Why Abnormal?
What Makes Abnormal Unique
Highest-Precision Protection Against All Attacks
Secure email gateways and built-in security within Microsoft and Google struggle to block socially-engineered attacks that pass reputation checks, have no links or attachments, and appear to come from trusted sources.
Abnormal profiles known good behavior and analyzes over 45,000 signals to detect anomalies that deviate from these baselines. Only Abnormal precisely blocks all socially-engineered and unwanted emails—both internal and external—and detects and remediates compromised accounts.
One-Click Deployment via API
Abnormal integrates with multiple Microsoft 365 and Google Workspace tenants in minutes, with one click and no disruption to mail flow.
No change to MX records or policies is required. Abnormal automatically profiles VIPs, end users, and vendors, protecting organizations in hours.
Replace Secure Email Gateways and Simplify Your Email Security Stack
Simplify your email security stack by eliminating the redundant email gateway layer, and re-enabling and enhancing Microsoft’s cloud gateway capabilities. Unify your entire inbound email security defenses, from email hygiene to zero-day advanced attacks.
Only Abnormal enhances the threat intelligence-based protection offered by cloud email providers and secure email gateways with its behavioral AI, providing an additional layer of defense.
Automates SOC Operations
Abnormal fully automates email triage, remediation, and reporting, allowing SOC teams to focus on strategic initiatives. The platform:
Brings together all cases, including threats auto-detected by Abnormal and user-reported emails submitted to abuse mailboxes
Automatically analyzes and triages cases
Remediates threats and compiles detailed explanations of attacks for review
Natively integrates with SIEM and SOAR tools to enrich insights and orchestrate workflows
Analysts can also use search and respond to rapidly contain missed attacks or misdirect emails with sensitive information.
Integrates Insights and Reporting
With a single pane of glass, analysts no longer need to juggle between multiple dashboards to gather email security insights and reports to better understand their overall email security posture.
Abnormal centralizes metrics, insights, actions, and the management of global block lists in one place, across hundreds of tenants, for both Microsoft and Google environments.
Improve Employee Productivity and Email Experience
Abnormal provides a native Microsoft email experience that puts an end to spam digests and portals.
With deep integration into Microsoft and Google via APIs, Abnormal learns each end user’s preference as they move emails between inbox, spam, and promotional folders within their mailboxes. This personalized understanding enables Abnormal to deliver incoming emails directly into their mailboxes, giving end users an immersive email experience without digests or portals.
