Skip to content
Submit a Ticket
  • There are no suggestions because the search field is empty.

Is it safe to whitelist Nimblr’s IP addresses for phishing simulations?

Whitelisting Nimblr’s IPs is safe because they are exclusive to us, strictly controlled, and only deliver approved simulation emails. Combined with Microsoft’s Advanced Delivery method, this ensures simulations reach users realistically without weakening your organization’s overall security.

Is it safe to whitelist Nimblr's IP addresses using Microsoft Advanced Delivery?

To ensure realistic delivery of our simulations, Nimblr recommends using Microsoft’s Advanced Delivery for third-party phishing simulations. This is Microsoft’s own recommended method, designed to let simulation traffic bypass filtering without weakening your security. Only Nimblr’s verified IP addresses and domains are covered; all other email traffic remains fully protected by your existing filters.

Are Nimblr's IP addresses truly exclusive?

The IP addresses used for our simulations are exclusive to Nimblr. No other organization can send messages from these IPs, which means the whitelisting only applies to our controlled simulation traffic.

How is access to Nimblr's simulation servers controlled?

Access to Nimblr's simulation servers is strictly limited. The servers are protected with IP restrictions and authentication, and only a very small number of Nimblr employees have access. Strong safeguards also control what can be sent, ensuring only safe and approved simulation content is delivered.

What security assurance practices does Nimblr follow?

Nimblr invests heavily in security assurance through three key practices:
  • Independent third-party penetration tests performed on a regular basis
  • Continuous automated vulnerability scanning across our environment
  • Active ISO 27001 certification program — please contact us for the current status of our compliance program

By combining Microsoft’s secure Advanced Delivery method with Nimblr’s exclusive IP addresses, strict server controls, and robust security governance, customers can be confident that phishing simulations are delivered safely without compromising their defenses.