, the availability of it is very good. The bugs in it have been features that were not quite right. They had nothing to do with availability.

It is very easy because it just syncs. If we add new users or disable users, we do that on our end in Office 365 or our IT tenant. It just syncs across. We don't really have to do anything. Once we've got it going, there is literally no maintenance, and it is very easy to scale.

Our IT environment is a hybrid environment where we have a lot of resources on-premises, and we have a lot of resources in the cloud. We deploy this to the whole company. We have about 800 to 900 users with mailboxes. Including all the shared mailboxes that other people access in there for various things, at the moment, there are 1,100 mailboxes. So, there are about 200 shared mailboxes and about 800 to 900 users.

We're going to keep its usage as it is, but there might be new features that we might have a trial of. On the whole, we're happy with how we're using it at the moment. 

Their support is good. I haven't had too many issues with it. On the whole, as far as the service desk goes, I don't have too many complaints. Often, the issues that I raised can't be sorted by someone straight away because it might be a bigger bug or something like that, as opposed to just general help. I would rate them an eight out of ten.

Positive

This wasn't a replacement for something. This was a new implementation to augment our security. We've got an inbound and outbound platform for all the emails to go through, and this is an extra layer to that to capture any malicious emails.

We run Office 365 here, and they do have a lot of in-built security options for email. We don't take advantage of all of that. For the time being, it is a bit of 50/50, but I still run all the campaigns out of IRONSCALES. We mostly use IRONSCALES for campaigns and incidents. Microsoft doesn't have the alert functionality and mobile app. So, IRONSCALES beats it in that respect.

I didn't implement it, but I assume it was fairly easy. I assume that it is in the cloud because I've never seen an IRONSCALES server within our environment.

In terms of maintenance, it doesn't require any maintenance. I get messages every time there is a new release, but we don't have to schedule any downtime for the updates that they do, and even if it is required, it would just be me managing it. It is simple in that respect. It couldn't get much easier.

In security, it is very difficult to quantify the return on investment because it is based on something not happening. However, it definitely has value in terms of improving awareness and reducing my time looking at things.

I don't know about its pricing because I don't run the budget or pay the bills, but if it was extortionate, we probably would be looking to scrap it, and because we are not, I assume its price is okay.

It is great, and I would definitely recommend it, but it is more the case of whether you need the tool and whether your current tools already do these functions. If you're missing one of the two functions of this software, then obviously, I wouldn't recommend it. 

I don't have much to compare it against. If this company was a lot bigger, I don't know if it would be a lot harder to manage. Most probably it won't be. It seems fairly good for companies of all sizes.

We have enabled Themis, the AI function, at the moment on an ongoing trial basis. It can automatically remediate things. There are two ways that incidents are raised in IRONSCALES. You've got users reporting emails themselves, and then, you've got the logic of the app or the AI picking it up. It is great. It doesn't pick up everything, but we've got various platforms in place, and not all of them pick up everything. 

When it is used in what we call defense-in-depth, it is great, but it doesn't pick up absolutely everything. It does pick up the majority of malicious emails, and it is good for that. There is a module in it that automatically remediates emails. It will look at them in a capacity and make a judgment by itself on what to do with them. At the moment, the logic of that is okay, but it isn't as good as someone who has experience making a judgment on it. It is however good in terms of picking up an incident in the first place.

It can enable you to spend more time on other activities. Most of it comes down to understanding the depth or format of an incident. When I first started, I was new to it. It was not massively complicated, but there was a learning curve for me in security as opposed to me in IRONSCALES. If someone with a lot of experience is using it, it would definitely reduce their time in remediating issues and help them crack on with other tasks.

I would rate it a nine out of ten. There are a few bugs and issues, but they are sorting them. It is not perfect, but it is very good. It has room for improvement, but for what I use it for, it is great.

The main challenge that we wanted to solve with this solution was the email-based attacks. They are a major threat for our staff and customers. So, we are using this solution for protection from threats and remediation of phishing emails. We also use it for simulation to train our staff to recognize a phishing email. For those users who click on the phishing email, we provide the training content to improve their awareness.

Its artificial intelligence and machine learning capabilities are really important and helpful in saving time. It saves a lot of hours, and we don't have to do a manual review of each incident or email. Without IRONSCALES, we will have to rely on our staff to report emails that might be malicious, but you can't always depend on the staff to do that.

