> ## Documentation Index
> Fetch the complete documentation index at: https://docs.outkept.com/llms.txt
> Use this file to discover all available pages before exploring further.

# How it works

> Give employees a button to report suspicious mail, and get feedback back to them.

Alongside managing campaigns, we also provide the option for employees to report emails.
Both OutKept simulations and real phishing can be reported, and users receive feedback either
way.

## Start with your mail platform

<CardGroup cols={2}>
  <Card title="Microsoft" icon="microsoft" href="/reporting-microsoft">
    The OutKept add-in, installed organisation-wide or individually, or an integration with
    Outlook's built-in Report Phishing button.
  </Card>

  <Card title="Google Workspace" icon="google" href="/reporting-google-workspace">
    Install the OutKept Reporter from the Google Workspace Marketplace.
  </Card>
</CardGroup>

## What happens when an email is reported

<Tabs>
  <Tab title="An OutKept simulation">
    The sender immediately receives a reply congratulating them on noticing and reporting
    correctly.

    We record the interaction and display it on the dashboard under **Reported
    emails**, so you can track the awareness of your organisation over time. See
    [Dashboard](/campaign-dashboard).
  </Tab>

  <Tab title="Anything else">
    We first check our database to see whether we recognise it as phishing.

    We then forward the email, along with our opinion on its possible intent, to the address
    set under **Forwarding email address**. See below.
  </Tab>
</Tabs>

## Forwarding to your IT team

For mail that is not ours, we prefer to also forward it to your IT department. Enter that
address on the **Campaign settings** tab under **Forwarding email address**, where you can
also assign placeholders such as spam indicator, from address and subject to shape the subject
line.

This is preferably the IT contact within the organisation itself. It keeps them informed of
phishing attacks and gives them the ability to warn colleagues.

## Tell people about it

When launching the report button, communicate it to users. A communication template is
available for this. See
[Start campaign & reporting](/template-campaign-start).

## No button possible?

If installing the button is not an option, employees can still report by forwarding mail to
[phishing@outkept.report](mailto:phishing@outkept.report). The feedback loop works the same
way.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.