Abnormal AI
Behavioral AI email security that connects over API to Microsoft 365 and Google Workspace to stop BEC and account takeover.
Technical Architecture & Overview
Abnormal AI, formerly Abnormal Security, builds a behavioral baseline of each vendor and employee identity and flags messages that deviate from it. The platform connects to Microsoft 365 and Google Workspace through APIs rather than a mail gateway, so it can act on delivered mail and detect mailbox rule abuse and account takeover. Coverage includes business email compromise, credential phishing, vendor fraud, and insider risk.
Targeted Technical Use Cases
Replacing or supplementing a gateway for organizations whose main mail threat is targeted BEC rather than commodity spam.
Evaluation & Trade-offs
Core Strengths
- +Identity-behavior model catches attacks with no malicious payload.
- +API deployment sees post-delivery threats such as hidden mailbox rules.
- +Large customer base in the ICES segment.
Trade-Offs & Limitations
- -Requires API access to the mail platform and a cloud email provider.
- -Commercial pricing targets enterprise budgets.
Defensive Security Application
Blocking business email compromise and detecting compromised mailboxes before payment or data loss occurs.
Frequently Asked Questions
What is Abnormal AI?→
Abnormal AI, formerly Abnormal Security, builds a behavioral baseline of each vendor and employee identity and flags messages that deviate from it. The platform connects to Microsoft 365 and Google Workspace through APIs rather than a mail gateway, so it can act on delivered mail and detect mailbox rule abuse and account takeover. Coverage includes business email compromise, credential phishing, vendor fraud, and insider risk.
What is Abnormal AI used for?→
Replacing or supplementing a gateway for organizations whose main mail threat is targeted BEC rather than commodity spam.
What are the strengths of Abnormal AI?→
- +Identity-behavior model catches attacks with no malicious payload.
- +API deployment sees post-delivery threats such as hidden mailbox rules.
- +Large customer base in the ICES segment.
What are the limitations of Abnormal AI?→
- +Requires API access to the mail platform and a cloud email provider.
- +Commercial pricing targets enterprise budgets.
How is Abnormal AI used defensively?→
Blocking business email compromise and detecting compromised mailboxes before payment or data loss occurs.