IRONSCALES Reviews

I've used IRONSCALES in multiple scenarios. I first used the solution in the Asia-Pacific region to review suspicious phishing emails in the mailbox instead of reviewing them manually. The primary goal was to have an automated solution for suspicious or weird emails. It automatically reviews them and maybe provides some kind of response. That was our first goal with the product. It reviews the emails, attachments, and links at the same time.

There is an automated piece where people can send an email or forward the email to a review team. It adds an additional mailbox layer on top of our spam quarantine. IRONSCALES captures everything our existing spam quarantine couldn't capture. It also helps us with additional phishing campaigns. 

IRONSCALES has what they call a "911 mailbox" that lets your organization share information about threats. It sets up an address like phish@whateverorganization.com where everyone in the company can forward suspicious emails. IRONSCALES has access to that account to review the emails. All of the phishing emails or anything suspicious goes in that queue.

IRONSCALES will automatically categorize mail if something looks legitimate based on what the admins have already reviewed. It saves us a lot of time. We previously had a regular mailbox to accept suspicious mail from members of organizations. It was tough because everything was all manual, and we had to review a ton of emails some days. Now, people just send everything to the 911 mailbox or click on the "report phishing" button.

If employees have any other questions, they can message or call me. IRONSCALES saved me tremendously because I don't have to worry about manually reviewing that mailbox anymore. Sometimes, the email doesn't reach the queue, and I wonder what's going on. It's probably due to multiple forwards. The phishing campaign assimilation also helps.

We like IRONSCALES because it's easy to use and saves us some time. The reporting is good because it has all these tracking features and metrics. It's still evolving, but it's great to have information about automated detection and response, phishing campaigns, simulations, etc. 

I would say the most valuable feature is what they call Themis. It's like a virtual analyst that uses the decisions that system admins make to generate a score for whether an email is legitimate, spam, or phishing. It gets better based on the decisions that we make over time. The automation piece is great as well. The integrated approach of email security combined with employee awareness training is excellent. 

The AI and machine learning capabilities have come a long way since I first started using the solution. At the same time, any technology is only as good as the team's ability to use it. It's still evolving, and I think machine learning will become increasingly helpful because the more it does, the more accurate it'll be. In the beginning, there will be a lot of false positives, but it will become better as you provide more feedback and I think a lot of security teams are trying to do more of that too.

Integration is also crucial because there isn't a one-size-fits-all solution. Right now, I need to go to 10 different portals to check something, like a security incident. Integration with everything is always useful.

IRONSCALES has made improvements to its automated detection and response. If your company gets a targeted phishing email, there are two options. You have the option to leave comments and feedback in a form, and that's only limited to the people in the company. There's also a secondary form that's can be externally shared with existing customers or anyone with access to the IRONSCALES API.

Automated detection and response are good, but it depends on the specific email that comes in. I can only speak for my company. which is in the field of life sciences and healthcare, but we get all the typical phishing emails.

Microsoft has many domains, like outlook.com, live.com, microsoft.com, and 365 office support. A lot of phishing campaigns use these domains. They know nobody can block these domains as most people use Microsoft, UEX, or Mac shop. Phishers disguise themselves using a compromised legitimate business email account and start sending emails that say: "Please log in here." It looks like it's going to the organization's Office 365 website, but it's going to the other compromised organization. People are more likely to trust that. 

IRONSCALES also has a mobile app on Android and iOS. We mostly used it when we had a bigger team. I've been using it since the earliest version when they only had a web interface but not the official Apple or Android or mobile version. It's great for following up when you may not have access to a desktop computer or laptop. 

It's great for getting a sense of what specific phishing or incidents or events are coming into the IRONSCALES dashboard portal. When you need to do more digging, you probably don't want to look at the application on the phone because it's too small, and you have to dive in to see the email headers. I use it for limited purposes, like quickly checking an email to see if it looks legitimate, so I can re-categorize it. I need to go into the computer if it's anything more.

In addition to integrated training, they should also have personalized training that you don't have to do as part of a phishing campaign or a simulation. It could be launched separately as a learning management system, a squirm file, or something like that. IRONSCALES is working on that, so hopefully, we'll have that soon.

In the last four or five months, we started a new security operation center. We had to train and onboard the employees. We tried to get IRONSCALES audit logs into our SIM, rather than it going from cloud to cloud, but it does not work right now. I would like to see this as a new feature.

I've been using IRONSCALES for more than five years. I was one of the first 100 IRONSCALES customers, and they've added a lot of the features that I requested.

