Abnormal SecurityNEW

Abnormal Security is an AI-native cloud email security platform designed to protect organizations from advanced cyber threats, including Business Email Compromise (BEC), executive impersonation, and social engineering. The solution integrates seamlessly via APIs into Microsoft 365 and Google Workspace, eliminating the need to reroute email traffic through traditional Secure Email Gateways (SEGs).

The underlying technology relies on behavioral AI to build a dynamic baseline of normal communication patterns for every employee, department, and external vendor. Rather than depending solely on known threat signatures or malicious links, Abnormal analyzes thousands of signals including sender identity, location, writing style, context, and historical interactions.

Beyond inbound threat protection, the platform automates incident response workflows for security operations teams. Suspicious emails are automatically remediated from user inboxes across the tenant, and user-reported phishing emails are processed and resolved in seconds without requiring manual analyst intervention.

• Behavioral AI Knowledge Graph — Builds a dynamic profile of communication baselines for all users and vendors to accurately detect subtle anomalies that indicate malicious intent.
• Automated Post-Delivery Remediation — Identifies threats in real time and automatically purges malicious or compromised emails from all impacted employee mailboxes.
• Autonomous SOC Workflow for Reported Phishing — Automatically evaluates employee-submitted phishing reports, offloading security operations teams by rapidly triaging and remediating risks.

Mid-market organizations, large enterprises, and Security Operations Centers (SOCs) using Microsoft 365 or Google Workspace that require advanced protection against targeted phishing and social engineering.

A global enterprise encounters a wave of spear-phishing attacks where attackers send fraudulent invoices impersonating a legitimate vendor. Because the messages contain no malicious links or malware attachments, traditional email gateways fail to detect them. Abnormal Security flags the subtle anomaly in sender behavior and text context, automatically quarantining the message before the finance department processes the payment.

• Mid-market organizations, large enterprises, and Security Operations Centers (SOCs) using Microsoft 365 or Google Workspace that require advanced protection against targeted phishing and social engineering.
• A global enterprise encounters a wave of spear-phishing attacks where attackers send fraudulent invoices impersonating a legitimate vendor.
• Behavioral AI Knowledge Graph: Builds a dynamic profile of communication baselines for all users and vendors to accurately detect subtle anomalies that indicate malicious intent.
• Automated Post-Delivery Remediation: Identifies threats in real time and automatically purges malicious or compromised emails from all impacted employee mailboxes.
• Autonomous SOC Workflow for Reported Phishing: Automatically evaluates employee-submitted phishing reports, offloading security operations teams by rapidly triaging and remediating risks.

Not suitable for individual consumers, small businesses without centralized cloud email management, or organizations relying solely on traditional on-premises email infrastructure without cloud API connectivity.

• Darktrace — Paid · HQ: Cambridge, United Kingdom · GDPR / EU
• Dropzone AI — Paid · HQ: Seattle, United States · Unclear
• Sublime Security — Freemium · HQ: Washington, United States · Unclear
• Vectra AI — Paid · HQ: San Jose, United States · Unclear