5. Allow Phishing URLs

This step ensures you're able to accurately track the number of employees clicking on simulation links.

Without this step, your employees will successfully receive the test phishing email but not be able to open the test phishing link without your browser security notifying the user that it may be a suspicious link. For the highest accuracy when measuring employee behaviour, you will need to whitelist domains in your browser and other security solutions.

Below are quick links for you to follow the relevant steps:​

Whitelist for Office 365

​​Whitelist for Google Workspace

​​Whitelist for Exchange 2013/2016

​​Whitelist in Security Solutions

Also note, you will need to ensure the Keepnet domains are whitelisted in other security solutions such as Defender and ZScaler ​who manage the security of URLs in the inbox and browser.