IRONSCALES is highly stable. It's a growing ecosystem for this company. IRONSCALES plans to introduce integrations with learning management systems and various malware companies, like CrowdStrike and Carbon Black. Now, they also use their own algorithm to determine malicious payloads. That will be a useful feature. 

I rate IRONSCALES support nine out of ten. I think they've improved greatly. I've been with them since the beginning and worked with all the founding members of the company. There's one person I still work with who is pretty high up in the company now. She created most of the documentation. I work with many of the same salespeople and support. 

Many years ago, they had no U.S. office, so we had to contact them in Israel, and there was a significant time difference. They opened an office in Atlanta, and they've developed an official knowledge base. They also have a customer portal and designated customer success managers. 

Positive

I used a few solutions and did some PoCs back in the day. Most of the solutions I've used were basic spam filters. I was the one who introduced IRONSCALES to our company. We used Mimecast for spam quarantine and our primary and secondary MX records. It does its job. 

We used Mimecast for spam filtering and email archives. It's tough if you need to troubleshoot across different infrastructures or technology. That's the advantage of IRONSCALES. In the past, I had to go through every system and check the Microsoft Outlook program to see if it was 32-bit or 64-bit and install it one by one. It's straightforward just like any other company that uses Office 365 extensions. You only need a standard account that can install additional applications on Office 365, and you can define users. After that, you can do that to all global users.

I was involved in the deployment from the beginning, from the architecture design and gathering requirements to the final setup. When I first deployed it, I was working in China, so anything that relies on Google wasn't going to work. It works in Hong Kong, but it doesn't work in mainland China because of the Great Firewall. This was eight years ago when IRONSCALES was extremely new. When I originally deployed it, we wanted to get this to every user.

At the time, we didn't have the option to deploy this through Microsoft Office 365. We had to go to every machine or a software installer to deploy it. That took a little more time. It didn't prevent the project plan, but it was an issue because installing the wrong extensions in Outlook can crash the program. This was back in the day, but now it's easy. 

When we didn't have the Microsoft Office 365 plugin capability or an API mailbox layer, it probably took us about a week to test it because we had to install it on all the computers. With the Office 365 capabilities, we could probably do it in a day or two because it's all tied to Office 365, and we can define it according to the group.

IRONSCALES doesn't require us to touch the client assets anymore. We had to install it one by one in the past, but now we only need to have administrative rights on Office 365 and we can just deploy it as a new application. We can select a few users or deploy it to all users.

A few years ago, I looked at two other alternatives, but the market has probably changed since then. I checked out other Mimecast solutions because we had Mimecast deployed. They didn't have some features that IRONSCALES has. They might have similar features now, but I don't trust them until I actually try them myself. Mimecast has many of the features that IRONSCALES offers, like automated detection and response as well as the phishing campaign, but I don't know if it works as well as IRONSCALES. 

Even though Mimecast is based closer to home in Lexington, Massachusetts, it was tough to get tasks done in terms of feature requests. When I first evaluated it about four years ago, Mimecast didn't have as much functionality. Mimecast works by scrambling every link. That's how they do their threat response. It's encrypted, so you need to decrypt or read anything Mimecast sends. I was the one who worked with IRONSCALES and Mimecast to unencrypt everything.

The email comes into Mimecast and goes to IRONSCALES because IRONSCALES is on the API. We started to get emails from Mimecast that were encrypted and couldn't read the link. We could do it when working with both IRONSCALES and Mimecast and now they do that for all the customers.

I rate IRONSCALES nine and a half out of ten. Before deploying any solution, we always research user feedback, check Gartner, etc. Ultimately, it all depends on how much you can afford, but Gartner's gives you a good list to choose from. 

You can also ask IRONSCALES directly for some customer references. Of course, you don't want to only talk to customers who have positive feedback on IRONSCALES. Ask other users in your own network: "Hey, why did you stop using IRONSCALES?" That's what I like to do, but I often ask the vendor to arrange that. 

I worked with IRONSCALES for about eight years and they've grown in size. There were only around 25 to 50 people at the company when I started working with them. After more than doubling in size, they're still highly responsive to feature requests. I also occasionally speak with their product development teams. If you ask for a feature based on your needs or environment, they'll usually add it fairly quickly— sometimes within three to six months depending on the feature request.

