Reporting a Misclassification

Suppose a message was mistakenly quarantined but is benign (false positive) or was delivered although it shouldn’t have been (false negative). You can report a misclassification in various locations: We show here how to report the misclassification of an arbitrary email:

Open the email in the detail view
Click the three dots in the upper right and choose Report Misclassification:
In the new dialog, choose the Expected verdict and select the severity of the issue with the slider (see the guide below to pick the right level)
Optional: Add a comment clarifying the reason for this misclassification report.

Report locationsBesides the above shown way, you can also report a misclassification whenever you:

Release an email from the quarantine
Isolate an email
Resolve a reported email

The corresponding dialogs offer a Report misclassification checkbox.

Severity levels

Please follow these guides to find the severity level that fits your case best:

Reporting a misclassified malicious email

Level	Description
Low	Unwanted mail with no security impact (e.g., newsletters & marketing, graymail).
Moderate	Pure spam with no/little security impact (e.g., shady promotions, obvious spam, high-volume spam).
Major	Harmful spam or threat with potential security impact (e.g., adult/drug spam, phishing, extortion, fraud, impersonation).
Critical	High-severity threat with clear harm potential that requires immediate attention (e.g., malware or a high-quantity phishing wave). Please include a comment with critical issues to help us assess them quickly.

Reporting a misclassified benign email

Level	Description
Low	Wanted informational mail (e.g., newsletters & marketing).
Moderate	Wanted non-business-relevant or personal email (e.g., notifications from services, emails for private purposes).
Major	Business-relevant or critical emails (e.g., business communication, password-reset emails, invoices, travel tickets).
Critical	Business-critical email that required immediate attention (e.g., a quarantined email that required an immediate response, causing potential for business damage). Please include a comment with critical issues to help us assess them quickly.

Report a misclassified topic

To report a misclassified topic, please see Report misclassified topics.

Configuration

The Admin guide to configure the behavior of the reporting can be found here: Configure Misclassification Reporting.

⌘I

​Severity levels

​Reporting a misclassified malicious email

​Reporting a misclassified benign email

​Report a misclassified topic

​Configuration

Severity levels

Reporting a misclassified malicious email

Reporting a misclassified benign email

Report a misclassified topic

Configuration