Cofense

Cofense is a phishing focused security company combining phishing training and simulation with phishing remediation and managed phishing detection and response. It maintains a phishing threat database of live threats evading secure email gateways, and publishes a return on investment calculator alongside its own threat reporting.

Treating training and remediation as one product is the distinguishing idea and it inverts how awareness training is usually sold. Most programmes measure success by how few people click a simulated phish. Cofense treats the reporting employee as a sensor: when someone reports a real message, that report should trigger investigation and removal of the same message from every other inbox it reached.

That reframing changes what training is for. The goal becomes reporting rate rather than click rate, which is a more useful metric because a workforce that reports quickly limits damage even when someone does click, and click rate can be driven down by making simulations easy.

The threat database showing real messages currently evading secure email gateways supports the same argument, since it demonstrates that technical controls do not catch everything and the human layer is not optional.