Freedom251 › Email Security Gateways
Abnormal Email Security
What Abnormal Email Security is
Abnormal Email Security is a cloud service that uses behavioral AI to detect email attacks, including business email compromise, vendor fraud, account takeover and AI-generated attacks. Its Attune foundation model builds a behavioral baseline for each identity and looks for deviations from it. The product page describes API deployment in 60 seconds. Search & Respond supports hunting, triage and remediation across Microsoft 365 and Google, with more than 30 search filters. Custom AI Models lets users define detections with email examples and natural-language descriptions, then test them against historical messages. Detection 360 investigates submitted missed attacks or false positives, explains outcomes and updates detection models. Other features automate analysis of user-reported phishing and filter bulk messages such as newsletters and promotions. The product also describes behavioral AI protection for Slack, Microsoft Teams and Zoom. Abnormal lists integrations including Microsoft Sentinel, Splunk Enterprise Security, IBM QRadar, Okta, Microsoft Entra ID and ServiceNow. Pricing is available on request.
Who it suits
Abnormal describes the service as intended for CISOs, security leaders and SOC teams. It suits organizations using Microsoft 365 or Google that want behavioral email threat detection and response tools.
What it does well
- Behavioral baselines are built for individual identities.
- Search & Respond offers more than 30 filters.
- Automates analysis of user-reported phishing.
- Supports Microsoft 365 and Google.
What to know first
- Paid service; pricing is available on request.
- Per-user mailbox pricing varies by platform features.
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Abnormal Email Security | Per-user mailbox pricing; varies by platform features · Pricing available through a preferred partner or as a private offer through Azure Marketplace | On request |
As abnormal.ai lists them, read 3 Oct 2026. The maker's own page has the final word.
Getting started
- Visit https://abnormal.ai/products/cloud-email-security.
- Choose the Abnormal Email Security paid plan.
- Arrange per-user mailbox pricing through a preferred partner or a private Azure Marketplace offer.
- Deploy via API; the product page describes deployment in 60 seconds.
Verdict
Abnormal combines behavioral threat detection with investigation, phishing analysis and graymail filtering. Its per-user mailbox pricing varies by platform features and is available through a preferred partner or private Azure Marketplace offer.
Questions
How is Abnormal Email Security priced?
It is paid, with per-user mailbox pricing that varies by platform features. Pricing is available through a preferred partner or as a private offer through Azure Marketplace.
Which platforms does it support?
The listed platforms are API and web. It supports Microsoft 365 and Google.
What attacks does it detect?
It detects business email compromise, vendor fraud, account takeover, and AI-generated attacks using behavioral AI.
What integrations are listed?
Listed integrations include Microsoft Sentinel, Splunk Enterprise Security, IBM QRadar, Okta, Microsoft Entra ID, and ServiceNow.
Who makes Abnormal Email Security?
Abnormal says it was founded in 2018 and identifies San Francisco, California as its base.
Facts from Abnormal Email Security's own pages
- Company
- Abnormal says it was founded in 2018; an official launch announcement identifies San Francisco, California as its base. · abnormal.ai, 3 Oct 2026
- Custom models
- Custom AI Models lets users create detection models from email examples and natural-language descriptions, then test them against historical messages. · abnormal.ai, 3 Oct 2026
- Deployment
- The product page says deployment is via API in 60 seconds. · abnormal.ai, 3 Oct 2026
- Detection
- Abnormal says its Attune foundation model builds per-identity behavioral baselines and detects attacks by deviation from those baselines. · abnormal.ai, 3 Oct 2026
- Email productivity
- Email Productivity filters graymail such as newsletters, promotions, and bulk messages. · abnormal.ai, 3 Oct 2026
- Founded
- 2018 · abnormal.ai, 28 Sept 2026
- Headquarters
- San Francisco, CA · abnormal.ai, 28 Sept 2026
- Integrations
- Abnormal's integrations directory lists Microsoft Sentinel, Splunk Enterprise Security, IBM QRadar, Okta, Microsoft Entra ID, and ServiceNow among supported integrations. · abnormal.ai, 3 Oct 2026
- Intended users
- Abnormal describes its solutions as purpose-built for CISOs, security leaders, and SOC teams. · abnormal.ai, 3 Oct 2026
- Messaging security
- The product page describes behavioral AI protection for Slack, Microsoft Teams, and Zoom. · abnormal.ai, 3 Oct 2026
- Operations
- Detection 360 investigates submitted missed attacks or false positives, explains outcomes, and updates detection models. · abnormal.ai, 3 Oct 2026
- Privacy
- Abnormal says its customer Data Protection Addendum addresses privacy frameworks including GDPR and CCPA. · abnormal.ai, 3 Oct 2026
- Purpose
- Cloud Email Security uses behavioral AI to detect email attacks, including business email compromise, vendor fraud, account takeover, and AI-generated attacks. · abnormal.ai, 3 Oct 2026
- Reported phishing
- AI Security Mailbox automates analysis of user-reported phishing, user responses, and threat remediation. · abnormal.ai, 3 Oct 2026
- Search and response
- Search & Respond supports hunting, triage, and remediation across Microsoft 365 and Google, with more than 30 search filters. · abnormal.ai, 3 Oct 2026
- Security and compliance
- Abnormal says it maintains SOC 2 certification and is certified to ISO/IEC 27001:2022, ISO/IEC 27701:2019, and ISO/IEC 42001:2023. · abnormal.ai, 3 Oct 2026
Where Abnormal Email Security stands on Freedom251
- Email Security Gateways#14 of 35