Report Add-ons

The report add-ons put a Report Phishing button directly in your users’ inboxes. When clicked, the email is sent to Helios, immediately quarantined, and run through auto-triage.

Tip

On report, the message is quarantined right away. If auto-triage later returns DISMISS, Helios automatically reinjects it back to the user’s inbox — so a false report costs the user nothing.

Gmail Add-on

Deploy privately to your organization via the Google Admin console — no Marketplace verification required for internal use.

1. Sign in to the Google Admin console at admin.google.com as a super admin.

2. Go to Apps → Google Workspace Marketplace apps → Apps list → Add app → Add private app (or install the Himaya app if listed).

3. Select the organizational units / groups that should receive the add-on, and grant the requested Gmail scopes.

4. Click Finish. The Report Phishing button appears in Gmail for those users within a few minutes.

Outlook Add-in

Deploy centrally from the Microsoft 365 admin center. Helios serves a per-organization manifest.xml.

1. Sign in to the Microsoft 365 admin center at admin.microsoft.com as a Global Administrator.

2. Go to Settings → Integrated apps → Upload custom apps.

3. Choose Provide link to manifest file and paste your org’s manifest URL (from Settings → Integrations → Outlook Add-in in Helios).

4. Assign the add-in to the users or groups that should receive it, and accept the permissions.

5. Click Finish deployment. The Report Phishing button appears on the Outlook ribbon (desktop, web, and mobile) after propagation.

After deployment

• Report a test phishing email to confirm the button works end-to-end.
• Reported emails appear in the Threats dashboard with the reporter’s name and the triage verdict.