Abnormal Security

Name: Abnormal Security
Brand: Abnormal Security

Abnormal Security is an API-integrated cloud email security platform that models normal communication behavior to detect and automate remediation of socially engineered attacks across Microsoft 365 and Google Workspace.

Est 2018|Valuation $5.1B|Raised $534M|128 Ref Customers

LinkedIn 112K|Website|Web traffic 80K|FTEs 1,000|HQ Las Vegas, Nevada, US

MarketsDLP (Data Loss Prevention)Cloud-Native Application Protection Platform (CNAPP)Web Application & API Protection (WAAP)Security Service Edge (SSE)Security Information and Event Management (SIEM)Productivity & Collaboration Suite Secure Email Gateway

Platform CoversEmail Security

01Competitive Landscape

| Aspect | Abnormal Security (Abnormal AI) | Proofpoint | Check Point Harmony Email & Collaboration (Avanan) | |--------|-------------------------------|------------|---------------------------------------------------| | Starting Price | Quote-based; not publicly listed; pricing observed as directional in review site aggregates | Quote-based; varies by package | Typically quote-based via partners; public list pricing often limited | | Suitable for | Organizations prioritizing detection of BEC/social engineering and API-based deployment models | Organizations seeking mature gateway email security with integrated outbound compliance | Organizations seeking API-based protection across email and collaboration surfaces (Microsoft 365/Google Workspace) | | Key Strength | Behavioral/anomaly-based detection emphasis and automated remediation workflows | Broad gateway feature set including outbound controls and DLP/encryption | API integration across collaboration surfaces and email platforms | | Key Weakness | Trade-offs associated with API/post-delivery remediation (dwell time, mailbox semantics); dependency on upstream provider APIs | Can be complex to operate and may require heavier administration; enterprise pricing models | Implementation and partner experience can vary; portal/tenant management issues reported in some community discussions |

Narrative analysis

- Abnormal versus Proofpoint - Abnormal: reviewers and community discussions frequently note operational characteristics such as reduced daily tuning in some deployments and a focus on socially engineered attacks that may bypass signature-based controls. - Proofpoint: tends to emphasize gateway controls, pre-delivery inspection, and integrated outbound compliance functions such as DLP and encryption. - Abnormal versus Check Point Harmony (Avanan) - Both vendors offer API-based protections for cloud email platforms. Community discussions note that the portal and trial management experiences can vary between vendors and deployment contexts. - Market share and adoption trends - The vendor publishes customer-count figures and references penetration in larger enterprises; these are vendor-reported statistics. Independent market-share estimates and analyst reports should be consulted for formal market-position assessment. - The vendor is included in analyst coverage for the email and collaboration security category and appears in industry evaluations covering that market segment.

01Competitive Landscape

Aspect	Abnormal Security (Abnormal AI)	Proofpoint	Check Point Harmony Email & Collaboration (Avanan)
Starting Price	Quote-based; not publicly listed; pricing observed as directional in review site aggregates	Quote-based; varies by package	Typically quote-based via partners; public list pricing often limited
Suitable for	Organizations prioritizing detection of BEC/social engineering and API-based deployment models	Organizations seeking mature gateway email security with integrated outbound compliance	Organizations seeking API-based protection across email and collaboration surfaces (Microsoft 365/Google Workspace)
Key Strength	Behavioral/anomaly-based detection emphasis and automated remediation workflows	Broad gateway feature set including outbound controls and DLP/encryption	API integration across collaboration surfaces and email platforms
Key Weakness	Trade-offs associated with API/post-delivery remediation (dwell time, mailbox semantics); dependency on upstream provider APIs	Can be complex to operate and may require heavier administration; enterprise pricing models	Implementation and partner experience can vary; portal/tenant management issues reported in some community discussions

Narrative analysis

Abnormal versus Proofpoint
- Abnormal: reviewers and community discussions frequently note operational characteristics such as reduced daily tuning in some deployments and a focus on socially engineered attacks that may bypass signature-based controls.
- Proofpoint: tends to emphasize gateway controls, pre-delivery inspection, and integrated outbound compliance functions such as DLP and encryption.
Abnormal versus Check Point Harmony (Avanan)
- Both vendors offer API-based protections for cloud email platforms. Community discussions note that the portal and trial management experiences can vary between vendors and deployment contexts.
Market share and adoption trends
- The vendor publishes customer-count figures and references penetration in larger enterprises; these are vendor-reported statistics. Independent market-share estimates and analyst reports should be consulted for formal market-position assessment.
- The vendor is included in analyst coverage for the email and collaboration security category and appears in industry evaluations covering that market segment.