
Abnormal Email Security
Abnormal Email Security is a cloud service that uses behavioral AI to detect email threats such as business email compromise, vendor fraud, account takeover …
What Abnormal Email Security is
Abnormal Email Security is a cloud service that uses behavioral AI to detect email threats such as business email compromise, vendor fraud, account takeover and AI-generated attacks. Its Attune foundation model builds behavioral baselines for individual identities and looks for deviations. The product page describes API deployment in 60 seconds. Search & Respond supports threat hunting, triage and remediation across Microsoft 365 and Google, with more than 30 search filters. Custom AI Models lets users build detection models from email examples and natural-language descriptions, then test them against historical messages. Detection 360 investigates submitted missed attacks and false positives, explains outcomes and updates detection models. Other tools automate analysis of user-reported phishing and filter graymail, including newsletters and promotions. The product page also describes behavioral AI protection for Slack, Microsoft Teams and Zoom. Listed integrations include security, identity and service-management tools. Abnormal says it maintains SOC 2 certification and holds several ISO certifications. Pricing is per-user mailbox, varies by platform features and is available through a preferred partner or a private Azure Marketplace offer.
Good
- Detects multiple email attack types using behavioral AI.
- Search & Respond offers more than 30 filters.
- Custom models can be tested against historical messages.
- Automates analysis of reported phishing.
Watch out
- Pricing is available through a partner or private offer.
- Per-user mailbox pricing varies by platform features.
- Deployment is described as cloud-based.
Who it suits
It is aimed at CISOs, security leaders and SOC teams managing email threats across Microsoft 365 or Google. It may also suit teams that want phishing-report analysis and email protections for listed collaboration services.
Verdict
Abnormal Email Security combines behavioral threat detection with tools for investigation, reporting and remediation. Check platform-specific pricing and whether its supported environments match your organization.
Plans and prices
From Abnormal Email Security's own pricing page, checked 3 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Abnormal Email Security | Priced on request | Pricing available through a preferred partner or as a private offer through Azure Marketplace · Per-user mailbox pricing; varies by platform features |
The facts
Each one read from Abnormal Email Security's own pages, with the date it was checked.
The company
- Company
- Abnormal says it was founded in 2018; an official launch announcement identifies San Francisco, California as its base.checked 3 Oct 2026
- Founded
- 2018checked 28 Sep 2026
- Headquarters
- San Francisco, CAchecked 28 Sep 2026
What it does
- Custom models
- Custom AI Models lets users create detection models from email examples and natural-language descriptions, then test them against historical messages.checked 3 Oct 2026
- Deployment
- The product page says deployment is via API in 60 seconds.checked 3 Oct 2026
- Detection
- Abnormal says its Attune foundation model builds per-identity behavioral baselines and detects attacks by deviation from those baselines.checked 3 Oct 2026
- Email productivity
- Email Productivity filters graymail such as newsletters, promotions, and bulk messages.checked 3 Oct 2026
- Integrations
- Abnormal's integrations directory lists Microsoft Sentinel, Splunk Enterprise Security, IBM QRadar, Okta, Microsoft Entra ID, and ServiceNow among supported integrations.checked 3 Oct 2026
- Intended users
- Abnormal describes its solutions as purpose-built for CISOs, security leaders, and SOC teams.checked 3 Oct 2026
- Messaging security
- The product page describes behavioral AI protection for Slack, Microsoft Teams, and Zoom.checked 3 Oct 2026
- Operations
- Detection 360 investigates submitted missed attacks or false positives, explains outcomes, and updates detection models.checked 3 Oct 2026
- Privacy
- Abnormal says its customer Data Protection Addendum addresses privacy frameworks including GDPR and CCPA.checked 3 Oct 2026
- Purpose
- Cloud Email Security uses behavioral AI to detect email attacks, including business email compromise, vendor fraud, account takeover, and AI-generated attacks.checked 3 Oct 2026
- Reported phishing
- AI Security Mailbox automates analysis of user-reported phishing, user responses, and threat remediation.checked 3 Oct 2026
- Search and response
- Search & Respond supports hunting, triage, and remediation across Microsoft 365 and Google, with more than 30 search filters.checked 3 Oct 2026
- Security and compliance
- Abnormal says it maintains SOC 2 certification and is certified to ISO/IEC 27001:2022, ISO/IEC 27701:2019, and ISO/IEC 42001:2023.checked 3 Oct 2026
Alternatives to Abnormal Email Security
- 1
Rspamd
Free planOpen sourceWebAPILinuxmacOS8.2From £100 a month - 2
Xeams
Free planWebAPILinuxmacOS7.8From $1.67 a month - 3

Hermes Secure Email Gateway
Free planOpen sourceWebLinuxSelf-hosted7.7Free plan - 4

Mailprotector
Free planWebAPI7.0Free plan - 5

Symantec IT Management Suite
WebAPILinuxmacOS6.8 - 66.5From $5 a month