It is an important part of our security infrastructure. It gives us confidence that we are protected from email threats.

It allows us to report an email as spam. If our staff suspects an email to be malicious, they can report it as spam.

It is helpful in assessing the awareness level of our staff. We compare the metrics of every new phishing campaign with the metrics of previous campaigns. We also determine if the awareness training we are conducting for our staff is effective. We can see all the data. If a lot of people have clicked on the phishing email, we get to know that we need to step up our efforts on phishing awareness.

Its automated detection and response capabilities save a lot of time. We are a financial institution, and we get quite a lot of emails. If someone has to manually review and investigate each alert or email event, it would be a full-time job. On a daily basis, it would take more than three hours of analysis work. A financial institution like ours receives quite a lot of emails from customers and internal staff, and IRONSCALES saves a lot of our time. We don't have to dedicate someone to manually review alerts or emails.

The time that we have saved by not having to manually review each incident can now be used to focus on other tasks. 

It has also helped reduce the number of people or analysts needed to deal with and respond to email incidents.

It allows us to customize the automated detection and response capabilities. Each email that IRONSCALES detects has a confidence level rating. For example, it has 90% or 70% confidence in a phishing email. We have the ability to configure the threshold for automatic remediation. For example, we can say that for emails with a 70% or higher confidence level, it can automatically remediate, but for emails with a 69% confidence level, it should raise an alert, and we'll manually investigate. It gives us the ability to raise or reduce the threshold.

AI-driven phishing detection and incident remediation are valuable. It saves time from having to do manual analysis and investigation, and we also get alerts for phishing emails.

Even though they have been continuously improving it, it is not 100% there. We have had a few incidents where legitimate emails were getting blocked, and we had to manually remove those emails from quarantine. It is 90% effective or accurate because, on rare occasions, some emails from customers were not getting delivered. In one or two instances, their emails got blocked by IRONSCALES, and we had to manually remove the emails from quarantine. I would like them to improve their algorithm to avoid flagging genuine emails as malicious. I would also like to be able to whitelist certain email addresses. I'd love to be able to whitelist a particular customer.

It is good for user awareness, but I would love to have more content for our staff that is related to not only phishing but also general awareness. I don't know whether it is a functionality that is already available and we have not subscribed to it, but I would love to be able to send awareness emails to staff on different topics related to email security. They should provide us with more security awareness content. Based on the current trends in the security landscape, they can give us security content in emails that I can easily share with my staff to keep them aware.

I use IRONSCALES' mobile app. The mobile app doesn't notify me about the incidents, but I get email alerts instantly, which are helpful when I'm on the move. I get them a lot on my mobile. I get notifications in the email that an incident has been automatically remediated. If an email doesn't have the specified threshold level, I can quickly log in to the IRONSCALES app and do a manual authentication. It helps a lot when I'm on the go, or I don't have my PC with me. Email alerts are fine with me, but it probably would be good to have push notifications from the mobile app. If someone doesn't have an email client on their mobile, they can get notifications through the app.

I have been using this solution for just under a year. I joined the department in September, and I started using the product in September last year.

It is a cloud-based solution. So, I expect it to scale well regardless of the number of users we have. We don't expect to experience a drop in performance. Cloud-based solutions generally scale well.

We use it for every email account we have. We currently have between 700 to 800 users, and it is being used for all our departments, users, and group mailboxes.

We definitely have plans to increase its usage. We are currently growing, and we are expecting a significant addition to the number of users in Q3 and Q4.

We haven't had an issue so far. So, we haven't contacted their support. During implementation, we got full support from them, and we loved the support we got. We have no issues with their support. I would rate them a nine out of ten.

Positive

I am not aware of any other solution being used previously. IRONSCALES was already in the company when I joined.

It was already in place when I joined. In terms of maintenance, it doesn't require any maintenance from our end. All we have to do is integrate our Outlook email server with IRONSCALES, and that's it. 

We have definitely seen an ROI. The amount that we pay for licenses is definitely way less than what we would pay if we are hit by a ransomware attack. So, it definitely provides a return on investment.

We were able to realize its benefits immediately after the deployment. We started analyzing emails and getting alerts right from the time it was activated. You have to do a bit of tuning for the threshold, but the effect was immediate. We didn't have to wait even a bit for it to be effective.

