PhishER Plus is an incident response platform that combines AI automation with threat intelligence to automate security responses and eliminate email-based threats. The platform serves as an additional security layer that operates after existing secure email gateways and other cybersecurity measures. It provides automated threat categorization and one-click remediation across mailboxes, reducing email analysis time. The system leverages blocklist entries of validated threats from trained users to automatically block matching incoming messages. PhishER Plus enables removal of identified threats from user mailboxes, quarantines messages to protect against future threats, and analyzes messages while continuously learning from user-tagged content and community feedback. The platform automatically converts user-reported phishing attacks into simulated phishing campaigns for training purposes and provides internet reputation data to enable automated responses to web threats.