Changelog

Follow up on the latest improvements and updates.

RSS

Phinbox IQ is now in Open Beta! 🎉
Phinbox IQ is already being utilized by several Phin partners, with some partners reporting an 80% time savings when utilizing Phinbox IQ in their triaging process.
The problem Phinbox IQ solves is simple: when end users report suspicious emails, techs often lose time jumping between tools, chasing context, and manually deciding whether something is a real threat.
With Phinbox IQ, all reported emails come into one triage board. When a user reports an email using Phin’s Report Phishing button in Outlook, Phinbox IQ analyzes it and displays it as a ticket—so technicians can triage in one place, without hunting for details.
Icing on the 🎂 is that Phinbox IQ can also be deployed as a Pod in ConnectWise Manage.
Support for Fixed-Length in Shared Training Campaigns
You can now create and manage fixed-length shared training campaigns at the partner level, giving you a powerful new way to deliver structured training programs across all your companies.
Campaign Creation & Management
Create fixed-length campaigns from the shared campaigns page, in addition to onboarding and continuous campaign types.
Choose from two scheduling options:
  • Recurring: Deliver courses on a set schedule (e.g., monthly on the 15th), similar to company-level fixed campaigns.
  • All at Once: Deliver the entire curriculum on a specific date and time.
Build custom curriculums by selecting individual courses or choosing from prebuilt curriculum templates.
Reorder courses in your curriculum to create the perfect training sequence.
Editing Active Campaigns
  • Edit campaign title, description, schedule, enrollment, and content while campaigns are running.
  • Content changes affect future deliveries and are automatically inherited by all enrolled companies.
  • Courses that have already been delivered are locked and cannot be removed, protecting the integrity of your training timeline.
  • When using the "All at Once" schedule type, users added after the delivery date won't receive the training (you'll see a helpful warning when selecting this option).
Company-Level Visibility
Company admins can view fixed-length shared campaigns with visibility into:
  • Enrolled users
  • Enrollment date
  • Number of courses assigned
  • Company completion rates
Custom Content in the Partner Library & Shared Campaigns
We're excited to introduce the ability to upload and use your own custom training content alongside Phin's security awareness courses in Shared Campaigns.
Upload Custom Video Content & Use it in Fixed-Length Shared Training Campaigns
  • Partners can now upload custom video training courses to their partner library; MP4 video files up to 200MB are supported.
  • Custom content appears in your library just like Phin courses, with full preview and metadata context.
  • Custom content integrates seamlessly with the shared campaign builder - filter for "self" as the provider to find your uploaded courses.
Other Noteworthy Improvements
Training Catch-Up Feature Removed:
We've removed the training catch-up option from continuous training campaigns. Continuous campaigns are intended to run infinitely, which can result in new users who have been synced into a long-running campaign receiving a lot of training that neither they nor you were expecting them to get. All existing continuous training campaigns with catch-up enabled have been automatically updated. Training courses already assigned via the “Training Catch-Up” feature will remain in each user's LMS.
Improved Email Delivery Reliability:
Training reminders now use the Google Direct Message Injection (DMI) integration if enabled. If you don't have DMI enabled, reminders continue to send via our standard delivery method. If you have Google Workspace clients, we highly recommend enabling Google DMI.
Google DMI
Google DMI (direct message injection) allows Phin to directly inject messages into Google Workspace inboxes, similar to how our Microsoft DMI integration works. This allows messages to bypass traditional firewalls and spam filters that would otherwise require manual allowlisting.
Head to our dedicated knowledge base article to read more about it and follow the setup guide.
Phishing Clicks & Reporting Updates
The phishing csv that can be generated ad-hoc or included as part of monthly/weekly reports to stakeholders has been updated to make the headers more accessible. Think 'Date Clicked' instead of dateClicked. We also added the following to the csv file.
  • A 'Reported' true/false column on files generated from company tenants that have the Report Phishing Button integration turned on.
  • A 'Category' column that includes which phishing category an email template was sourced from within a campaign.
Also, if you missed it from our previous set of release notes, the performance reports no longer show a 'Reported Phishes' metric for the companies that don't have the Report Phishing Button integration enabled.
Microsoft DMI
The 'Graph API Mail Delivery' integration is now called the 'Microsoft DMI' integration. Nothing has changed about the functionality of this integration, we just thought it was time to give it a more appropriate name rather than just naming the technology it used to perform the direct message injection in Outlook inboxes. If you are unfamiliar with this integration you can read more about it here.