Considering the value it provides, it is definitely worth the cost. We don't have to do manual analysis and remediation of phishing emails, which saves us a lot of hours.

Its licensing is based on the number of users being supported and the number of email addresses being protected. I'm not aware of any additional costs.

I would definitely recommend the product. It is definitely worth the investment.

I would rate it an eight out of ten because I would like to have some of the features. We don't have them currently, and I'm not sure whether these features are available with an additional license.

I use the solution in my company to stop phishing and spam efficiently and automatically.

The most valuable features of the solution are that it is easy to set it up, install, and manage the product.

I think maybe on the side of the awareness training, the tool can improve a little more information and have some other languages since even though English is good, Spanish is not so good. The tool can improve the content in Spanish and other languages. The tool supports 15 to 16 languages, but the content it uses in the training in Spanish has certain limitations.

I have been using IRONSCALES for a year. My company is an end user of the tool.

It is a very stable solution as it is software that runs in the cloud. I didn't have any outages with the tool.

It is a very scalable solution. I know the tool scales up very well. Some of our customers have thousands of use of mailboxes. In my case, only one hundred users use the tool. It requires very little installation, but I know thousands of customers.

The technical support offered is very good. The tool's support team attends very quickly to the support tickets raised. The technical support is very good at resolving issues.

Positive

I have used a security gateway from Forcepoint, which was a lot more complicated to maintain and set up. Forcepoint decided to discontinue its solution for email gateway, and then it decided to introduce another solution in the market that includes AI.

The product is easy to set up as it is an API-based solution. With IRONSCALES, you don't have to do anything on the platform. You just need to do the integration and the connection with Office 365 tenants, and that is it.

I rate the product's setup phase as a ten out of ten.

The solution can be deployed by one person from IRONSCALES, who will create the tenant for me. Then, I do the rest of the setup process, which includes three or more steps, but it can be done in minutes.

The solution can be deployed in 15 to 30 minutes.

The product is available as a middle-priced tool. I think it is not the cheapest solution. There are other solutions apart from IRONSCALES that are more expensive, while some are a little bit more cheap, but they are not available with the same capabilities.

The automated response capabilities are very accurate for detecting suspicious activities and suspicious languages used by the attackers.

The only people needed when using the tool are to take care of the console and an analyst. In some cases, some incidents require an analyst to complete the analysis of the email. I don't create incidents that can be automatically resolved by AI. I create incidents that need a review from an analyst. The only people who need to be aware of the incidents and where such details should not be classified is when it comes to analysts. I don't need to do any maintenance process for the tool every day. Everything is available as a service, so I don't need to do anything to maintain the platform apart from dealing with the non-classified incidents.

The tool uses a lot of AI technologies to detect the accuracy of the email, especially to filter out phishing emails. It not only detects phishing emails but also provides a preview of who the attackers are before we receive the real phishing email. It is not just to detect phishing emails but also to detect the intent of the attacker in creating a phishing email.

I rate the tool a nine and a half out of ten.

Phishing emails and spam are challenges companies of all sizes face. IRONSCALES acts as a second layer on top of the Microsoft mail relay we use. It scans every email coming into our organization and automatically checks the validity. We also check manually in some cases.  

While we mainly use it for the mail relay, IRONSCALES can also act as a phishing campaign simulator. We can send simulated phishing emails to our colleagues to test their readiness. 

Our entire organization uses IRONSCALES across many locations worldwide in South America, Asia, Europe, and North America. All sites use the system to protect the mailboxes and just act as a mail relay. We have about 8,000 users.

The biggest benefit is that we get fewer phishing and spam emails, so using IRONSCALES has made our environment much safer. While I wasn't here when they deployed the system, I believe they saw benefits right away.

The feature I use the most is the main relay. IRONSCALES was designed around that, but phishing simulation management is also a handy tool that I don't see often. Combining these features enables a user to be more comfortable with the simulations. 

For example, one of IRONSCALES' features is an Outlook extension that lets you report phishing emails and other stuff that looks malicious. In our training, we encourage our colleagues to click this button to report as many emails as possible. Reporting suspicious emails should become part of our employees' everyday routine. The training campaign usually helps us catch our colleagues outside their comfort zone to see if they're paying attention to all these suspicious emails they receive.

