Your team should be able to click a Waybook link and land straight on the process they need. If your business runs on Microsoft 365, Defender can occasionally get in the way by flagging Waybook links as unsafe. A few minutes in your Defender settings clears the path.
You'll need Microsoft 365 admin access to make these changes. If that isn't you, pass this article to whoever looks after your Microsoft security settings.
Why Defender Sometimes Flags Waybook Links
Waybook content is private by design. To see anything, you have to be signed in, and the page is built in your browser using JavaScript once you are.
Automated link scanners can't get past that sign-in. When Defender looks at a Waybook URL and can't see what sits behind it, it sometimes plays it safe and marks the link as harmful.
Waybook URLs don't contain malicious content. We scan our systems routinely, test against the OWASP Top 10, and tightly control what code is allowed to run. You can read more in our Waybook Security overview.
Add Waybook to Your Allow List
Adding Waybook's domains to your tenant allow list tells Defender these links are safe, so your team stops hitting warnings.
Sign in to the Microsoft Defender portal.
Go to Email & Collaboration > Policies & Rules > Threat Policies > Tenant Allow/Block Lists.
Open the URLs tab and add a new Allow entry.
Add each of the domains below, then save.
Domains to allow |
|
|
|
|
|
|
waybook-mail.com is the domain we send email from, so allowing it helps invites and notifications reach your team. If emails still aren't landing, our guide to email deliverability issues covers a few more checks.
Prefer PowerShell?
If you manage Defender through PowerShell, this command does the same job:
New-TenantAllowBlockListItems -ListType Url -Allow -Entries "waybook.com","waybook.com/*","*.waybook.com","*.waybook.com/*","waybook-mail.com","waybook-mail.com/*" -RemoveAfter 45
đĄ Waybook Tip
The
-RemoveAfter 45value tells Microsoft to drop these entries after 45 days. Set yourself a reminder to run the command again, or change the value to match your own security policy.
Report False Positives to Microsoft
Your allow list fixes things inside your own tenant. Reporting the flagged link goes one step further and helps Microsoft unflag Waybook for everyone.
In the Defender portal, head to Actions & submissions > Submissions and submit the URL as one that should have been allowed. It takes a minute and saves other teams the same trouble.
Still seeing Waybook links blocked after making these changes? Our support team is here to help.