← All Documentation

Phishivox documentation

Integrations

Set up supported personal mailbox scanning and organization-wide Microsoft 365 or Google Workspace monitoring.

On this page

Microsoft 365

Individual mailbox connection (Community / Professional)

Connect your personal M365 mailbox to browse and scan emails from the Phishivox scan page.

  1. Navigate to Dashboard → Connected Mailboxes.
  2. Click Connect next to Microsoft 365.
  3. Sign in with your Microsoft account and accept the read-only permission request.
  4. Return to Phishivox. Your mailbox folders will appear in the Scan page.

Permissions

Individual connections use delegated permissions (Mail.Read). Phishivox can only read your emails -- it cannot send, delete, or modify them.

Organization connection

Connect your Microsoft 365 organization from Set up email security to configure and verify monitored detection.

Prerequisites

  • Microsoft 365 Global Administrator or Exchange Administrator role
  • Phishivox Enterprise account with org admin role

Setup steps

  1. Sign in as an organization administrator and open Set up email security.
  2. Select Microsoft 365 and start the administrator consent flow.
  3. Review the exact permissions shown by Microsoft before accepting consent.
  4. Return to Phishivox and run connection verification.
  5. Use the connection status in the product as the source of truth. Resolve any degraded or failed status before relying on monitoring.

Admin consent required

Only a Global Admin or Exchange Admin can grant these permissions. If you don't have the required role, ask your IT administrator to complete this step.

After connection

  • Monitor connection health and the security views in Phishivox.
  • Investigate detected messages using verdict, score, confidence, and available findings.
  • Do not assume automatic message modification unless the product explicitly reports that a remediation capability is enabled.

Disconnecting

To disconnect, go to Gateway → Settings and click Disconnect. This revokes the application permissions and removes all stored tokens. Scanning stops immediately.

Google Workspace

Individual connection (Community / Professional)

  1. Navigate to Dashboard → Connected Mailboxes.
  2. Click Connect next to Gmail.
  3. Sign in with your Google account and accept the gmail.readonly permission.
  4. Return to Phishivox. Your Gmail folders will appear in the Scan page.

Organization monitoring

Connect Google Workspace from Set up email security using Phishivox's vendor-managed domain-wide delegation workflow.

Prerequisites

  • Google Workspace Super Admin role
  • Phishivox Enterprise account with org admin role

Setup steps

  1. Open Set up email security, select Google Workspace, and enter your Workspace domain and Super Admin verification mailbox.
  2. Copy the displayed Phishivox OAuth client ID and the gmail.readonly scope.
  3. In Google Admin Console, go to domain-wide delegation and add the displayed client ID with exactly that read-only scope.
  4. Return to Phishivox and select Verify connection.
  5. Resolve any displayed error and repeat verification until monitoring is reported as active.

Optional Gmail quarantine

Monitoring uses gmail.readonly. If your approved operating process requires automatic, reversible Gmail quarantine, a Super Admin must separately authorize gmail.modify and an organization administrator must enable the feature in Phishivox. It remains off by default.

AI Gateway

AI Gateway powers AI-assisted analysis used in enterprise detections. Its runtime status is shown in Security Operations → System Health.

Status meanings

  • Operational — AI-assisted analysis is available.
  • Not configured — AI provider credentials are not active in this environment.

Tenant admin actions

  1. Use System Health as the source of truth for current status.
  2. If status is not configured or degraded, contact your platform administrator or Phishivox support.
  3. After platform updates, recheck status and run a safe test message.

Credential handling

AI provider credentials are managed at platform infrastructure level, not in tenant UI pages. Never send API keys, tokens, or mailbox credentials through email or support chat.

Supported Integrations

The supported customer-facing mail integrations are individual Gmail, individual Microsoft 365, organization Microsoft 365, and organization Google Workspace. Availability and permissions are shown in the product during connection setup.

Requesting an integration

If you need SIEM, SOAR, on-premises Exchange, or another provider, contact support@phishivox.com with the platform, intended workflow, and required data. Do not rely on an integration until it is documented as supported and enabled for your organization.