Overview of Templates

xorlab Security Platform (XSP) uses email notification templates to communicate with end-users about reported emails, quarantined messages, and password-protected attachments that require unlocking. These templates provide consistent, localized, and branded feedback, helping users stay informed and engaged with your organization’s security processes. This page provides an overview of the available templates, their purposes, and where to find them.

Available Templates

The table below lists the notification templates included with XSP. These templates are used in various scenarios, such as responding to reported emails, notifying users of quarantined messages, and providing campaign feedback.

Email notification	Description
`BEC`	For reports of business email compromise attacks
`BENIGN`	For reports of emails that do not contain anything suspicious
`CLOUD_STORAGE`	For reports of emails that contain a link to a cloud storage service
`EXTORTION`	For reports of extortion emails
`IMPERSONATION`	For reports of impersonation attacks
`POLICY_VIOLATION`	For reports of emails that violate company policies
`MALICIOUS`	For reports of emails that are suspicious
`MALWARE`	For reports of emails with an attachment that contains malware
`MARKETING`	For reports of emails of marketing newsletters
`PHISHING`	For reports of phishing emails
`REPORT_NOTIFICATION_ACKNOWLEDGEMENT`	To notify the user that XSP received their report
`REPORT_NOTIFICATION_ERROR`	To notify the user that their report is missing a message to analyze
`SIMULATION`	For reports that are part of awareness campaigns
`SPAM`	For reports of spam emails
`USER_QUARANTINE_DIGEST`	To notify the user that XSP quarantined multiple emails and put them into the SSQ
`USER_QUARANTINE_NOTIFICATION`	To notify the user that XSP quarantined an email and put it into the SSQ
`VIP_FRAUD`	For reports of email attacks that impersonate people of your organization
`QUARANTINE_NOTIFICATION_IN`	Used for verdict-based quarantine notifications. Those can be enabled like described in Actions, Rules and Profiles and are independent from the quarantine notifications `USER_QUARANTINE_NOTIFICATION` of the SSQ

Example Emails

While all templates share the same structure, they differ in text and color depending on the type of notification. Below are a few examples:

BENIGN

PHISHING

REPORT_NOTIFICATION_ACKNOWLEDGEMENT

USER_QUARANTINE_DIGEST

Directory structure

Email notification templates are stored in the shared/email_templates directory, accessible via the Expert Editor.

Folder Structure

  shared/email_templates
  ├── BEC.yml                              # Template configuration files.
  ├── [... other templates ...]
  ├── config
  │   └── default.yml                # Default language settings
  |                                        
  ├── info
  │   └── default.yml                # Company information for footers
  |                                        
  ├── locale
  |   └── default_it.yml             # Italian localization file.
  |   └── default_fr.yml             # French localization file.
  │   └── default_de.yml             # German localization file.
  |   └── default_en.yml             # English localization file.
  |                                        
  ├── style
  │   └── default.yml                # Branding and styling
  |                                        
  ├── [... other templates ...]
  └── VIP_FRAUD.yml

Folder Descriptions

config – Defines the default language for notifications.
locale – Contains localized strings for different languages.
style – Stores organization details like name, contact email, and links.
info – Controls visual elements such as colors, fonts, and logos.
Template files – Each template (e.g., BEC.yml, PHISHING.yml) contains its configuration.

Multi-Tenancy Support

If your organization uses multiple tenants, you can customize templates per tenant. Tenant-specific customizations are controlled by the emailTemplateStyle attribute. By default, templates apply as default to all tenants, but you can introduce unique identifiers to manage styles, localization, and branding for other tenants.

​Available Templates

​Example Emails

​BENIGN

​PHISHING

​REPORT_NOTIFICATION_ACKNOWLEDGEMENT

​USER_QUARANTINE_DIGEST

​Directory structure

​Folder Structure

​Folder Descriptions

​Multi-Tenancy Support