How to Whitelist Threatcop by Email Header in Google Workspace

How to Whitelist Threatcop by Email Header in Google Workspace


Whitelist by Email Header in Google Workspace

If your organization uses Google Workspace, you can ensure delivery of Threatcop’s simulated phishing emails by whitelisting them using email headers. This is done by applying a Content Compliance rule that identifies Threatcop’s unique email header, allowing our simulation emails to reach users’ inboxes successfully.

⚠ Recommendation:

We suggest using this method only if your organization relies on a cloud-based spam filter in combination with Google Workspace.

If you are using Google Workspace alone (without an additional spam filter), we recommend whitelisting by IP address instead. Refer to our Whitelisting by IP Address in Google Workspace guide for detailed instructions.

Additionally, if you use a third-party cloud spam filter, you will need to whitelist Threatcop’s IP addresses or hostnames in that filter as well. This ensures complete and uninterrupted delivery of our simulated phishing emails.

🔎 Important Note:

This article reflects Threatcop’s latest best practices for whitelisting. However, email providers may update their filtering mechanisms over time. If you face any difficulties applying these settings, please reach out to the Threatcop Support Team for assistance.


To whitelist Threatcop by email header in Google Workspace, follow the steps below:

Step 1: Log in to your Google Admin account and click Apps -> Google Workspace -> Gmail -> Compliance

A screenshot of a computerAI-generated content may be incorrect.


Step 2: Navigate to the Content Compliance section.



Step 3: In the Email messages to affect field, select the Inbound checkbox and the Internal - receiving check box.


Step 4: Under the Expressions tab, click the first drop-down menu.

From the first drop-down menu, select if ANY of the following match the message.

Click Add.

A screenshot of a computerAI-generated content may be incorrect.

Step 6: Under the settings in the Add expressions that describe the content you want to search for in each message area. For more information about these settings, see the screenshot and list below:

  1. From the first drop-down menu, select Advanced content match.
  2. In Location field, select Full headers.
  3. In the Match type field, select Contains text.
  4. In the Content field, enter the header text. The default Threatcop header is "X-Threatcop". 

  1. Click SAVE.

Step 7: In the If the above expressions match, do the following field, select the Bypass spam filter for this message check box under Spam and click Save.

 A screenshot of a computerAI-generated content may be incorrect.



    • Related Articles

    • What are the prerequisites for ThreatCop?

      1. Add a list of targeted employees in the sample CSV format. (First Name and Email are mandatory parameters, other fields are optional) 2. Whitelist the below-mentioned IPs on the Firewall, Web Applications and on all your gateway solutions : ...
    • How to whitelist Threatcop in GSuite

      Whitelisting IP Address This process allows emails from specific IP addresses to bypass spam filtering. Step 1: Go to https://admin.google.com/ Step 2: Select Apps -> Google Workspace -> Gmail -> Spam, Phishing and Malware Step 3: Select your ...
    • How to Whitelist Threatcop IP in Lotus Domino.

      Kindly follow the steps outlined below to whitelist the IP in LOTUS : Step 1 : Open Domino Administrator : Go to Start > Programs > Lotus Domino > Domino Administrator. Step 2 : Navigate to the Server Document : Click on the Configuration tab, then ...
    • How to Whitelist ThreatCop in Barracuda?

      To whitelist ThreatCop’s IPs inBarracuda, you will have to follow the steps given below: For Barracuda’s Email Security Service (Cloud-based Version) Step 1: Log in to your Barracuda Cloud Control. Step 2: Go to Email Security > Inbound Settings > IP ...
    • How to Whitelist ThreatCop in McAfee?

      If you are using McAfee, a cloud-based spam filtering solution, you will have to whitelist ThreatCop IPs to allow the tool to send phishing and knowledge assessment emails to your employees. Follow these steps to modify your “police-level” and allow ...