Glossary
Safe Links
A Defender for Office 365 feature that rewrites URLs and validates them at click time.
Safe Links is the Microsoft Defender for Office 365 feature that rewrites URLs in incoming email and Teams messages to point at a Microsoft proxy. When a user clicks, the proxy looks up the destination against current threat intelligence — including URLs that have gone malicious since the message was delivered — and either allows, warns, or blocks the click. Defends against time-of-click attacks where a phishing link looks clean at delivery but is weaponised before users click. Applies to URLs in Outlook (all platforms), Office desktop and web apps, Teams messages, and Microsoft 365 mobile apps. Requires Defender for Office 365 Plan 1 or higher.