There are a number of ways to reach us if you need help, want to ask a question, need to begin an investigative process, or want to report a phishing attempt.

Questions or Technical Support

You can use any of these methods if you have follow-up questions about alerts, investigations, incidents, or detections. If you need more help with any of these methods, see How to Submit a Support Request.

Email	To reach us through email, send your message to support@expel.com.
Help Center	To reach us through the Help Center, look for the Submit a request link in the left side menu.
Workbench	To reach us through Workbench, go to your profile in the upper right corner and select Submit a ticket in Zendesk.
Slack or Teams	To reach us through Slack or Teams, see these instructions.
Phone	Please use this method only when you require immediate confirmation that a SOC analyst is reviewing activity in Workbench or a request that you have submitted through the other methods shown here. The SOC will be unable to share sensitive data over the phone. To reach our SOC by phone, refer to the SOC floor number provided in Workbench by navigating to Dashboards > Welcome.

On-Demand Investigations

If you have a Managed Detection and Response (MDR) contract, on-demand investigations can be created for suspicious or malicious activity that did not cause an Expel alert, or that may have occurred in technologies partially or not integrated with Expel Workbench. 

If you need more help with this process or want to know what qualifies, see Create an On-Demand Investigation.

Managed Phishing

If you have the Managed Phishing service and a supported email service provider, you can use an official Expel Phishing button in your email program to report a potential phishing attempt. Supported providers include Microsoft 365 or Google Workspace; limited support is available for Microsoft Exchange Server.