Microsoft Teams integration for Phished.
Integrations
Phished works inside the tools you already run
Connect Phished to your SIEM, SOAR, IAM, ITSM and XDR stack, or run it from your AI assistant with the Phished MCP connector. API-based, no MX changes, live in minutes. All to support our customers and partners, and strengthen your employees.
Trusted worldwide by 7,100 organizations, 2 million users and 400+ partners
Integration catalog
12 integrations, one setup screen
Connect your chat, ticketing, monitoring, email security and AI tools from one screen in the Phished platform.
Slack integration for Phished.
ServiceNow integration for Phished.
Jira integration for Phished.
Jira Automation integration for Phished.
Zendesk integration for Phished.
Splunk integration for Phished.
Datadog integration for Phished.
Microsoft Defender integration for Phished.
Proofpoint TRAP integration for Phished.
MCP server for Phished.
HTTP webhook integration for Phished.
No match yet. Tell us what you run and we will show you how to connect it through the HTTP webhook.
See Phished in action with your own stack
Bring your tool list to a demo. We will show you how Phished fits in, from the first report to the ticket on your desk.
Partner with Phished. Grow together.
Join 400+ channel, technology and MSP partners bringing AI-native security awareness to organizations around the world. Resell it, integrate it or run it as a managed service, and measurably reduce your customers’ human risk.
FAQ
Phished integrations FAQ
Which tools does Phished integrate with?
Microsoft Teams and Slack, ServiceNow, Jira, Jira Automation and Zendesk, Splunk and Datadog, Microsoft Defender and Proofpoint TRAP, the Phished MCP for your AI assistant, plus a custom HTTP webhook for anything else.
Which events can Phished send?
You pick from 11 events per integration: simulation sent, link clicked, data entered, attachment opened, replied, reported and Secure Before You Click, plus the outcome of a reported email: a threat, safe or a Phished simulation.
Where does the reported email itself go?
Only to destinations you own: your HTTP webhook, or the Jira option where Phished creates the issue. All other integrations receive the event without the email.
Do we need developers to set up integrations?
No. Every integration is set up from one screen in the Phished platform, with a test notification and an activity log. You only need a developer for the HTTP webhook.




