Lists That Never Go Stale
Target lists mirror your directory groups exactly. Nobody exports a CSV, and nobody who left the company receives another simulation.
Integrations
Phishing Simulation Integrations for the Tools You Already Run
Connect AutoPhish to your directory and your mail platform once. Recipient lists stay current on their own, reported phishing emails land in your campaign results, and your awareness program runs without spreadsheets.
Directory Sync
Mirror the groups you already maintain into AutoPhish target lists. New hires are covered automatically and leavers drop out.
Microsoft 365
Sync Microsoft Entra ID groups into target lists every night, with nested groups and disabled accounts handled for you.
Learn moreActive DirectoryBeta
Mirror on-premises AD groups with a signed PowerShell tool. AutoPhish never connects to your domain controller.
Learn moreNextcloud
Install the official app from the Nextcloud App Store and map Nextcloud groups to AutoPhish target lists.
Learn morePhishing Reporting
Measure who reports a simulation, not only who clicks. Employees use the report button in the mail client they already know.
Delivery and Automation
Send simulations through your own mail infrastructure and automate AutoPhish from your own tools.
Why Connect AutoPhish to Your Stack
A Reporting Rate You Can Trust
Reported simulations are matched to the campaign and the recipient, so you see reporting next to opens and clicks in the same report.
Least Privilege by Design
Every integration asks for read-only access to exactly what it needs. Credentials are encrypted, and all data is processed in the EU.
Missing an Integration?
Tell us which directory, mail platform or ticketing tool you run. Customer requests decide what we build next, and the public API often covers the gap today.
Request an integrationIntegrations FAQ
Which integrations does AutoPhish offer?
AutoPhish syncs recipients from Microsoft 365 (Entra ID), on-premises Active Directory and Nextcloud, records phishing reports from Gmail in Google Workspace and from an Outlook add-in, supports your own SMTP server for delivery, and offers a public REST API for everything else.
Do integrations cost extra?
No. Directory sync and the Google Workspace report integration are included in every plan. Custom SMTP is part of the Professional and Enterprise plans.
Do I need an integration to get started?
No. You can upload recipients as a CSV and launch your first simulation in about ten minutes. Integrations pay off once your team changes regularly and you no longer want to maintain lists by hand.
How does AutoPhish protect the data an integration reads?
Integrations request read-only access and import only what a simulation needs, such as names and email addresses on your verified domains. Stored credentials are encrypted, AutoPhish is hosted in Germany, and a data processing agreement is available.
Can I build my own integration?
Yes. The public REST API covers target lists, campaigns and reporting, and its OpenAPI specification is published. API keys are scoped, so an integration only gets the permissions it needs.
Run your first phishing test in 10 minutes.
Sign up free — no credit card. Try Pro free for 7 days when you're ready.