Different users can have their scores adjusted differently, such as having multipliers for their knowledge level such as a basic user who reports a non-malicious message has the reputation score reduced by 5, while a system administrator or technical expert could lose a multiple of that. The system can also be configured to reduce the reputation score of a user who fails to report a suspicious message that user is known to have received, or received and opened, after a specific period of time has elapsed. Points can be reduced based on failing to report either a simulated phishing message generated as described herein or an actual malicious message. Points can also be reduced for reporting a legitimate message as well. Alternatively, if a user falls victim to a phishing attack or malicious message and reports it after the fact, this can have a different point value than reporting the message prior to falling victim. The user who fell victim to the message can also have their reporter reputation score adjusted differently even though they reported it because they fell victim.
A recipe or rule can be configured to auto-reply to a user with a response after receiving a report from that user. The auto-reply can be to indicate that the reported message is not, in fact, suspicious. As a non-limiting example, if the message was an Advanced Threat, the auto-reply can congratulate the reporter for recognizing an Advanced Threat. Alternatively, the changes in scores can be different for different users. This can be based upon one or more factors such as the complexity of the malicious message, the experience, education or training of a user or their position or title. Additionally, the recipe can be configured to send various notifications to other teams, as will be discussed in further detail below.