Bexxo platform help

Name: bexxo
Address: Lagerhausstrasse 25, Ins (Anet), BE, 3232, CH
Telephone: +41325520404
Price range: 1000 - 25000 CHF

Guides to set up the platform, manage your people, use PhishTrainer and report a suspicious email.

Where to start

For a first setup, follow these four steps in order.

Receive simulations Allow the PhishTrainer sending domains and IP addresses, so that simulation emails reach your employees' mailboxes. Microsoft 365 Defender
Synchronise the directory Connect your Microsoft Entra ID directory: accounts and groups are created and updated automatically, with read-only access. Sync Microsoft Entra ID
Install the reporting button Your employees report a suspicious email in one click. The guide depends on the email client used; several tools can be combined. Outlook Microsoft 365 button Outlook for Windows add-in Gmail add-on
Protect data Understand how your employees' data is encrypted in the browser, and what this changes for your organisation. Client-side encryption

Required rights

Microsoft 365 Defender	Microsoft 365 Security Administrator, or an equivalent role
Microsoft Entra ID	Global Administrator, or roles that allow you to create a group and an app registration and to grant consent
Microsoft 365 Outlook add-in	Microsoft 365 global administrator or application administrator
Outlook for Windows	Administrator rights on each workstation
Gmail	Access to the Google Admin console, and a PhishTrainer administrator account to link the domain

Compare the three reporting tools

	Microsoft 365 Outlook	Outlook for Windows	Gmail
Email clients	Outlook on the web, new Outlook for Windows, Microsoft 365 Outlook desktop, Outlook mobile	Outlook 2016, 2019, 2021 and classic Microsoft 365 Outlook desktop, on 64-bit Windows	Gmail on the web and on mobile
Installation	Microsoft 365 admin center, for the whole organisation	MSI on each workstation: manual, silent or by Group Policy	Google Admin console, for the domain
Maximum size	3 MB, can be sent without attachments	10 MB, sending without attachments offered from 3 MB	10 MB
Deletion after reporting	Administrator option	Administrator option	No, the employee deletes the email themselves

First stepsUnderstand the tool, sign in, set up your profile, give colleagues access and run simulations ethically.

People and groupsAdd people manually, by CSV or from your directory, then bring them together in groups for your campaigns.
Sync Microsoft Entra IDSynchronise your users and groups automatically, with read-only access.

Client-side encryptionUnderstand how your employees’ data remains unreadable on our servers.

Microsoft 365 DefenderDeclare the sending domains and IP addresses so that simulations are neither blocked nor filtered.
Outlook Microsoft 365 buttonInstall the Report button for your Microsoft 365 organisation: permissions, tenant link, deployment.
Outlook for Windows add-inInstall the add-in on Windows workstations: MSI, silent installation, Group Policy, workstation management.
Gmail add-onInstall the reporting add-on for your Google Workspace domain: permissions, domain link, installation.

Emails, SMS, pages and sending profilesCreate the elements of a simulation scenario and personalize each message with variables.
Create a campaignSet up, test, schedule and duplicate a simulated phishing campaign, with a pre-launch checklist.
Results and exportsDashboard, results by campaign, group and person: what each indicator measures, CSV export and PDF report.

Reports and webhooksReporting sources (IMAP, Microsoft 365, add-ins), triage of suspicious emails and signed webhooks for your tools.

Report in OutlookUse the Report button and understand each message in the PhishTrainer pane.
Report in Outlook for WindowsUse the buttons in the “PhishTrainer by Bexxo” group, report one or several emails.
Report in GmailUse the PhishTrainer add-on in Gmail and understand each message it shows.

FAQ and troubleshootingAnswers about accounts, sending, results and data, and solutions to common error messages.

Didn’t find the answer? Contact us