The main challenge that we wanted to solve with this solution was the email-based attacks. They are a major threat for our staff and customers. So, we are using this solution for protection from threats and remediation of phishing emails. We also use it for simulation to train our staff to recognize a phishing email. For those users who click on the phishing email, we provide the training content to improve their awareness.

Its artificial intelligence and machine learning capabilities are really important and helpful in saving time. It saves a lot of hours, and we don't have to do a manual review of each incident or email. Without IRONSCALES, we will have to rely on our staff to report emails that might be malicious, but you can't always depend on the staff to do that.

It is an important part of our security infrastructure. It gives us confidence that we are protected from email threats.

It allows us to report an email as spam. If our staff suspects an email to be malicious, they can report it as spam.

It is helpful in assessing the awareness level of our staff. We compare the metrics of every new phishing campaign with the metrics of previous campaigns. We also determine if the awareness training we are conducting for our staff is effective. We can see all the data. If a lot of people have clicked on the phishing email, we get to know that we need to step up our efforts on phishing awareness.

Its automated detection and response capabilities save a lot of time. We are a financial institution, and we get quite a lot of emails. If someone has to manually review and investigate each alert or email event, it would be a full-time job. On a daily basis, it would take more than three hours of analysis work. A financial institution like ours receives quite a lot of emails from customers and internal staff, and IRONSCALES saves a lot of our time. We don't have to dedicate someone to manually review alerts or emails.

The time that we have saved by not having to manually review each incident can now be used to focus on other tasks. 

It has also helped reduce the number of people or analysts needed to deal with and respond to email incidents.

It allows us to customize the automated detection and response capabilities. Each email that IRONSCALES detects has a confidence level rating. For example, it has 90% or 70% confidence in a phishing email. We have the ability to configure the threshold for automatic remediation. For example, we can say that for emails with a 70% or higher confidence level, it can automatically remediate, but for emails with a 69% confidence level, it should raise an alert, and we'll manually investigate. It gives us the ability to raise or reduce the threshold.

AI-driven phishing detection and incident remediation are valuable. It saves time from having to do manual analysis and investigation, and we also get alerts for phishing emails.

Even though they have been continuously improving it, it is not 100% there. We have had a few incidents where legitimate emails were getting blocked, and we had to manually remove those emails from quarantine. It is 90% effective or accurate because, on rare occasions, some emails from customers were not getting delivered. In one or two instances, their emails got blocked by IRONSCALES, and we had to manually remove the emails from quarantine. I would like them to improve their algorithm to avoid flagging genuine emails as malicious. I would also like to be able to whitelist certain email addresses. I'd love to be able to whitelist a particular customer.

It is good for user awareness, but I would love to have more content for our staff that is related to not only phishing but also general awareness. I don't know whether it is a functionality that is already available and we have not subscribed to it, but I would love to be able to send awareness emails to staff on different topics related to email security. They should provide us with more security awareness content. Based on the current trends in the security landscape, they can give us security content in emails that I can easily share with my staff to keep them aware.

I use IRONSCALES' mobile app. The mobile app doesn't notify me about the incidents, but I get email alerts instantly, which are helpful when I'm on the move. I get them a lot on my mobile. I get notifications in the email that an incident has been automatically remediated. If an email doesn't have the specified threshold level, I can quickly log in to the IRONSCALES app and do a manual authentication. It helps a lot when I'm on the go, or I don't have my PC with me. Email alerts are fine with me, but it probably would be good to have push notifications from the mobile app. If someone doesn't have an email client on their mobile, they can get notifications through the app.

I have been using this solution for just under a year. I joined the department in September, and I started using the product in September last year.

It is a cloud-based solution. So, I expect it to scale well regardless of the number of users we have. We don't expect to experience a drop in performance. Cloud-based solutions generally scale well.

We use it for every email account we have. We currently have between 700 to 800 users, and it is being used for all our departments, users, and group mailboxes.

We definitely have plans to increase its usage. We are currently growing, and we are expecting a significant addition to the number of users in Q3 and Q4.

We haven't had an issue so far. So, we haven't contacted their support. During implementation, we got full support from them, and we loved the support we got. We have no issues with their support. I would rate them a nine out of ten.

Positive

I am not aware of any other solution being used previously. IRONSCALES was already in the company when I joined.

It was already in place when I joined. In terms of maintenance, it doesn't require any maintenance from our end. All we have to do is integrate our Outlook email server with IRONSCALES, and that's it. 

We have definitely seen an ROI. The amount that we pay for licenses is definitely way less than what we would pay if we are hit by a ransomware attack. So, it definitely provides a return on investment.

