Abnormal Security

Abnormal Security is a cloud-based email security platform that leverages AI and behavioral data science to detect and block sophisticated email attacks that evade traditional email gateways. The company's core offering is an inbound email security solution that protects against business email compromise, phishing, malware, ransomware, social engineering, and other advanced threats.

Abnormal's platform establishes a baseline of normal behavior for each employee, vendor, and application within an organization's email environment. By understanding "known good" activity patterns, the AI can precisely identify anomalies and remediate malicious emails in real-time before they reach inboxes. This behavioral analysis approach provides more effective threat detection compared to traditional email security focused on indicators of compromise.

The platform integrates directly with cloud email providers like Microsoft 365 and Google Workspace via an API, enabling rapid deployment without the need for a secure email gateway. Beyond inbound email protection, Abnormal also offers account takeover protection and SOC automation capabilities.

Abnormal expanded its platform in April 2023 to provide security monitoring and threat detection for collaboration apps like Slack, Microsoft Teams and Zoom. By ingesting identity signals from these additional data sources, the AI models can better understand cross-channel behavior and identify lateral movement by attackers across an enterprise's cloud environment.

Key customers and partnerships

Abnormal Security works with organizations across industries including government, finance, energy, manufacturing, technology, and consulting. Notable customers include PagerDuty, UserTesting, and Vungle, amongst others.

In January 2022, Abnormal announced a partnership with Microsoft to enhance native protection capabilities within Microsoft Defender for Office 365.