Answer “is this safe?” before they ask the SOC.

Every user-reported email gets a plain-language verdict explaining who sent it, whether the org has interacted with them before, and whether the sender’s organization is legitimate. Safe verdicts stay in the inbox with the reasoning attached — users build judgment rather than escalating every ambiguous email. Only confirmed malicious mail and disputed verdicts reach the SOC, typically a ~90% reduction in “is this safe?” tickets.

They appeal. The form prompts on the things humans actually notice — tone, urgency, requests for credentials — and accepts free-text detail. The SOC starts any investigation from an informed place rather than square one.

Email reply is the default and recommended setting. It produces a persistent per-email record, doesn’t disconnect if the user navigates away, and is the only mode we recommend for Gmail. Outlook customers can choose either mode based on whether their team prefers in-line review or a record-keeping audit trail.

After Analysis is the default — only confirmed malicious mail leaves the inbox. Safe verdicts stay with the reasoning, preserving the micro-training benefit and avoiding false-positive overhead. Immediately on Report (coming soon) is stricter and removes every reported email regardless of outcome — suited to organizations with policy mandates.

No. Inbox Advisor is the same product with a new name, rebuilt for better stability, a cleaner interface, and a smoother experience on both Outlook and Gmail. Existing installations carry over.