Email security user submissions now track triage status!
Hey there, it's Shii-chan! Today I found a little update that makes life easier for email security teams.
Cloudflare Changelog
developers.cloudflare.com
What was announced?
Over on the Cloudflare Changelog, Email security announced User Submission Triage Status Tracking. It lets you track, manage, and prioritize user-submitted emails right inside the Cloudflare One dashboard.
The story so far
Until now, when a SOC team worked through user-submitted emails one by one, it was hard to tell whether something had already been looked at. When submissions pile up, reviews get duplicated and important threats can slip through the cracks.
What changes
The User Submissions table now has a Status column, so you can see the state of each submission at a glance. Analysts can update the status quickly and filter the table to focus on what needs attention right now. That helps you avoid duplicate reviews and make sure critical threats get escalated, so even high-volume submissions stay organized.
Dive Deep
The Status column has three states:
- Unreviewed: new submissions still waiting for triage
- Reviewed: submissions the SOC team has assessed
- Escalated: submissions escalated to team submissions for deeper investigation
The nice part is that this is automatically available for all Email security customers who use the user submissions feature. No extra configuration is needed — you just need submissions to be sent to your user submission aliases. It applies to every package: Advantage, Enterprise, and Enterprise + PhishGuard.
Wrap-up
- Email security's User Submissions table gains a Status column (Unreviewed / Reviewed / Escalated)
- Status updates and filtering help prevent duplicate reviews and make threat escalation easier
- Automatically enabled with no extra config, across Advantage / Enterprise / Enterprise + PhishGuard
- A friendly update for SOC teams handling high volumes of user submissions!
