Some email security tools inspect links in incoming messages by opening them automatically. Rocketlane task notification emails can include action links such as Mark completed and Mark as blocked.

When a security scanner opens one of these links, Rocketlane may interpret it as an action from the recipient and update the task status. As a result, a task could be completed or blocked before the assignee has worked on it.

You can prevent this in either of the following ways:

1. Allowlist Rocketlane in your email security tool. Ask your IT or security team to configure the scanner so that it does not automatically open or follow action links in Rocketlane notification emails.
2. Require authentication for email actions. Contact Rocketlane Support and request authentication for task actions performed from emails. Once enabled, users must sign in or complete your organization’s SSO flow before the action is applied. Automated security scanners cannot complete this authentication step, so they cannot change the task status.

Note: Requiring authentication adds a sign-in step for legitimate users who select Mark completed or Mark as blocked from an email. The View task link continues to take them to the task in Rocketlane.