Multiple previous companies I've worked for have done phishing tests run by 3rd parties. Fortunately they typically set a "X-phishing-testing" type header so y

Multiple previous companies I've worked for have done phishing tests run by 3rd parties. Fortunately they typically set a "X-phishing-testing" type header so you can make a rule to get rid of them automatically.