We were able to realize its benefits immediately after the deployment. We started analyzing emails and getting alerts right from the time it was activated. You have to do a bit of tuning for the threshold, but the effect was immediate. We didn't have to wait even a bit for it to be effective.

Considering the value it provides, it is definitely worth the cost. We don't have to do manual analysis and remediation of phishing emails, which saves us a lot of hours.

Its licensing is based on the number of users being supported and the number of email addresses being protected. I'm not aware of any additional costs.

I would definitely recommend the product. It is definitely worth the investment.

I would rate it an eight out of ten because I would like to have some of the features. We don't have them currently, and I'm not sure whether these features are available with an additional license.

I use the solution in my company to stop phishing and spam efficiently and automatically.

The most valuable features of the solution are that it is easy to set it up, install, and manage the product.

I think maybe on the side of the awareness training, the tool can improve a little more information and have some other languages since even though English is good, Spanish is not so good. The tool can improve the content in Spanish and other languages. The tool supports 15 to 16 languages, but the content it uses in the training in Spanish has certain limitations.

I have been using IRONSCALES for a year. My company is an end user of the tool.

It is a very stable solution as it is software that runs in the cloud. I didn't have any outages with the tool.

It is a very scalable solution. I know the tool scales up very well. Some of our customers have thousands of use of mailboxes. In my case, only one hundred users use the tool. It requires very little installation, but I know thousands of customers.

The technical support offered is very good. The tool's support team attends very quickly to the support tickets raised. The technical support is very good at resolving issues.

Positive

I have used a security gateway from Forcepoint, which was a lot more complicated to maintain and set up. Forcepoint decided to discontinue its solution for email gateway, and then it decided to introduce another solution in the market that includes AI.

The product is easy to set up as it is an API-based solution. With IRONSCALES, you don't have to do anything on the platform. You just need to do the integration and the connection with Office 365 tenants, and that is it.

I rate the product's setup phase as a ten out of ten.

The solution can be deployed by one person from IRONSCALES, who will create the tenant for me. Then, I do the rest of the setup process, which includes three or more steps, but it can be done in minutes.

The solution can be deployed in 15 to 30 minutes.

The product is available as a middle-priced tool. I think it is not the cheapest solution. There are other solutions apart from IRONSCALES that are more expensive, while some are a little bit more cheap, but they are not available with the same capabilities.

The automated response capabilities are very accurate for detecting suspicious activities and suspicious languages used by the attackers.

The only people needed when using the tool are to take care of the console and an analyst. In some cases, some incidents require an analyst to complete the analysis of the email. I don't create incidents that can be automatically resolved by AI. I create incidents that need a review from an analyst. The only people who need to be aware of the incidents and where such details should not be classified is when it comes to analysts. I don't need to do any maintenance process for the tool every day. Everything is available as a service, so I don't need to do anything to maintain the platform apart from dealing with the non-classified incidents.

The tool uses a lot of AI technologies to detect the accuracy of the email, especially to filter out phishing emails. It not only detects phishing emails but also provides a preview of who the attackers are before we receive the real phishing email. It is not just to detect phishing emails but also to detect the intent of the attacker in creating a phishing email.

I rate the tool a nine and a half out of ten.

Phishing emails and spam are challenges companies of all sizes face. IRONSCALES acts as a second layer on top of the Microsoft mail relay we use. It scans every email coming into our organization and automatically checks the validity. We also check manually in some cases.  

While we mainly use it for the mail relay, IRONSCALES can also act as a phishing campaign simulator. We can send simulated phishing emails to our colleagues to test their readiness. 

Our entire organization uses IRONSCALES across many locations worldwide in South America, Asia, Europe, and North America. All sites use the system to protect the mailboxes and just act as a mail relay. We have about 8,000 users.

The biggest benefit is that we get fewer phishing and spam emails, so using IRONSCALES has made our environment much safer. While I wasn't here when they deployed the system, I believe they saw benefits right away.

The feature I use the most is the main relay. IRONSCALES was designed around that, but phishing simulation management is also a handy tool that I don't see often. Combining these features enables a user to be more comfortable with the simulations. 

For example, one of IRONSCALES' features is an Outlook extension that lets you report phishing emails and other stuff that looks malicious. In our training, we encourage our colleagues to click this button to report as many emails as possible. Reporting suspicious emails should become part of our employees' everyday routine. The training campaign usually helps us catch our colleagues outside their comfort zone to see if they're paying attention to all these suspicious emails they receive.

