Your Filters Are Missing 12 Percent Of The Unwanted Emails

Stu Sjouwerman | Dec 15, 2018

Is a false negative rate of 12% a large number or a small one? I suppose it depends on your perspective. If your email security system lets in 12 unwanted emails—whether spam, phishing, impersonations, emails containing malicious links or attachments—for every 100 unwanted emails that arrived at your organization’s doorstep, would you be okay with that?

I will leave it to you to decide based on what you consider reasonable and acceptable. But this is what their most recent Email Security Risk Assessment (ESRA) data collection and analysis has found. They have been doing this for 7 quarters and the numbers are always of concern.

In an ESRA test participating organization’s emails that were deemed safe by their incumbent email security system. The picture ain't pretty. The percentages are pretty consistent with what is being reported by Cyren, so the conclusion presents itself that about 10 to 15% of those emails wind up in your user's inbox. 

msa-screen2
Do you know what's getting through your mail filters?
 

KnowBe4 is excited to announce that now you can use our brand new, innovative Mailserver Security Assessment (MSA), to help you assess your organization’s mailserver configuration settings and check the effectiveness of your email filtering rules.

With email still the #1 attack vector used by the bad guys, MSA helps you to see what types of messages may make it through your filters from the outside.

MSA gives you a quick insight at how your mailserver handles test messages that contain a variety of different message types including email with attachments that contain password-protected, macro zipped, and .exe files or have spoofed domains.

Here’s how MSA works:

  • 100% non-malicious packages sent
  • Select from 30+ automated email message types to test against
  • Saves you time! No more manual testing of individual email messages using MSA's automated send, test, and result status
  • Validate that your current filtering rules work as expected
  • Results in an hour or less!

Find out now if your mail server is configured correctly, many are not!

Test My Mailserver!

Topics: Phishing

Secure the Digital Workforce: Human + AI

KnowBe4 empowers the modern workforce to make smarter security decisions every day. Trusted by more than 70,000 organizations worldwide, KnowBe4 is the pioneer of digital workforce security, securing both AI agents and humans. The KnowBe4 Platform provides attack simulation and training, collaboration security, and agent security powered by AIDA (Artificial Intelligence Defense Agents) and a proprietary Risk Score. The platform leverages 15 years of behavioral data to combat advanced threats including social engineering, prompt injection, and shadow AI. By securing humans and agents, KnowBe4 leads the industry in workforce trust and defense.