- Home
- Email Security Gateways
- Abnormal Email Security
Abnormal Email Security
San Francisco, CA
What it is
Abnormal Email Security is a cloud service that uses behavioral AI to detect business email compromise, vendor fraud, account takeover, and AI-generated attacks. Its Attune foundation model builds behavioral baselines for individual identities and identifies deviations. The product page describes API deployment in 60 seconds. Search & Respond supports hunting, triage, and remediation across Microsoft 365 and Google with more than 30 filters. Custom AI Models can be created from email examples and natural-language descriptions, then tested against historical messages. Detection 360 investigates submitted missed attacks or false positives, explains outcomes, and updates detection models. Other capabilities analyze user-reported phishing, filter newsletters and promotions, and protect Slack, Microsoft Teams, and Zoom. Listed integrations include Microsoft Sentinel, Splunk Enterprise Security, IBM QRadar, Okta, Microsoft Entra ID, and ServiceNow. Abnormal says it maintains SOC 2 and several ISO certifications. Pricing is per-user mailbox and available on request.
For and against
For
- Behavioral identity baselines
- Microsoft 365 and Google support
- More than 30 search filters
- Custom detection models
- Phishing analysis automation
Against
- Pricing is available on request
- Cloud deployment only
- Per-user mailbox billing varies by features
The verdict
Abnormal Email Security combines behavioral detection with investigation, custom modeling, phishing analysis, and graymail filtering. Its cloud API deployment and broad integrations target organizational security teams, while pricing requires a request.
Who it suits
Abnormal Email Security is aimed at CISOs, security leaders, and SOC teams. It suits organizations using Microsoft 365 or Google that need behavioral email protection and response tools.
Plans and prices
Abnormal Email Security
Pricing available through a preferred partner or as a private offer through Azure Marketplace
Read 3 Oct 2026 · abnormal.ai
On the record
- Company
- Abnormal says it was founded in 2018; an official launch announcement identifies San Francisco, California as its base.abnormal.ai · read 3 Oct 2026
- Custom models
- Custom AI Models lets users create detection models from email examples and natural-language descriptions, then test them against historical messages.abnormal.ai · read 3 Oct 2026
- Deployment
- The product page says deployment is via API in 60 seconds.abnormal.ai · read 3 Oct 2026
- Detection
- Abnormal says its Attune foundation model builds per-identity behavioral baselines and detects attacks by deviation from those baselines.abnormal.ai · read 3 Oct 2026
- Email productivity
- Email Productivity filters graymail such as newsletters, promotions, and bulk messages.abnormal.ai · read 3 Oct 2026
- Integrations
- Abnormal's integrations directory lists Microsoft Sentinel, Splunk Enterprise Security, IBM QRadar, Okta, Microsoft Entra ID, and ServiceNow among supported integrations.abnormal.ai · read 3 Oct 2026
- Intended users
- Abnormal describes its solutions as purpose-built for CISOs, security leaders, and SOC teams.abnormal.ai · read 3 Oct 2026
- Messaging security
- The product page describes behavioral AI protection for Slack, Microsoft Teams, and Zoom.abnormal.ai · read 3 Oct 2026
- Operations
- Detection 360 investigates submitted missed attacks or false positives, explains outcomes, and updates detection models.abnormal.ai · read 3 Oct 2026
- Privacy
- Abnormal says its customer Data Protection Addendum addresses privacy frameworks including GDPR and CCPA.abnormal.ai · read 3 Oct 2026
- Purpose
- Cloud Email Security uses behavioral AI to detect email attacks, including business email compromise, vendor fraud, account takeover, and AI-generated attacks.abnormal.ai · read 3 Oct 2026
- Reported phishing
- AI Security Mailbox automates analysis of user-reported phishing, user responses, and threat remediation.abnormal.ai · read 3 Oct 2026
- Search and response
- Search & Respond supports hunting, triage, and remediation across Microsoft 365 and Google, with more than 30 search filters.abnormal.ai · read 3 Oct 2026
- Security and compliance
- Abnormal says it maintains SOC 2 certification and is certified to ISO/IEC 27001:2022, ISO/IEC 27701:2019, and ISO/IEC 42001:2023.abnormal.ai · read 3 Oct 2026
