The three different plugins offered by PhishingBox have different capabilities and limitations, described in the table below.
| KillPhish | KillPhish Lite | Report Phishing COM add-in | |
| Works on... |
Microsoft 365 accounts (OWA, Outlook desktop, and Outlook app for Android/iPhone) |
Gmail/Google Workspaces | 64-bit Outlook desktop app running on a 64-bit Windows machine. |
| Where does the reported message get sent? | Reporter email address and additional reporter addresses. | Reporter email address and additional reporter addresses. | Reporter email address and additional reporter addresses. |
| Can the plugin give the email a score? | Yes | No | No |
| Can the plugin delete the message after it is reported by the user? | Yes | No | Yes |
| Can the plugin log that a user reported a simulated phishing email on Portal campaigns? | Yes | Yes | Yes |
| Supported on Shared mailboxes? | Yes, as of August 22, 2023 (KillPhish will not work on shared mailboxes if it was deployed prior to this date - you would need a new deployment to get it to work in that case). KillPhish does not work on group mailboxes. | No | Yes |
| Notes | Providing a tenant id is necessary for the add-in to work on mobile devices as well as some versions of Outlook. | The add-in cannot be white labeled. It cannot collect original message headers. | The COM add-in only works on 64-bit Windows machines. It is not compatible with remote terminal servers. |