PhishAlarm® allows users to alert security and incident response teams to suspected phishing emails.
Listing updated:November 3, 2023
Works with:
5M+
Overview
PhishAlarm® is a Gmail add-on that allows your users to alert security and incident response teams to suspected phishing emails. This is a valuable addition to security awareness and training programs as early reporting of suspicious emails can dramatically reduce the duration and impact of an active phishing attack. 

A free component of Proofpoint's simulated phishing assessments, PhishAlarm allows users to draw on their knowledge to stop social engineers and hackers in their tracks. As a behavior reinforcement tool, PhishAlarm further strengthens the Continuous Training Methodology by capitalizing on awareness and understanding of phishing issues, and allowing end users to actively apply best practices in defense of their data and systems.

Note: PhishAlarm requires a license to operate.
Additional information
PricingPaid
Privacy policy
Terms of service
PhishAlarm will ask for the permissions shown below. Learn more
PhishAlarm will need access to your Google account
This will allow PhishAlarm to :
Manage drafts and send emails when you interact with the add-on
View your email messages when the add-on is running
Run as a Gmail add-on
Connect to an external service
View your country, language, and timezone
See your primary Google Account email address
See your personal info, including any personal info you've made publicly available
Reviews
Language:
Sort by:
Google doesn't verify reviews or ratings. Learn more about reviews
Profile Picture
Matt Goodacre
November 29, 2023
This plugin from proofpoint for Google is very limited. The location makes it difficult for employees to find it and use it. I would recommned google allow the button to replace their built in phishing reporting just like microsoft.
Is this review helpful?
Yes
No
Profile Picture
Joseline G Arlington
August 20, 2024
I'm unable to drag emails to phishalarm
Is this review helpful?
Yes
No
Profile Picture
Dan Wheeler
May 16, 2023
This addin is for use only for official Proofpoint customers, it's published here because that's the only way Google will allow access to a Google Workspace instance via an app/plugin. The workflow here is this: 1) End user opens/clicks on the email 2) End user clicks the PhishAlarm button 3) The email gets wrapped up and sent up to PSAT/Proofpoint Overcast 4) PSAT/Overcast analyzes the email and determines its disposition (malicious/spam/bulk/likely harmless/unknown) 5) If that disposition is malicious, it can work with other Proofpoint such as TRAP and PSAT to take advanced actions If you're expecting this to work and you're not a Proofpoint PhishAlarm customer, please re-read my first sentence again. All that being said, once properly configured this app is great, it lets your end users report emails (including internal emails) as phishing, and have those messages be analyzed
Is this review helpful?
Yes
No
Profile Picture
Effie Patterson
July 19, 2024
Can't use it!! ??
Is this review helpful?
Yes
No
Profile Picture
Brad Ber
April 25, 2023
Yikes. It does this without you knowing when or why. "Create a network connection to any external service (e.g., to read or write data)"
Is this review helpful?
Yes
No
Profile Picture
Joeis Stone
November 7, 2022
The “Spam Detector” detected spam from Google itself! Can we trust Google? Or is the “Spam Detector” really trustworthy itself? (I decided to delete this scam of a spam detector.)
Is this review helpful?
Yes
No
Profile Picture
Chiara Amato
June 9, 2021
I mean, this definitively can use some improvement for sure. But to those who think about getting it, don't do it, it's honestly just a waste of time.
Is this review helpful?
Yes
No
Profile Picture
Jon Runnels
October 7, 2021
The app does exactly what it says - it reports the email to a team your organization designates to manage reported emails. If you are using personal Gmail, it does nothing. If your organization has rolled this out and nobody is monitoring it - again, nothing. However if your org actively monitors and manages reported emails, it is incredibly useful as an augment to the Google Admin console.
Is this review helpful?
Yes
No
Profile Picture
Lwazi John Nkabinde
July 29, 2022
Safety is a key for better management
Is this review helpful?
Yes
No
Profile Picture
Rhett J Spada
October 4, 2022
Who else, besides me, gets an Error 403 Forbidden code?
Is this review helpful?
Yes
No
1-10 of 60
Search
Clear search
Close search
Google apps
Main menu