Abnormal Security screenshot

What is Abnormal Security?

Abnormal Security is an AI-powered email security platform designed to detect and block advanced phishing attacks that traditional email filters miss. It analyses email behaviour patterns, sender characteristics, and content to identify threats in real time. The platform uses machine learning to understand what normal communication looks like for your organisation, then flags suspicious deviations. It's built for businesses of all sizes that want to protect their staff from sophisticated phishing campaigns, credential theft, and business email compromise attempts.

Key Features

Behaviour-based threat detection

Uses AI to analyse email patterns and sender behaviour rather than relying solely on signatures or rules

Advanced phishing identification

Catches sophisticated attacks including zero-day exploits, credential harvesting, and business email compromise

Real-time blocking

Stops malicious emails before they reach user inboxes

User reporting integration

Allows staff to report suspicious emails, with AI learning from these submissions

Email remediation

Can remove already-delivered phishing emails from inboxes

Pros & Cons

Advantages

  • Free tier available, making it accessible to smaller organisations without upfront investment
  • Focuses on catching advanced threats that bypass signature-based filters
  • Learns from your organisation's email behaviour, improving accuracy over time
  • User-friendly reporting system helps staff participate in security

Limitations

  • Requires integration with your email system, which may need IT support to set up
  • AI-based detection can occasionally flag legitimate emails as suspicious, requiring tuning
  • Free tier may have limitations on features or support compared to paid plans

Use Cases

Protecting employees at organisations handling sensitive data or financial information from targeted phishing

Defending against business email compromise where attackers impersonate executives or vendors

Reducing security awareness training burden by catching threats automatically

Compliance requirements where email security is mandated for regulated industries