Abnormal Security
Behavioral AI email security (now Abnormal AI)
Overview
Abnormal AI — rebranded from Abnormal Security in April 2025 — uses behavioral AI to catch business email compromise, phishing and account takeover that traditional gateways miss. Deploys via API into Microsoft 365 and Google Workspace; rated 4.8/5 on Gartner Peer Insights.
Pricing
Pricing shown for reference only. These figures reflect RECATOOLS research as of 16 Sep 2026 and may be out of date or incomplete. This is not financial or purchasing advice — always confirm the current price on the provider’s official website before making any decision.
- BEC + phishing detection
- API deployment (M365 / Google)
- Automated remediation
- Read-only trial mode
- Account takeover protection
- Security posture management
- AI Security Mailbox
- Email productivity
Use cases
What you can produce with Abnormal Security
- Catch business email compromise and account takeover that a traditional gateway misses
- Deploy by API into Microsoft 365 or Google Workspace without re-routing mail flow
- Score behaviour rather than match signatures, which is what the product is actually for
- Compare it on a 4.8/5 across 451 Gartner Peer Insights reviews, unusually strong for email security
- Search for it under Abnormal AI — it has not been Abnormal Security since April 2025
- Run it alongside an existing secure email gateway rather than as a replacement for one
Abnormal — rebranded Abnormal AI in April 2025 — remains the reference AI-native email security platform. Behavioral models baseline normal communication patterns, then catch the BEC, phishing and account-takeover attempts that signature-based gateways miss; it deploys by API into Microsoft 365 and Google Workspace in minutes, with no mail-flow changes. Review scores are exceptional (4.8/5 on both Gartner Peer Insights and G2), and FedRAMP Moderate authorization plus a $5.1B valuation signal enterprise staying power. It's priced like an enterprise product: quote-only, per mailbox, with contract minimums that make it hard to justify for smaller ASEAN organisations, and its API exists for platform integration rather than developers. Best-in-class if email social engineering is your top risk and budget allows.
What people say
4.8 stars across more than 450 Gartner Peer Insights reviews is about as good as it gets in email security, and it's the headline fact about Abnormal — which, note, hasn't been called Abnormal Security since April 2025, when it rebranded to Abnormal AI and hung the brand on its behavioral engine plus a push into autonomous SOC agents. G2 tells the same story at 4.8/5, with reviewers repeatedly citing BEC and vendor-fraud emails that Microsoft's and Proofpoint's filters wave through.
The product's real trick is deployment. It connects to Microsoft 365 or Google Workspace by API in minutes — no MX-record surgery — then spends its first days baselining who emails whom, about what, from where. The most common review arc runs: we trialled it in read-only mode, it caught things our gateway missed, we bought it. Complaints are modest but consistent on G2: occasional false positives needing manual review, some email-processing delays, and reporting that runs thinner than SOC teams would like.
Commercially it's an enterprise product with enterprise math: quote-only, priced per mailbox per year, and procurement data from Vendr suggests pricing around $15–35 per employee annually, with deals for 100–500 employees running $25,000–75,000 a year and a median contract near $44,000 — out of casual reach for smaller ASEAN businesses. The company itself is still private: a $5.1B valuation on $546M raised as of its August 2024 Series D, a CNBC Disruptor 50 regular, FedRAMP Moderate authorization achieved and FedRAMP High in progress. If email-borne social engineering is your top risk and the budget exists, it's on nearly every shortlist. Under a few hundred seats, the minimums sting.
2026 widened both the product and its reach. Abnormal extended its behavioural platform to identity and AI security in July, joined OpenAI's Daybreak cyber partner programme in August, and SoftBank began reselling it in Japan in September. In Singapore, IMDA accreditation in August put it on the government's Greenlane procurement track. The company says it protects more than 4,500 organisations.
Summary of public user & expert reviews, compiled by RECATOOLS.
Notable facts
- Abnormal Security detects BEC attacks with 99.75% accuracy — compared to 60% for traditional secure email gateways — because it analyses behavioural anomalies rather than malicious links.
- The platform processes over 45 billion threat signals per month to build its behavioural models for each protected organisation.
- Business email compromise attacks cost global organisations over $55 billion from 2013 to 2023 according to the FBI — the exact threat Abnormal was designed to stop.
Frequently asked questions
About this listing
This entry was compiled from publicly available data including Abnormal Security's official website, press releases, documentation, and reputable third-party publications. RECATOOLS is not affiliated with Abnormal Security unless explicitly stated.
Third-party AI tools update their pricing, features, availability, and policies frequently. Information here may be outdated by the time you read this — we make reasonable efforts to keep listings current, but cannot guarantee absolute accuracy.
For the latest details, please refer to Abnormal Security directly →
Spotted something out of date? Suggest an update →
More in Security & Safety