AI and machine learning are essential components of the product. It automatically can identify phishing emails and classify them according to several factors. I'm not sure how it works, but there's a ranking system that ports onto every sender and email we receive. This artificial intelligence can conduct a thorough search that's sometimes better than humans. 

The automated detection and response feature handles most of the job. I only need to classify a few emails manually each day. Artificial intelligence does everything else automatically for me. Without this technology, we would have to sort 1,000 emails each day manually. IRONSCALES cuts that down to maybe 50.

The IRONSCALES mobile app is convenient to use outside working hours. It's not my primary tool, but it's nice not to need to open your laptop whenever you would like to classify something. You can use the app to check up on the system. 

There's room for improvement in the campaign management. IRONSCALES has many built-in templates that I use, but I can also build templates from scratch. However, the interface for creating custom templates needs to be updated. 

I've already contacted IRONSCALES with some features I'd like to see, and they've promised to implement them. For example, let's say I send campaigns using customized tags assigned to each user. If I would like to send a campaign to my colleagues in China, I would send the campaign using a tag that says China. In many cases, new users don't have tags. 

I asked IRONSCALES to add the ability to send campaigns to colleagues that don't have any tags. They promised this feature would be available during the next update.

I've been using IRONSCALES since I started working here at my current company about a year ago. 

IRONSCALES is stable. I can't think of any outages. 

We can grow as much as we want. We are growing right now and adding new sites to our company.

I rate IRONSCALES support 10 out of 10. They provide support in less than 24 hours. I have never had a problem with them, and they always solve my issues. 

Positive

The company previously used Microsoft ATP, which required a lot of manual work. I was told that they used to spend a lot of time manually sorting the emails by phishing, spam, etc. The company switched to IRONSCALES because they wanted something to help automatically sort stuff and get faster results.

Though I wasn't here when IRONSCALES was deployed, I saw the system requirements and a basic guide to implementing the system. It was straightforward. 

After deployment, it doesn't require much maintenance. It does everything automatically as well. IRONSCALES supports older versions of Exchange and local Exchange servers that require manual updates of the add-ons they use to protect the mailboxes, but we don't use those services.

I rate IRONSCALES nine out of ten. Some improvements to the campaign management might bring it up to ten. It's a great system. I would recommend it if you only need a mail relay. On top of that, there are additional advantages of using the system, like the campaign manager that complements the mail relay. 

We help customers use this to help them to secure against business email compromises, phishing, and impersonation.

They're outstanding as a solution. They have a threat-sharing capability so that you get information from all the customers regarding any phishing attack. That's a great feature for us due to the fact that we get information very fast if someone else in the world has seen that email. 

The artificial intelligence is excellent. They are able to use it to recognize phishing emails due to the language used.

The initial setup is very easy.

The solution can scale.

The stability is good.

We've been satisfied with technical support.

The integration with Google Suite needs to be better. it's something they can work on.

The pricing is a bit high.

In the future, I'd like to see digital exposure of the users, such as credential exposure, or this kind of feature.

We've been working with the solution over the past year.

The solution has been very stable. It's reliable. We haven't found bugs or glitches and it doesn't crash or freeze. 

We don't have any issues with scaling - even when dealing with many different customers. 

Our clients range in size. We help companies with anywhere from 50 users to thousands of users. 

We have been satisfied with the solution's technical support. They have been helpful and responsive. 

We have used Darktrace in the past. The reason we are looking into Darktrace is to have another option. However, for us, Darktrace is not so good as IRONSCALES. IRONSCALES is easier to use, easier to implement, and more accurate when it comes to false positives.

We've also worked with Proofpoint and some Microsoft-owned options, however, we haven't worked with anything else. 

The initial setup is amazing. it's not overly complex or difficult at all. 

It was fast, easy, and straightforward to implement and deploy. On average, with the customers, it takes us around 10 minutes to one hour to set everything up, depending on the size of the customer.

We can assist our clients with the initial setup.

We have a yearly licensing contract. The pricing is a bit expensive, and we'd, of course, like it to be lower, however, we really like the product.

We are a customer as well as an integrator. In some cases we sell the solution, in some cases, we provide the customer with the service. We are a security service provider.

We are working with the latest version. IRONSCALES is a universal service cloud for service. So you always have the latest one.

I would recommend the solution to other users and companies. I couldn't believe that it could filter out 35% of the email. We've very satisfied.

I'd rate the solution at a nine out of ten.