CybSafe incident

Delay in PHISH delivery for Google Workspace customers

Resolved after 73 days, affecting PHISH, on March 2, 2026.

monitoring May 14, 2026, 12:28 PM UTC

We're now concluding this incident. We have Google direct mail injection available for all customers as appropriate. This can be configured within the platform, via integration page, this is linked below: https://app.cybsafe.com/settings/integrations/googleDmi

Started
Mar 02, 2026, 11:40 AM UTC
Resolved
May 14, 2026, 12:28 PM UTC
Duration
73d
Detected by Pingoru
Mar 02, 2026, 11:40 AM UTC

Affected components

PHISH

Update timeline

  1. monitoring Mar 02, 2026, 11:40 AM UTC

    We are aware of an issue affecting the delivery of CybSafe PHISH simulation emails for some customers using Google Workspace. This is due to a recent change in how Google handles inbound mail from our sending IP addresses, which may cause phishing simulation emails to be quarantined or flagged as spam. We have identified the cause and published updated allowlisting instructions for Google Workspace. If you are experiencing delivery issues, please follow our updated guide: https://help.cybsafe.com/en/articles/9464188-how-to-guide-phish-allowlisting-for-google We are also working on introducing Direct Mail Injection (DMI) as a longer-term solution that will remove the need for IP-based allowlisting entirely.

  2. monitoring May 14, 2026, 12:28 PM UTC

    We're now concluding this incident. We have Google direct mail injection available for all customers as appropriate. This can be configured within the platform, via integration page, this is linked below: https://app.cybsafe.com/settings/integrations/googleDmi

  3. resolved May 14, 2026, 12:28 PM UTC

    This incident has been resolved.

Your product runs on more than CybSafe

Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.

Add your stack →