Proofpoint’s ZenGuide offers a comprehensive platform for improving email security and communication management, catering specifically to teams requiring seamless integration with existing IT infrastructures.
| Product | Mindshare (%) |
|---|---|
| Proofpoint’s ZenGuide | 5.3% |
| KnowBe4 | 12.7% |
| Riot | 7.4% |
| Other | 74.6% |
Designed to enhance cybersecurity efforts, Proofpoint’s ZenGuide addresses key concerns in email security and communication oversight. It effectively protects businesses from threats like phishing and spam. Its integration capabilities ensure streamlined operations without requiring extensive system overhauls, aiding IT departments in maintaining stability while enhancing security.
What are the key features of Proofpoint’s ZenGuide?In sectors such as finance and healthcare, adopting Proofpoint’s ZenGuide often aligns with stringent regulatory requirements, ensuring both compliance and enhanced security measures. Its implementation in these industries supports critical data protection while maintaining system efficiency.
Proofpoint’s ZenGuide was previously known as Proofpoint Security Awareness Training, Wombat Security Education Platform.
Carnegie Mellon University, Royal Bank of Scotland, City of Garland, Texas
| Author info | Rating | Review Summary |
|---|---|---|
| Project Manager at Fives Syleps | 4.0 | I've used Proofpoint's ZenGuide extensively for cybersecurity awareness and phishing simulations; it's effective but could improve user-level scoring and multi-language support. Customer service is responsive, though some issues remain unresolved. Overall, I’d rate it 8 out of 10. |
| IT Security at a manufacturing company with 201-500 employees | 4.0 | I use Proofpoint's ZenGuide for company-wide security awareness training and phishing simulations. It's customizable, allowing branding on training material. Though new to it, I find it effective and easier to set up than alternatives like KnowBe4, with comparable pricing. |
| Chief Information Security Officer at a manufacturing company with 10,001+ employees | 4.0 | Our organization uses Wombat/Proofpoint for global security awareness training, significantly reducing phishing click rates due to heightened user awareness and good SSO integration. We would benefit from improved reporting and archiving features for regulatory and management needs. |
Proofpoint's ZenGuide is a solution that we have been working with for a long time.
We use it each month for awareness, DMARC, and email security.
Proofpoint's ZenGuide is used for the awareness component and we utilize it for cyber sensitization every month, as well as for fake phishing campaigns.
Proofpoint's ZenGuide analytics provides many useful reports that we can access on the dashboard. It is good, but sometimes we want to see a cybersecurity score directly assigned to the users.
They have made good improvements, but there are still some limitations.
For example, we have many entities and want each entity to have their own statistics. Additionally, in the fake phishing part, there is not one type for one language per campaign, as we have many languages. For running fake phishing campaigns, we are obliged to create specific campaigns for specific languages, and consolidation is not easy.
It helps us make awareness activities, but it is not easy to evaluate the cybersecurity score for each user. If I take one user and compare their status six months ago to today, I want to know if their maturity score has increased or not. Proofpoint's ZenGuide has some limitations in that aspect. This function would be very important if implemented. It gives global statistics which is good, but sometimes we want to focus on each user, going through the company and groups.
I want to know what a user's level was six months or one year ago compared to today across different cybersecurity activities in Proofpoint's ZenGuide. This includes monthly awareness, cybersecurity training, fake phishing campaigns, communication, and reporting malicious or suspicious emails. I want to have one score combining all these activities for each user to determine their global level.
Having multi-language fake phishing campaigns would be beneficial. Currently, it is just one campaign per language, making consolidation difficult. In the future, for one campaign, the template should correctly assign the language type depending on the language used by the user.
Proofpoint's ZenGuide is a solution that we have been working with for a long time.
I did not notice performance issues. In the past, we encountered some issues that coincided with scheduled fake phishing campaigns. During those times, we observed dysfunctional issues with PhishAlarm. This happened twice, and the PhishAlarm button had problems, but it has been fixed. I regularly check for issues concerning our tenant, and we receive informative messages, which is beneficial. We can then report the activities we want to do because of the incidents.
We have a customer success manager, and we have many reviews together to examine solution difficulties and how they can help us. They can be limited in some aspects. When we make a specific need, they report it to the technical group internally in Proofpoint.
For different cases, we address issues to Proofpoint support, and they respond effectively. I would rate them nine out of ten, though we have some unresolved issues. We are working on that, and a ticket has been opened by our customer success manager to address issues with attachment type fake phishing campaigns. We had problems with false positives in this type of campaign on our tenant. Despite past attempts to fix the issue, it was not completely resolved.
Positive
I have not tested many solutions; Proofpoint's ZenGuide was the first one I used extensively. We are exploring solutions that can resolve our needs at the group level. One limitation I observe is the content; sometimes we have good content, but it is first in English. For our company, which uses many languages, the translation time takes longer, and when translations become available, the need for that content has often passed. An improvement in translation time for different content would be beneficial. I understand that Proofpoint is an English-based solution, but in our context, we need to address the needs of people using other languages.
We were trying to make comparisons between solutions to determine which would work better for our group. We have not yet used CyberGuru extensively; it was just for testing purposes.
The metrics we currently use include tracking whether users have completed their training, if they clicked on fake phishing campaigns, and if they are reporting suspicious or malicious emails.
One significant improvement would be having multi-language fake phishing campaigns. Currently, we must create separate campaigns for each language, making consolidation difficult. In the future, having one campaign where templates automatically assign the correct language type for users would be more efficient.
My overall rating for Proofpoint's ZenGuide is 8 out of 10.
Positive
Within our global IT Security Strategy, user awareness training is a very important task.
We train our employees in all locations with different languages. We use the functions for training, phishing tests, and security surveys. We have a global roadmap with defined dates when which training will be executed.
All of our users have to participate and run a test at the end of each training. We also provide GDPR training for our employees worldwide, which is very important.
An additional feature that we use is PhishAlarm.
Wombat has given our users a heightened sense of security awareness. As a result, the click rate on phishing emails has dropped significantly. Our users are able to do free training on their own for each section that we provide. Moreover, they are able to complete the training more than once.
Three times per year, we conduct mandatory training and the success rate is improving over time. This could also be seen during the yearly CyberStrength assessments that we are running.
The big benefit is that all users are much more careful when an email is received.
Most valuable is the SSO integration with our AD, so the users can employ our federation service to log in. Also, the synchronization of new and outdated users is working fine.
In addition, we have the challenge that an anonymized evaluation of user information is necessary for individual locations. This can also be implemented without any problems.
Additionally, there are a lot of videos inside the training material. We are placing these inside our intranet for additional training or information about security risks.
As we have to report the results of each training to different recipients, it will be very helpful when the reporting system is improved. We would like to create reports for local IT leaders in a different way, more suitable for upper management.
We need to have archive functions for older training in order to satisfy requests from local regulators.
We have been using Wombat/Proofpoint Security Education Training for two years.
We received very good pricing, as we are also working with the Proofpoint spam appliances. Both tools work hand in hand.
We evaluated KnowBe4 and SoSafe.
It is a very good tool to improve user awareness regarding cyber-attacks. The Wombat Security Education Platform also brought us administrative and organizational benefits, as the users are the most important link in the security chain.