AI and machine learning are essential components of the product. It automatically can identify phishing emails and classify them according to several factors. I'm not sure how it works, but there's a ranking system that ports onto every sender and email we receive. This artificial intelligence can conduct a thorough search that's sometimes better than humans. 

The automated detection and response feature handles most of the job. I only need to classify a few emails manually each day. Artificial intelligence does everything else automatically for me. Without this technology, we would have to sort 1,000 emails each day manually. IRONSCALES cuts that down to maybe 50.

The IRONSCALES mobile app is convenient to use outside working hours. It's not my primary tool, but it's nice not to need to open your laptop whenever you would like to classify something. You can use the app to check up on the system. 

There's room for improvement in the campaign management. IRONSCALES has many built-in templates that I use, but I can also build templates from scratch. However, the interface for creating custom templates needs to be updated. 

I've already contacted IRONSCALES with some features I'd like to see, and they've promised to implement them. For example, let's say I send campaigns using customized tags assigned to each user. If I would like to send a campaign to my colleagues in China, I would send the campaign using a tag that says China. In many cases, new users don't have tags. 

I asked IRONSCALES to add the ability to send campaigns to colleagues that don't have any tags. They promised this feature would be available during the next update.

I've been using IRONSCALES since I started working here at my current company about a year ago. 

IRONSCALES is stable. I can't think of any outages. 

We can grow as much as we want. We are growing right now and adding new sites to our company.

I rate IRONSCALES support 10 out of 10. They provide support in less than 24 hours. I have never had a problem with them, and they always solve my issues. 

Positive

The company previously used Microsoft ATP, which required a lot of manual work. I was told that they used to spend a lot of time manually sorting the emails by phishing, spam, etc. The company switched to IRONSCALES because they wanted something to help automatically sort stuff and get faster results.

Though I wasn't here when IRONSCALES was deployed, I saw the system requirements and a basic guide to implementing the system. It was straightforward. 

After deployment, it doesn't require much maintenance. It does everything automatically as well. IRONSCALES supports older versions of Exchange and local Exchange servers that require manual updates of the add-ons they use to protect the mailboxes, but we don't use those services.

I rate IRONSCALES nine out of ten. Some improvements to the campaign management might bring it up to ten. It's a great system. I would recommend it if you only need a mail relay. On top of that, there are additional advantages of using the system, like the campaign manager that complements the mail relay. 

We help customers use this to help them to secure against business email compromises, phishing, and impersonation.

They're outstanding as a solution. They have a threat-sharing capability so that you get information from all the customers regarding any phishing attack. That's a great feature for us due to the fact that we get information very fast if someone else in the world has seen that email. 

The artificial intelligence is excellent. They are able to use it to recognize phishing emails due to the language used.

The initial setup is very easy.

The solution can scale.

The stability is good.

We've been satisfied with technical support.

The integration with Google Suite needs to be better. it's something they can work on.

The pricing is a bit high.

In the future, I'd like to see digital exposure of the users, such as credential exposure, or this kind of feature.

We've been working with the solution over the past year.

The solution has been very stable. It's reliable. We haven't found bugs or glitches and it doesn't crash or freeze. 

We don't have any issues with scaling - even when dealing with many different customers. 

Our clients range in size. We help companies with anywhere from 50 users to thousands of users. 

We have been satisfied with the solution's technical support. They have been helpful and responsive. 

We have used Darktrace in the past. The reason we are looking into Darktrace is to have another option. However, for us, Darktrace is not so good as IRONSCALES. IRONSCALES is easier to use, easier to implement, and more accurate when it comes to false positives.

We've also worked with Proofpoint and some Microsoft-owned options, however, we haven't worked with anything else. 

The initial setup is amazing. it's not overly complex or difficult at all. 

It was fast, easy, and straightforward to implement and deploy. On average, with the customers, it takes us around 10 minutes to one hour to set everything up, depending on the size of the customer.

We can assist our clients with the initial setup.

We have a yearly licensing contract. The pricing is a bit expensive, and we'd, of course, like it to be lower, however, we really like the product.

We are a customer as well as an integrator. In some cases we sell the solution, in some cases, we provide the customer with the service. We are a security service provider.

We are working with the latest version. IRONSCALES is a universal service cloud for service. So you always have the latest one.

I would recommend the solution to other users and companies. I couldn't believe that it could filter out 35% of the email. We've very satisfied.

I'd rate the solution at a nine out of ten.