Displace SEG Head

Displace Your Secure Email Gateway (SEG)

Eliminate the need for your SEG when you combine Abnormal Integrated Cloud Email Security (ICES) with the native security capabilities of Microsoft 365.

SEGs Are Becoming Obsolete

As enterprises shift to the cloud office, attackers are finding new ways to attack. They are circumventing the secure email gateway and exploiting the open, connected nature of the cloud to move laterally across applications. Key issues with the SEG include:

Missed Attacks

The SEG detects based on static, known-bad indicators, which means it fails to identify text-only attacks, and has no risk context across vendors or partners.

Outdated Architecture

Because there is no native cloud-based API integration, the SEG is unable to leverage the thousands of cloud insights or see into 
East-West traffic.

Complex to Manage

In addition to having redundant capabilities with native Microsoft 365 security, the SEG requires multiple dashboards and needs constant tuning to maintain.

The Solution:
Abnormal ICES + Microsoft

Abnormal Integrated Cloud Email Security (ICES) displaces the redundant, outdated SEG and enhances the built-in protection of Microsoft 365. The solution blocks the full spectrum of attacks with a modern, API-driven, cloud-native solution, informed by innovations in AI-based behavioral data science.

Plus, there's no more needless complexity or switching between multiple dashboards to triage emails because ICES centralizes everything within a single pane of glass. View insights and actions—from edge protection, spam, and malware, down to user-reported email attacks—and manage blocklists across hundreds of tenants in one place.

“Our secure email gateway solution was failing to stop advanced high-risk/low-volume email attacks like BEC, which created a significant risk exposure to the company. Abnormal’s AI-based solution was the best intelligent, context-aware email security platform available.”

Gopal Padinjaruveetil,
CISO, Auto Club Group-AAA
SEG 3 D Background

Integrated Cloud Email Security Benefits

Integrated Cloud Email Security Benefits

Protects Against the Broad Spectrum of Email Attacks

Abnormal profiles known-good behavior within your environment and analyzes over 45,000 signals to detect anomalies that deviate from the baseline.

By understanding what is normal, Abnormal can block the malicious and unwanted emails that bypass other solutions.

Integrates Insights Reporting Update 1

Simplifies Email Security Architecture

Abnormal ICES simplifies email and security architecture, eliminating the complexity of secure email gateways. Our modern, cloud-native solution integrates via API and deploys in minutes.

Automates SOC Operations Update 1

Automates SOC Operations

Abnormal fully automates email triage, remediation, and reporting, bringing together all auto-detected and user-reported threats into a single interface.

Analysts can use search and respond functionality to rapidly contain missed attacks or misdirected emails.

Improves Your End User Experience

Abnormal provides a native Microsoft email experience that puts an end to spam digests and portals.

The platform learns each user’s preference as they move emails between folders within their mailbox. This personalized understanding enables Abnormal to deliver incoming emails directly into the folder, giving end users an immersive email experience.

Displacing Your SEG with Abnormal ICES

Before ICES

When email migrated to the cloud, in most cases, the SEG went with it. As a result, organizations were stuck with multiple products and incompatible architectures, which often forced them to disable Microsoft 365’s native protection.

This complicated architecture left Microsoft capabilities unused, created high overhead for security teams and end users, and introduced points of failure in the path of mailflow.


When you choose to simplify your email security with Microsoft and Abnormal ICES, not only can you deprecate your SEG, you can also re-enable and enhance Microsoft's threat intelligence-based protection with Abnormal's behavioral AI.

With this modern, simplified architecture, you enhance your protection against the full spectrum of attacks and unwanted email, and gain a single pane of glass to manage email security.

Providing a Unique Approach to Block Attacks

See what makes Abnormal different from traditional gateways.

Protects Against Attacks with High Efficacy

Precisely blocks all socially-engineered and unwanted emails that evade secure email gateways.

Illustration 2
Deploys via API in Minutes

Integrates via API with no configuration or policies needed, and no changes to mail flow required.

Illustration Fed Data
Federated Data Across Employees and Vendors

Identifies when third-party vendors have been compromised across all customers to block malicious emails.

Illustration 3
Automates SOC Operations

Fully automates email triage, remediation, and reporting, saving time for your SOC team.

Illustration 4
Integrates Insights and Reporting

Provides a single pane of glass for insights and reporting so analysts no longer need to switch between dashboards.

Illustration 5
Improves Your End User Experience

Gives you a consumer-grade end user experience that puts an end to spam digests and portals.

Demo 2x 1

See the Abnormal Solution to the Email Security Problem

Protect your organization from the attacks that matter most with Abnormal Integrated Cloud Email Security.

Related Resources