---
title: "Overview of Managed Phishing Response"
slug: "overview-of-managed-phishing-response"
updated: 2026-09-09T16:09:40Z
published: 2026-09-09T16:09:40Z
canonical: "docs.redcanary.com/overview-of-managed-phishing-response"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.redcanary.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Overview of Managed Phishing Response

Managed Phishing Response is Zscaler MDR’s solution for handling user-reported phishing emails. It integrates with native and third-party inbox reporting buttons to collect and assess non-simulated emails reported by end users. The solution combines AI-powered triage with expert human analysis and reliable automations to reduce the operational burden user-reported emails place on internal teams, saving time and resources while strengthening security culture and accelerating response to confirmed phishing emails.

![](https://cdn.document360.io/75147bee-bf0d-444c-8afb-6e83b11ec0ef/Images/Documentation/overviewphishing-1_01.png?sv=2026-02-06&spr=https&st=2026-10-31T09%3A55%3A16Z&se=2026-10-31T10%3A55%3A16Z&sr=c&sp=r&sig=YWQoKqR2H%2Fznd9SCpIAupZudc2%2FoeT%2Bv4vKZjjXprLw%3D)

## How Managed Phishing Response Works

Here’s a high-level overview of how this solution works:

1. A user reports a suspicious email using your organization’s inbox reporting button.
2. The email is automatically forwarded by your reporting tool to your Zscaler MDR Collector.
3. Our platform processes and renders the new reported phish in your portal for assessment.
4. An initial triage report of the new reported phish is generated by our Phishing Triage Agent.
5. A Zscaler MDR Analyst reviews and completes the investigation, finalizing the assessment.
6. Automated playbooks notify you of confirmed phishes, and deliver feedback to the reporter.

## Supported Tools and Environments

To integrate this solution into your environment, you’ll need:

- A Microsoft Exchange or Google Workspace email environment
- A supported inbox reporting button installed:
  - KnowBe4 Phish Alert (PAB)
  - Proofpoint PhishAlarm
  - Outlook Report (Built-In)
  - InfoSec IQ PhishNotify
  - Custom Gmail Add-On (customer-provided)

## Get Started

Follow the steps on [Getting Started with Managed Phishing Response](/doc/docs/getting-started-with-managed-phishing-response).

## Frequently Asked Questions

Need help with something? See [Managed Phishing Response FAQ](/doc/docs/managed-phishing-response-faq).