The company built a business around a modest act: an employee reporting a dubious message. Now it wants that single signal to help clear an entire phishing campaign from the inbox.
