IRONSCALES Room for Improvement

ND
IT Manager at LAVI Light Rail Operation & Maintenance

As far as training awareness, I would give it 6.5 to 7 out of 10. In regards to phishing awareness training, I have been having some issues with the Hebrew aspects of IRONSCALES since most of our company's employees need the Hebrew language, and the phishing awareness in Hebrew is so-so. In addition, the biggest problem that I have is with people who fail since most of them just don't do the training, and IRONSCALES doesn't have some sort of reminder feature.

When someone fails, if they open up the email and push on the link, then they get to a dedicated website which is supposed to give them basic information, e.g., what they could have noticed, then some sort of link to an instructional video, and in the end, training. I just noticed that 95% of the people who click on the email are flunking. For the awareness training, they don't continue to watch the video or do the training. Instead, they just exit the screen and move on.

I would like it if IRONSCALES had some sort of reminder mechanism, meaning IRONSCALES knows if a user completed the training or not. As long as it hasn't been completed, it keeps reminding every so often, alerts the manager, etc. Right now, it is all in the hands of the employee, and not all of them continue the process, which is a shame.

I would like to have more of an ability to intervene in the landing page for phishing awareness, e.g., more design options, change logos, color, and fonts. Right now, it is a template.

View full review »
SV
IT/Marketing at Mason Law and Planning Group, LLC

I would love to see the indication of compromise and how the solution utilizes open source resources. It would be good to see that included in the paid versions. It would be a small addition but add a lot of value for clients. 

View full review »
SW
Vice President of Information Technology at Menin Hospitality

Its UI could be improved. My pet peeve with a lot of these cloud-based systems is that a lot of times, the interface for the management is a little clunky. If you live and breathe IRONSCALES all day long, you'll obviously know where everything is just from muscle memory, but the system is not designed for people to be in it all day long. You're only supposed to occasionally look at it. When things get moved around, it is not necessarily that intuitive. I'm an IT guy, and I can pretty much take the worst UI and figure it out, but the menus and the options in the interface could be a little cleaner graphically. If you have a quick problem that you want to resolve, it takes a little bit of digging in the admin console, whereas it should take a few clicks up front. That's about it, and that's a superficial issue. I understand that it is difficult to refine when you have a lot of information to deliver. It is not an easy job. Microsoft gets it wrong too.

View full review »
Buyer's Guide
IRONSCALES
March 2024
Learn what your peers think about IRONSCALES. Get advice and tips from experienced pros sharing their opinions. Updated: March 2024.
767,667 professionals have used our research since 2012.
Orion Trist - PeerSpot reviewer
Systems Administrator at Cincinnati & Hamilton County Public Library

The simulation and training piece could be improved by having more granularity in terms of scheduling how campaigns are run and allowing people to directly take the training rather than having to go through an official campaign. That's not available yet.

View full review »
Jesse A. - PeerSpot reviewer
Information Technology Lead at SSI Strategy

I really don't see anything to be improved upon just yet. We haven't gotten into the training, although we do plan on using it. As far as email security, as far as community support, I haven't really found anywhere that I feel as though I could comment on making a change for the better.

The only thing that I could say is that some of the reporting features could be better. If I could have just a separate section for specific reports or have the ability to maybe create reports and put them down that left-hand navigation to be able to access them a little bit easier would be great.

View full review »
RW
Director, Information Security at a pharma/biotech company with 501-1,000 employees

In addition to integrated training, they should also have personalized training that you don't have to do as part of a phishing campaign or a simulation. It could be launched separately as a learning management system, a squirm file, or something like that. IRONSCALES is working on that, so hopefully, we'll have that soon.

In the last four or five months, we started a new security operation center. We had to train and onboard the employees. We tried to get IRONSCALES audit logs into our SIM, rather than it going from cloud to cloud, but it does not work right now. I would like to see this as a new feature.

View full review »
MatthewGreen - PeerSpot reviewer
Information Security Analyst at a recreational facilities/services company with 201-500 employees

I speak to the customer success manager regularly, and he does update me on what they're working on. They're always releasing new updates. There is a feature called Account Takeover, which isn't what I want it to be able to do. I know that they're working on that, but when they first started the Account Takeover feature in incident management, it didn't have much information. It didn't have any usability to it. I already had tools in place that were better. 

Some elements of the Phishing Awareness campaign need to be improved. When you're creating a campaign, the visibility over some of the user interface options needs to be improved. They're aware of that, and they have worked on some of them. It is by no means bad, but it could be slightly better.

There are no additional features that I would like to be included in the next release.

View full review »
Hemeshen Govender - PeerSpot reviewer
Technology CyberSecurity at Oryx industries

IRONSCALES should bundle more features together instead of separating them and charging additional licensing fees. The solution’s scalability could be improved.

View full review »
Tamunoibiton Adoki - PeerSpot reviewer
Information Security Officer at a financial services firm with 201-500 employees

Even though they have been continuously improving it, it is not 100% there. We have had a few incidents where legitimate emails were getting blocked, and we had to manually remove those emails from quarantine. It is 90% effective or accurate because, on rare occasions, some emails from customers were not getting delivered. In one or two instances, their emails got blocked by IRONSCALES, and we had to manually remove the emails from quarantine. I would like them to improve their algorithm to avoid flagging genuine emails as malicious. I would also like to be able to whitelist certain email addresses. I'd love to be able to whitelist a particular customer.

It is good for user awareness, but I would love to have more content for our staff that is related to not only phishing but also general awareness. I don't know whether it is a functionality that is already available and we have not subscribed to it, but I would love to be able to send awareness emails to staff on different topics related to email security. They should provide us with more security awareness content. Based on the current trends in the security landscape, they can give us security content in emails that I can easily share with my staff to keep them aware.

I use IRONSCALES' mobile app. The mobile app doesn't notify me about the incidents, but I get email alerts instantly, which are helpful when I'm on the move. I get them a lot on my mobile. I get notifications in the email that an incident has been automatically remediated. If an email doesn't have the specified threshold level, I can quickly log in to the IRONSCALES app and do a manual authentication. It helps a lot when I'm on the go, or I don't have my PC with me. Email alerts are fine with me, but it probably would be good to have push notifications from the mobile app. If someone doesn't have an email client on their mobile, they can get notifications through the app.

View full review »
AF
Endpoint Cyber Security Analyst at a tech company with 51-200 employees

There's room for improvement in the campaign management. IRONSCALES has many built-in templates that I use, but I can also build templates from scratch. However, the interface for creating custom templates needs to be updated. 

I've already contacted IRONSCALES with some features I'd like to see, and they've promised to implement them. For example, let's say I send campaigns using customized tags assigned to each user. If I would like to send a campaign to my colleagues in China, I would send the campaign using a tag that says China. In many cases, new users don't have tags. 

I asked IRONSCALES to add the ability to send campaigns to colleagues that don't have any tags. They promised this feature would be available during the next update.

View full review »
JC
Digital Risk Intelligence Partner at a comms service provider with 1-10 employees

The integration with Google Suite needs to be better. it's something they can work on.

The pricing is a bit high.

In the future, I'd like to see digital exposure of the users, such as credential exposure, or this kind of feature.

View full review »
Buyer's Guide
IRONSCALES
March 2024
Learn what your peers think about IRONSCALES. Get advice and tips from experienced pros sharing their opinions. Updated: March 2024.
767,667 professionals have used our research since 2012.