Access User Analytics from User Management Page
Now a user's analytics page is accessible with the click of a button from the 'Actions' column on the 'User Management' page. No more digging through the analytics pages themselves to look at a particular users analytics history.
Shared Campaigns Open Beta
The Shared Campaign Open Beta (Phin’s partner-level campaign tools) is now available across all partner tenants under a new sidebar page labeled “Shared Campaigns.” There’s a quick survey on that page (bottom right corner)—we’d really appreciate it if you could take a minute to tell us what you think. If you’ve ever wanted more control, flexibility, or something else from Phin’s campaign tools, now’s the perfect time to speak up.
Check out a demo of the features current state here.
'Phishes Reported' Stat Removed
Many customers told us that having the 'Phishes Reported' stat on the performance report when the 'Report Phishing Button' wasn't enabled in a companies Outlook environment was un-necessary, and ya'll were so right. Reports have been updated to automatically hide “Phishes Reported” for companies that don’t use Report a Phish, and it’s no longer included in grading. Cleaner, more accurate metrics with less noise.
Google DMI (Direct Message Injection)
Direct message injection for Gmail accounts - it's not here yet, but it will be soon. We’ve released infrastructure to support a Google DMI integration—think Graph API, but for Gmail—so you’re ready for deeper, more automated connectivity as we roll more out. Keep your eyes peeled!
Unified Campaigns Page
All campaign actions now live in one streamlined location - create, edit, launch, and review campaigns without navigating multiple pages.
Training Campaign Presets
Presets now support training campaigns in addition to phishing.
Callout:
Ideal for partners who want standardized, reusable campaign configurations.
Billing Update (Important)
Starting
October 1, 2025
,
any active user is billable
unless put to sleep.
This first appears on the
October 31 invoice.
Improvements & Fixes
  • Smoother workflow for launching recurring campaigns
  • UI cleanup for the unified campaign page
  • Clearer in-product billing notices
Google User Sync Improvements
  • OU/group selections now require an explicit Save
  • Google user status (Active / Suspended) now shown in the sync table
  • Email notifications added for first-time sync failures
User Management Enhancements
  • New Sync Source column (Google / Azure)
  • “Status” is now labeled Phin Status
  • Active user count added
  • Google Sync shortcut button added
  • “Welcomed” column now shows a dash (-)
Reset Welcome Email Templates
Partners and company admins may reset welcome email templates back to the Phin default.
Improvements & Fixes
  • More reliable Azure user creation for synced groups
  • Fixed issues when creating campaigns immediately after editing templates
  • UI fixes for navigation, free trial states, and integration notifications
Revamped Company Reports Page
Reports can now be configured without enabling them first.
Different report types and cadences can be assigned to different recipients.
Callout:
For example, weekly reports can go to Admin A and monthly reports to Admin B.
ConnectWise Service Desk Upgrade
Phin attempts to match the reporting employee to an existing ConnectWise contact automatically.
If none is found, it falls back to the primary contact.
Requires updated API permissions.
Terminology Update
“Supervisor” has been renamed to “Manager” across the entire platform.
Improvements & Fixes
  • Improved alignment between report schedules and recipients
  • More reliable ConnectWise contact matching
  • More consistent and clear terminology
New Features
New Company Homepage
Includes Quick Action Cards, a Campaign Calendar, and a simplified design replacing the old checklist.
Campaign Calendar
Provides an at-a-glance view of upcoming training and phishing sends.
Quick Action Cards
One-click access to generate reports, create continuous campaigns, and check user engagement.
Simplified Continuous Campaign Creator
A previously long multi-step workflow is now significantly faster and clearer.
Mock User Data Toggle
A partner-level toggle allowing previews of phishing templates with injected user fields visible.
Improvements & Fixes
  • Removal of the outdated company checklist
  • Improved accuracy in calendar and preview displays
  • Navigation and scheduling UX improvements
New Features
Partner-Level Content Library
A unified view where partners can browse all phishing and training content.
Improved Content Discovery
Enhanced search, sorting, filtering, and metadata visibility.
Enhanced Previews
Training modules have dedicated preview pages.
A “Learning Moment” preview button allows step-through previewing of the full user experience.
Callout:
This lets partners view content exactly as learners will see it.
Improvements & Fixes
  • Faster and easier content selection
  • Improved reliability in template loading
  • Multiple small UI/UX improvements across the content library