Capture the concern.
An employee flags a message and explains what felt wrong.
Phishing Reporter
An employee notices.
Security understands.
Employees report in one click, in the inbox they already use. The plugin is built into the platform, so every report is analysed and explained. See supported mail platforms.
From concern to context
Keep the human signal
with the technical evidence.
The employee may notice an unusual request, a change in tone or a business process that does not make sense. That context belongs beside sender, authentication, URL, attachment and reputation evidence.
The Reporter plugin is part of the platform, not a separate tool. Every report goes straight into analysis against multiple threat-intelligence and reputation sources, the employee’s record and your reporting, across every tenant you manage. A reviewer sees the concern and the signals together, then chooses the next step. Explore KeenSec Reporter AI Analysis and AI Reporting Intelligence.
Organize the available evidence.
Review identity, message intent and technical signals together.
Keep the reviewer in control.
Verify, investigate or escalate based on evidence and team policy.
Evidence is not a yes / no switch
A verdict should explain
what it knows: and what it doesn’t.
Review requiredAuthentication passes.
Authentication passes.
The request still warrants a check.
The sender domain authenticates, but the display identity and payment-change request do not establish legitimacy. Verify through a known contact.
An authentication pass confirms a technical relationship. It does not prove that a request is safe.
Illustrative product experience · Sample data
Questions worth asking
Before you evaluate.
Which email clients and integrations are supported?
A verified compatibility list has not been supplied. Confirm supported clients, deployment methods, reporting permissions, supported message formats and triage integrations before rollout.
Does an AI explanation replace investigation?
No. An explanation helps a reviewer interpret available evidence. Missing attachment results, incomplete reputation data or conflicting signals should remain explicit.
Will KeenSec remove reported messages automatically?
This site does not claim autonomous remediation or mailbox deletion. Confirm response actions and permissions with the product team.