Ctrlk
For the complete documentation index, see llms.txt. This page is also available as Markdown.

Deploying Stoïk Report

This article walks you through deploying the Stoïk Report extension across your organization and ensuring your employees use it. The deployment takes around 15 minute.

Prerequisites

  • Make sure you have Administrator access to your Microsoft 365 tenant (if your team uses Outlook) or your Google Workspace (if your team uses Gmail).

  • See Supported clients for the exact Outlook and Gmail versions supported.

Install the extension

There are two ways to install the Stoïk Report extension. We recommend pushing the extension to all employees for the broadest coverage and the simplest experience for your team.

Option A: Push the extension to all employees (recommended)

This option deploys the extension automatically across your organization, without requiring each employee to install anything themselves.

Pick the section that matches your email provider.

1

Open the add-in on AppSource

Open the Stoïk Report add-in on Microsoft AppSource with a global administrator account.

Click on Get it now.

2

Choose who receives the add-in

In the deployment step, select the users or groups who should receive the add-in.

We recommend deploying to the entire organization by selecting Entire organization.

3

Accept permissions requests

Review the permissions requested by the add-in, then click Next.

4

Review and finish deployment

Review then click Finish deployment.

5

Verify

Verify in your Integrated apps > Deployed apps that the app Stoïk Report Phishing is there.

The add-in usually appears in employees' mailboxes within a few minutes. Outlook desktop may need to be restarted to display it.

1

Sign in to the Google Admin Console

Open the Google Admin Console with an administrator account.

2

Open the Chrome app management page

From the main menu, go to Devices, then Chrome, then Apps & extensions. The Overview page opens by default.

At the top of the page, click the Users & browsers tab.

3

Select who should receive the extension

In the left sidebar, select in Organizational Units who should receive the extension. To deploy to everyone, leave the top organizational unit selected.

4

Add the Stoïk Report extension by ID

At the bottom right of the page, click the + button, then choose Add the Chrome app or extension by ID.

Paste the Stoïk Report extension ID: cpppidkopihnhbbnccpbacacmekcpich.

Make sure the source is set to From the Chrome Web Store, then click Save.

5

Force install the extension

The Stoïk Report Phishing extension now appears in your list (it can take few secongs).

Click it to open the configuration panel on the right.

Under Installation policy, select Force install (or Force install + pin to browser toolbar if you want the icon visible by default).

Click Save.

Google may take up to 90 minutes to push the extension to all browsers. Employees may need to close and reopen Chrome to see the extension appear.

For the official Google documentation on force-installing extensions, see Automatically install apps and extensions.

Option B: Let each employee install the extension themselves

If you prefer not to deploy the extension centrally (for example for small teams, BYOD setups, or organizations without centralized IT control), each employee can install the extension on their own in two minutes from the marketplace.

To make this easy, forward the employee Help Center article to your team. It contains the install instructions for both Gmail and Outlook.

Verify the install

Once the extension is deployed, confirm it works by sending a test report from your own mailbox.

  1. Open your Outlook or Gmail inbox.

  2. Pick any email in your inbox.

  3. Click the Report to Stoïk button.

  4. In Stoïk Protect, go to Human Risk > Report > Results.

Your test report should appear in the table within a few seconds.

If it does, the install is working correctly.

If you do not see your report after a few minutes:

  • For Gmail: confirm the extension appears in your Chrome toolbar. If not, try restarting Chrome.

  • For Outlook desktop: try restarting Outlook to force the add-in to sync.

  • If the issue persists, contact Stoïk support.

Communicate the rollout to your team

Once the extension is verified, let your employees know what to expect. The simpler the message, the better the adoption.

We recommend sending a short email to everyone in the organization on the day of deployment.

Email Template

Subject:

A new way to report suspicious emails

Body:

Hi everyone,

Starting today, you will see a new Report to Stoïk button in your [Outlook / Gmail] mailbox. This button was added by the IT team as part of our work with Stoïk, our cybersecurity partner.

If you receive an email that looks suspicious (an unexpected sender, an urgent request, a strange link, an unusual attachment), the safest thing to do is to click Report to Stoïk instead of clicking, replying, or deleting. Stoïk will analyze the email and let you know immediately whether it was a real threat or a training simulation.

Reporting takes one second and is the single most effective way you can help protect our company from cyberattacks. When in doubt, always report.

For more details on how the button works, see this short guide.

If you have any questions or do not see the button in your mailbox, let me know.

Thanks,

[Your name]

Reinforce after two weeks

Adoption drops if the rollout is a one-shot communication. We recommend sending a short follow-up two weeks after deployment with a few report statistics, for example the number of suspicious emails your team has flagged. You can find these numbers in Stoïk Protect under Human Risk > Report.

Uninstall the extension

  1. Go to Integrated apps in the Microsoft 365 admin center.

  2. Under Deployed apps, click Stoïk Report Phishing.

  3. In the panel, under Actions, click Remove app.

  1. In the Google Admin Console, go to Devices > Chrome > Apps & extensions, then click the Users & browsers tab.

  1. Click Stoïk Report Phishing in the app list, then click the trash icon in the top right of the panel.

  1. Click Delete to confirm.

Troubleshooting

If employees report that the button does not appear in their mailbox:

  • Check that your deployment policy applies to their account or organizational unit.

  • For Gmail, confirm the user is signed in to Chrome with their work account, and that Chrome is connected to your Google Workspace.

  • Gmail only works in Chrome-based desktop browsers (Chrome, Edge, Brave, and other Chromium browsers). Employees using Safari, Firefox, or a mobile device will not see the button.

  • For Outlook, confirm the user has restarted their Outlook client at least once since deployment.

If you do not see any reports in Stoïk Protect even though employees have used the button, contact Stoïk support.

Questions

If you have any question about the deployment or want help rolling out the Report button to your team, contact Stoïk support.

PreviousReporting suspicious emails
NextStoïk Training

Last updated

Was this helpful?