Proofpoint Security Awareness Training

What do you like best?

We often need to scale the length of training modules down. We found many people will not take the training if it is too long. We also like to add our own information pertainng to the phishing campaign we create. The ability to customize the training materials is a huge plus. I also like the ability to create my own custom phishing campaings. I will ofted model my templates off of real world email I find in the wild. I like to call them live fire exercises without the risk of vulnerability. I find my custom templates to work much better than the canned ones Proofpoint offers. However, many of the canned ones are a great starting point to get my mind moving on how I want to test our associates. Creating reports for management is also a breeze. I export to Excel and filter to show what our executives want to see.

What do you dislike?

The community page can be challenging to find what I'm looking for at times. I would like to see a section for just documentation. Having everything come up on the search page takes more time than I have to commit when looking for a subject. Loading users in Wombat also takes a lot of time. I would like to see the loading speed get much faster. I often find myself doing other tasks to fill the time. By the time I get back to Wombat I need to log back in.

Recommendations to others considering the product:

Wombat serves the purpose of what I need it to do. I have never worked with any other product. I may be biased, but I find the phishing campaigns I create to be one of the most enjoyable tasks I complete. I find it fun to test and educate people about the risks phishing can present to users and corporations. I would recommend this product to anyone looking to educate and train with the functionality of customization and extraordinary reporting abilities.

What problems are you solving with the product? What benefits have you realized?

I use it for our phishing campaigns. We want to keep our associates aware of the risk these email present to the company. We normally run 3 campaings per quarter. Two tageting all users and the third targeting the users that fail the first two. If they fail again they are assigned the custominged training we created. Keeping associates informed and trained is the best way to fight the risk of vulnerability phishing threat actors present to out company.