Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

anyone else getting verification emails from ory cloud flagged as phishing?

:open_mouth: are you using your own smtp server or our default sender?

no. this is from ory cloud. default everything

the only custom thing in there is the url  (<https://ory.kraudcloud.com>)  . maybe google doesn't like this for some reason?

yeah its the default template, so ory puts our custom domain there

hm, interesting. lots of users have ory as the subdomain name for their custom domain, but it’s possible that the calculated risk in google somehow flags this as phishing

two options:
1. try `<http://auth.kraudcloud.com|auth.kraudcloud.com>` 
2. set up your own smtp server that is connected to <http://kraudcloud.com|kraudcloud.com>

please let me know how it goes :slightly_smiling_face:

cofnigured sendinblue but their logs indicate no outgoing email

our project id is 99a10e15-c956-4b72-aede-2fdabae1c75f   could you check logs there?

have you checked <https://www.ory.sh/docs/kratos/emails-sms/sending-emails-smtp> ? i can check the logs but will need to do so later. by the way, we are working on email observability to help you debug this on your own!

/cc <@U03RSG5ST1Q> <@U03HLFCQ3CN>