ShieldIQ
Browsing as Alex Admin (admin)
Sign inSign up

Admin · Mail add-ins

Report-phishing buttons for Outlook & Gmail

Install these once; every employee can report a suspect email with one click. Reports hit /api/v1/report-phish — if it's a ShieldIQ simulation, we mark the send as reported and the dashboards update. If it's a real phish, we log it for your security team to review.

← Back to admin

Outlook (Microsoft 365, Exchange)

Admin install (recommended)

  1. Open the Microsoft 365 Integrated apps console.
  2. Click Upload custom apps → Office Add-in → Upload manifest file.
  3. Upload manifest.xml.
  4. Choose which users / groups get the add-in. Save.
  5. Deployment takes 6–24 hours to propagate across Exchange.

Single-user sideload

  1. Open Outlook on the web.
  2. Click Get Add-ins → My add-ins → Add from file.
  3. Choose manifest.xml. Confirm.
Download manifest.xmlPreview taskpane

Gmail (Google Workspace)

Install via Apps Script

  1. Open script.google.com and click New project.
  2. Paste the contents of Code.gs into the editor.
  3. Click the gear ⚙ → Show "appsscript.json" manifest. Replace the manifest with the block at the bottom of Code.gs.
  4. Deploy → Test deployments → Install.
  5. Open any Gmail message — the ShieldIQ card appears in the right pane.

For org-wide deploy, publish the Apps Script project to your Google Workspace Marketplace (internal) and have your admin push it.

Download Code.gs

What happens when someone clicks Report

  1. The add-in posts a small envelope to /api/v1/report-phish with sender, subject, and (when a ShieldIQ sim link is in the message) the sendId.
  2. If the sendId matches a ShieldIQ simulation, we flip the send's outcome to reported immediately. The user's resilience score goes up and the dashboards update.
  3. If no simulation matches, we log a real-world phish report in the audit log. Your security team sees it under Audit log, filtered to action realworld.phish_report.
  4. The user gets a friendly toast either way.