Skip to main content
​

​
Sync your users with SCIM

A simpler, more controlled way to keep users in sync with your identity provider. We have setup instructions available for Microsoft, and it also opens up identity providers such as Okta and OneLogin. See SCIM.

​
Educational landing pages refresh

Users interacting with our phishing simulations will notice a refresh of our standard educational landing pages. The update includes new visuals, and more tips around phishing. See Micro-learnings.

​
New documentation site

All documentation around setting up and managing the platform, including our platform manual and whitelisting instructions, can now be found at docs.outkept.com.
​

​
Track awareness with monthly reports

Automatically send a monthly overview of the most important learning and phishing statistics to the organisation members of your choice. Activate it under Settings → Campaign.

​
Check SSO status of members

You can now see whether other admins have Single sign-on (SSO) enabled. Find the overview in the Members tab.

​
Name newly created spear phishing emails

Give spear phishing emails a custom name instead of defaulting to the subject line. Set it during the phishing creation process.

​
Use the new Polish phishing domains

New Polish domain names are now available to more closely match local context. Activate them under Settings → Campaign, and whitelist them first. See IP addresses and domains.

​
Follow OutKept courses in your LMS

OutKept courses now run in any LTI-compatible LMS. Get in touch at support.outkept.com for setup details.
​

​
Customise course invites

Edit the emails users receive when they are invited to a new course. Add your company logo, customise the text, and build the email layout using HTML.

​
Export course progress

Export organisation-wide progress for a specific course to a CSV file. Go to Learning, click the cog icon for the course, and select Export Progress.

​
Check admin 2FA status

You can now see whether other admins have two-factor authentication (2FA) enabled.
​

​
Customise feedback emails

Edit the emails that users get after reporting an email, or replying to a simulation. Add your company logo, change the text, and build your own layout in HTML.Find it under Customisation → Content.

​
Forward reported emails with .eml files

Reported non-OutKept emails that are forwarded to a monitoring inbox now include the .eml files, making analysis of potentially real phishing mails easier.

​
Follow courses with a refreshed UI

Users now experience a cleaner layout, smoother flow, and can track their progress when following a course.

​
Update Outlook report phishing integration

Microsoft recently changed the integration requirements for the Outlook Report Phishing button. As a result, previous configuration is no longer valid and may prevent phishing emails from being reported correctly.Update your settings, or share the instructions with your client, to ensure the forwarding of potential phishing mails remains accurate. See Outlook report button.
​

​
Improved CSV exports

Tags and placeholders are now included in CSV exports from Personal impact statistics.Get an overview of your exports and receive in-platform and email notifications when they are ready.

​
Improved organisation navigation

The organisation switcher in the user menu (top right) now includes a search bar and updated icons to clearly distinguish partner, client and main organisations.

​
Automatically sync Google Workspace users

Users can now be synced automatically via Google Workspace, simplifying data management.Set it up during onboarding or anytime under Manage your data → Import data. See Importing your data.

​
Use Google DMI to bypass email filtering

Due to recent Google policy changes, Direct Message Injection (DMI) is now the only recommended way to bypass email filtering for Google Workspace users.Set it up during onboarding, or for existing clients under Settings → Whitelisting. See Google Workspace.
​

​
Simplified GDPR compliance

Clients can now sign our GDPR agreement directly, even when their partner has already signed it. This helps ensure proper coverage and makes compliance easier to manage.

​
Filter statistics on Personal dashboards

You can now filter data on the Personal dashboards, accessible by selecting a user under Dashboard → Personal impact statistics.Choose whether to view statistics for the entire campaign or starting from the campaign’s configured start date in Settings.You can now manually connect, or disconnect single sign-on accounts like Microsoft and Google.Go to Account settings (top right) → Single sign-on to configure this.
​

​
Exclude keywords

You can now add keywords to filter out phishing simulations containing those words.Go to Settings → Campaign and use it to avoid simulations with topics that are confusing or sensitive.

