PhishOut report button

Turn every suspicious email into a report, in one click

PhishOut puts a report button in Outlook and Gmail. Report a simulation and the reporter gets credit; report anything else and it goes straight to your IT team with the original attached.

What you get

PhishOut report button at a glance

Outlook and Gmail

Classic Outlook on Windows and Mac, Outlook on the web, Outlook mobile, and a Gmail add-on for Google Workspace.

Credit for spotting simulations

The server recognises your own simulations — even after Safe Links rewrites them — and marks the person as reported.

Real threats reach IT

Anything that isn't a simulation is forwarded to your security mailbox as an .eml attachment, and can be moved to Junk.

Your words

Write the messages people see after reporting a simulation or a genuine suspicious email.

Review every report

A Reported Emails page lists every non-simulated report, so you can check each one reached your team.

Privacy-minded

To recognise a simulation the add-in sends only the email's headers, never the body.

How it works

From set-up to results

  1. 1

    Turn it on

    Enable PhishOut for your company, set the button label and the messages people see.

  2. 2

    Deploy

    Upload your company's manifest in the Microsoft 365 admin center, or install the Gmail add-on for your domain.

  3. 3

    Reward reporting

    Reports count toward campaign report rates and each person's grade.

Capabilities

Everything included

Clients

  • Classic Outlook for Windows and Mac
  • Outlook on the web and Outlook mobile
  • Gmail add-on for Google Workspace
  • One manifest per company, no app registration needed

Handling

  • Automatic simulation recognition
  • Forward genuine reports to IT as .eml
  • Optional move to Junk after reporting
  • Reported Emails review page

See ItelliPhish with your own team in mind

Tell us a little about your organisation and we'll walk you through the platform: simulations, training, reporting and the learner experience.