Skip to main content

How to whitelist phishing simulator domains in Google Workspace

This guide covers all the steps you need to ensure Phishing Simulator emails aren't flagged as spam in Google Workspace.

Alan Butcher avatar
Written by Alan Butcher
Updated over 3 weeks ago

Defense.com's Phishing Simulator allows you to put your people to the test by creating targeted, safe phishing campaigns. However, to ensure their success, the emails from these campaigns must be delivered successfully. To ensure this, we strongly recommend whitelisting the domain name used for the campaign with your email provider. If that's Google Workspace, you're in the right place.

  1. Log in to your Google Admin account at https://admin.google.com

  2. Navigate to Apps in the left-hand menu

  3. Click Google Workspace

  4. Click on Gmail

  5. Scroll down to the bottom of the Gmail settings page and click Spam, Phishing and Malware

  6. Scroll down to the Spam section and click Add Rule or Add Another Rule

  7. Click Create or Edit list

  8. When you get to the Manage Address lists page, click Add Address List

  9. Give the rule a name such as "Defense.com (Phishing)" and click Add Address

  10. Enter the domain name provided during the Phishing Campaign set up wizard in the Address field

  11. Click Save

From now on, emails sent from this domain will not be marked as spam.

Each phishing campaign uses a separate domain, so youโ€™ll need to make sure you have added them to your whitelist before you send any future campaigns.

That's it! You've successfully added the domain to your Google Workspace allow list. ๐ŸŽ‰

Did this answer your question?