The three different plugins offered by Portal have different capabilities and limitations, described in the table below.
Check out this Reporting PDF for a shareable version!
KillPhish | KillPhish Lite | Report Phishing COM add-in | |
Works on... |
Microsoft 365 accounts (OWA, Outlook desktop, and Outlook app for Android/iPhone) |
Gmail/Google Workspaces | 64-bit Outlook desktop app running on a 64-bit Windows machine |
Where does the reported message get sent? | Reporter email address and additional reporter addresses | Reporter email address and additional reporter addresses | Reporter email address and additional reporter addresses. |
Can the plugin give the email a score? | Yes | No | No |
Can the plugin delete the message after it is reported by the user? | Yes | No | Yes |
Can the plugin log that a user reported a simulated phishing email on Portal campaigns? | Yes | Yes | Yes |
Is the reported message shared with any other entities? | No | No | No |
Supported on Shared mailboxes? | Yes, as of August 22, 2023 (KillPhish will not work on shared mailboxes if it was deployed prior to this date; you would need a new deployment to get it to work in that case) | No | Yes |
Notes | Providing a tenant id is necessary for the add-in to work on mobile devices as well as some versions of Outlook. | The add-in cannot be whitelabeled. It cannot collect original message headers. | The COM add-in only works on 64-bit Windows machines. It is not compatible with remote terminal servers. It is not supported on the EU instance. |