Skip to content

[Email Security] Clarify relationship between phish and user submissions #24008

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
Jul 28, 2025
Merged

[Email Security] Clarify relationship between phish and user submissions #24008

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
002d12a
[Email Security] Clarify relationship between phish and user submissions
Maddy-Cloudflare Jul 28, 2025
b386ac6
Update copy
Maddy-Cloudflare Jul 28, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions src/content/docs/cloudflare-one/email-security/email-monitoring/search-email.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -138,6 +138,8 @@ To gain more details on a specific reclassification:

User submissions are the emails your users submitted for reclassification. User submissions help enhance our detection model, but can be escalated for human review.

Any email that is reported as [phish](/cloudflare-one/email-security/phish-submissions/#reclassify-an-email) will be displayed under **User submissions**.

:::note
[PhishGuard](/cloudflare-one/email-security/phish-guard/) customers can have submissions analyzed when submitting at either user or team level. Any non-PhishGuard customer can still have submissions analyzed by submitting at team level.
:::
Expand Down
3 changes: 2 additions & 1 deletion src/content/docs/cloudflare-one/email-security/phish-submissions.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -22,8 +22,9 @@ There are three routes you can use to report an email as a phish:
1. Log in to [Zero Trust](https://one.dash.cloudflare.com/).
2. Select **Email Security** > **Investigation**.
3. On the **Investigation** page, under **Your matching messages**, select the message you want to reclassify. Select the three dots, then select **Request reclassification**. By selecting **Request reclassification**, you are requesting a new disposition for the message.
4. Select the new disposition, then select **Save**.
4. Select the new disposition, then select **Save**.

When you report an email as phish, this email will be displayed under [User submissions](/cloudflare-one/email-security/email-monitoring/search-email/#user-submissions).
## PhishNet M365

PhishNet is an add-in button that helps users to submit directly to Email Security <GlossaryTooltip term="phishing">phish</GlossaryTooltip> samples missed by Email Security's detection.
Expand Down
Loading