​
Exclude attachments

It is now possible to exclude phishing simulations with attachments under Settings → Campaign.This is only advised when you cannot whitelist attachments in an environment, and ensures that simulations are delivered regardless.

​
Vanta integration

You can now link your course data to Vanta via Settings → Integrations. This connection can serve as proof of compliance for security awareness training.Vanta is just the first of many integrations. If you would like to see support for a different tool, be sure to submit a request.

​
Bulk-invite members

Easily give your team members access to multiple organisations.Go to Client Management, select one or multiple organisations, and click Invite members in the pop-up. Enter emails, assign roles and give access.
​

​
New partner dashboard

Get an overview of your clients and sub-partners. See the total number of clients, users per client, and campaign status (active or paused). If you manage sub-partners, you also see how many clients sit under each one. The dashboard carries a What’s new changelog and links to technical and sales documentation. See Partner dashboard.

​
Automatic course invites

Automate course invites based on the Got phished rate. Choose the percentage of most at-risk employees, or 100% to include everybody, how often invites go out, and which courses to include. See Inviting people to a course.

​
Administrator employee mode

Admins can now switch to Employee mode to view their personal dashboard, follow courses and earn certifications. Toggle it from the account menu in the top right.

​
Bulk-invite users to courses across clients

Use Bulk assign courses to select several clients, choose one or more courses, and invite all their users at once. See Bulk actions.

​
Improved settings layout

The settings layout now groups sections such as Organisation Settings and Whitelisting for quicker access. Automatic invites live here too.
​

​
Schedule your spear phishing mail

Schedule simulations to launch at a specific time for a target group. Create them from Create submission; they are then listed under Spear phishing in Emails. See Spear phishing.

​
Personal dashboard for end users

Pick an end user under Personal impact statistics for clearer insight into their interactions, emails and overall activity. End users invited to a course can now see a similar dashboard of their own. See End user experience.

​
Customise the feedback page

A new tip about CEO fraud now appears on the educational page shown after someone interacts with a simulation. You can also replace that page with your own HTML version, or link to an external URL. See Educational landing pages.

​
Ten new phishing domains

Ten new domains, including two in French. Whitelist them first, then activate them under Campaign settings. See IP addresses and domains.

​
Video content is being phased out

The Video Content feature is being removed from Campaign settings, replaced by our Courses feature. See Courses.
​

​
Refreshed educational landing page

New quarter, new landing page. The tip now covers attachments and how to handle them safely. Users who interact with a simulation are redirected to the refreshed page. See Micro-learnings.
​

​
A new learning environment

Training now runs as courses inside the platform, under Learning. Over twenty courses made up of PDFs, videos and quizzes, available in Dutch, English and Spanish, with more languages to follow. See Courses.

​
Manage courses per organisation

Choose which courses an organisation sees, filter who receives an invitation, and set the percentage needed to certify. Partners can do this per client, so the learning path follows the needs of that organisation. See Inviting people to a course.

​
Build your own course

Design a course yourself, based on the needs of your organisation or your clients. See Creating your own course.
​

​
Refresh the whitelisting header

The Campaign settings page has been redesigned, and the whitelisting by header value can now be renewed for security. See Campaign settings.

​
Consolidated client data

Partners can now visualise consolidated data across their clients. Find it under Filters at the top of the Dashboard, choose which clients to include, and the overview and graphs below follow that selection. See Dashboard.

​
Software tags in onboarding

Choose whether your organisation uses Microsoft 365 or Google Workspace during onboarding, so simulations match the software people actually use. See Software tag.

​
Single sign-on

Sign in with your Microsoft account using single sign-on, once you have an account on the platform.

​
Report button for Google Workspace

Gmail web users now have a report button too, for real phishing as well as OutKept simulations. See Google Workspace.

​
Insufficient data warning

Targets missing a required field, Country or Language, are now flagged with a red exclamation mark under Manage your data, because they cannot receive phishing mails at all. See Adding new users.