Configuring AI integrations

Overview

PhishingBox supports integration with third-party AI providers like OpenAI and Anthropic to power advanced features within the platform. AI integrations are currently only available to Enterprise accounts. Two features currently support AI integration:

• Report Generator – Produces AI-written summaries of phishing reports.

• KillPhish – Analyzes suspected phishing emails using AI threat modeling.

You can configure your own API connection to control which AI model is used and how it's billed. All integrations are managed through the AI tab under Account Settings.

Note: Charges from your AI provider may apply. Refer to their pricing documentation before enabling.

Configuring a connection 

1. Navigate to the AI tab in Administration > Settings > Account Settings.

2. Click Configure an AI provider.

3. In the Integration Store, select "Setup" on your AI provider (e.g., OpenAI).

4. Enter your API credentials and base URL.

5. Test and save the configuration.

Once configured, return to the AI tab to select a model from your connected provider.

AI Tab Options Explained

• Configure an AI provider
  Opens the Integration Store, where you can add OpenAI or Anthropic configurations. You must configure a connection before other options are displayed.

• Default Model

  If you have an AI provider configured, the dropdowns will include any models associated with your API key. The selected model will be the default used by the feature. 

• Save
  Saves your selected model settings.

Configuring AI Providers (Integration Store)

You can access your connections at any time by going to Administration > Integration Store. When configuring a provider like OpenAI, you will see the following fields:

• Active
  Toggle this to enable or disable the integration.

• API Key
  Enter the secret API key from your provider’s developer console. This is required for authentication.

• Base URL
  The endpoint for your AI provider. Standard base URLs for supported providers are listed below.

• Test
  Validates your API key and base URL to ensure the connection works.

• Save
  Stores the configuration once the test passes.

• Close
  Cancels configuration without saving changes.

You must successfully test the integration before saving.

Currently Supported Providers