Is it safe to whitelist Nimblr’s IP addresses for phishing simulations?
Microsoft Advanced Delivery is built for third-party phishing simulations, and only Nimblr's verified, exclusive IPs and domains bypass filtering. Here's how it works and how we keep it safe.
Whitelisting is a common question when setting up simulations, so here's a straight answer plus the details behind it: how the exemption works, why Nimblr's IPs are safe to trust, and what we do to keep our simulation infrastructure secure.
Is It Safe to Whitelist Nimblr's IP Addresses Using Microsoft Advanced Delivery?
Yes. To ensure realistic delivery of our simulations, Nimblr recommends using Microsoft's Advanced Delivery for third-party phishing simulations. This is Microsoft's own recommended method, built specifically to let simulation traffic bypass filtering without weakening your security. The exemption only covers Nimblr's verified IP addresses and domains. Everything else in your inbox stays fully protected by your existing filters.
Are Nimblr's IP Addresses Truly Exclusive?
Yes. The IP addresses used for our simulations belong to Nimblr alone. No other organization can send mail from them, so whitelisting them only opens the door for our controlled simulation traffic, nothing else.
How Is Access to Nimblr's Simulation Servers Controlled?
Access is tightly restricted:
- Servers are protected with IP restrictions and authentication.
- Only a small number of Nimblr employees can access them.
- Strong safeguards govern what can be sent, so only safe, approved simulation content ever goes out.
What Security Assurance Practices Does Nimblr Follow?
Nimblr invests heavily in security assurance through three key practices:
- Independent third-party penetration tests, performed regularly.
- Continuous automated vulnerability scanning across our environment.
- An active ISO 27001 certification program. Contact us for the current status of our compliance program.