Abnormal AI

What the company sells

Abnormal AI sells a behavioral security platform that protects email, identity, and AI. Abnormal says AI-generated attacks are often too subtle for humans to see and too new for traditional threat intel to detect. Abnormal AI says its platform stops the attacks that slip past legacy gateways, including business email compromise, advanced phishing, vendor fraud, and account takeover. Abnormal AI states its mission is to stop crime with AI.

Abnormal AI says its platform connects AI tools, people, agents, and cloud activity through behavioral context to govern adoption, enforce policies, detect threats, and support investigations. The platform has native API integrations across Microsoft 365, Google Workspace, Okta, CrowdStrike, and the customer's SIEM and SOAR. Abnormal AI says each supported connection helps Abnormal understand activity, investigate threats, and apply the controls the customer's team authorizes. Abnormal AI describes Attune as the behavioral AI model that learns what is normal and detects what does not fit. AI Data Analyst lets users ask plain-English questions and get security insights instantly. AI Data Analyst consolidates insights from across the Abnormal environment into a single source of truth.

For email, Abnormal AI describes Inbound Email Security as stopping BEC, phishing, and credential theft before delivery. AI Security Mailbox is described as an AI co-worker for email security operations. AI Phishing Coach is described as just-in-time training that adapts to each user's real risk. Messaging Security is described as detecting and remediating malicious content in messaging apps, and Misdirected Email as preventing accidental data leakage from misaddressed email. Email DLP Rules combines a custom policy engine with an AI Triage Agent. Teams can launch Email DLP Rules in passive mode, logging matches without taking action, then move to active enforcement. Email Productivity uses behavioral AI to move low-priority promotional email out of the inbox, and Email Productivity deploys through API integration.

For identity, Account Takeover Protection detects and remediates compromised Microsoft 365 and Google Workspace accounts by learning normal sign-in, device, and behavioral patterns for each user. Account Takeover Protection locks attackers out by revoking active sessions and forcing credential resets. Abnormal AI says Account Takeover Protection connects via API to Microsoft 365 and Google Workspace. Abnormal AI says brute force, credential stuffing, and token or session theft produce sign-ins that satisfy authentication. Abnormal AI says its platform correlates email, IdP, and SaaS signals into one behavioral model, catching privilege misuse and socially-engineered MFA resets. Identity Threat Protection correlates signals to contain threats before and after authentication. Infiltration Prevention is described as detecting synthetic personas and infiltration campaigns before access is provisioned. Posture Management is described as catching risky misconfigurations across the email platform.

AI Cloud Security is described as detecting AI-driven attacks against cloud identities and workloads and containing threats within the customer's response policies. AI Cloud Security is at the Priority First stage, available for purchase and production deployment to selected customers. AI Employee Guardrails is described as keeping employee AI use on task, protecting sensitive data, and enforcing policies based on the person, tool, and request. AI Agent Security is described as inventorying production agents and verifying that each one behaves as intended. AI Agent Security is at the Design Partner stage, where selected customers evaluate the product and give regular feedback to the product team. AI Employee Guardrails is at the Design Partner stage. AI Security Workbench is described as running AI-powered investigations across petabytes of behavioral events.

Abnormal AI says it powers 5,000 customers, including 30% of the Fortune 500.^{[3][15][16][17][18][19][20][21][22]}

Categories

• Email security (primary category)
• Identity threat detection and response
• Workforce AI usage security
• AI model and agent security
• Compare Abnormal AI with companies in the same categoryside by side

Headquarters

San Francisco, United States^[1]

Founded

2018^[1]

Ownership

Privately held^[2][12][14]

Funding stage

Series D (USD 250 million round) (per Abnormal AI, August 6, 2024)^[2]

CISO on record

Not yet on our record. Send a verified source

Website

abnormal.ai

Products and services

Product names as the company writes them; what each does, in our words, from the company's own product pages. Never how well it does it.

• Account Takeover Protection^[3][12][19]

  Detects and remediates compromised Microsoft 365 and Google Workspace accounts.

  Account Takeover Protection learns normal sign-in, device, and behavioral patterns for each user. It remediates a confirmed compromise by signing out all open sessions, blocking access, and forcing a password reset. Abnormal AI says it correlates Microsoft 365 and Google Workspace sign-in signals with communication behavior. It identifies session and token-based attacks that defeat MFA.

• Identity Threat Protection^{[3][11][12][15]}

  Correlates signals to contain threats before and after authentication.

  Identity Threat Protection correlates signals to contain threats before and after authentication. Abnormal AI says it correlates email, IdP, and SaaS signals into one behavioral model. The model catches privilege misuse and socially-engineered MFA resets.

• Email Productivity^[12][18]

  Moves low-priority promotional email out of the inbox.

  Email Productivity uses behavioral AI to learn what matters to each employee and move low-priority promotional email out of the inbox. It moves detected graymail to a Promotions folder in Outlook or a Graymail label in Gmail. It deploys through API integration with no rules, policies, or quarantine configuration to manage. It supports Passive, Partial, and Active deployment modes.

Competitors and alternatives

The other companies on our record filed under the same categories, category by category: first those that lead with that category and share more of Abnormal AI's categories, then alphabetical. A list from the record, never a ranking.

• On email security, Abnormal AI competes with Material Security, Barracuda Networks, Cofense, Egress, Hornetsecurity, IRONSCALES, Mimecast, Proofpoint, Sublime Security, Trustifi and 12 more.

• On identity threat detection and response, Abnormal AI competes with Permiso, Semperis, Silverfort, Obsidian Security, Guardz, Material Security, Oasis Security, P0 Security, Acalvio, AuthMind and 16 more.

• On workforce ai usage security, Abnormal AI competes with Harmonic Security, Pluto Security, Aurascape, WitnessAI, Obsidian Security, Asymptote Labs, Bay, Lakera, Lasso Security, Neo and 17 more.

• On ai model and agent security, Abnormal AI competes with Asymptote Labs, Bay, Neo, Onyx Security, Pillar Security, AIShield, Alice, Dreadnode, Enkrypt AI, Fiddler AI and 54 more.

What review platforms show

The headline rating and review count each platform showed in public search results on the day we looked, with the link. We do not read or reproduce the reviews, and a rating is the platform's, not ours.

• G2 · 4.7 out of 5^[14]seen October 23, 2026

Named customers

Organizations publicly named as customers, each linked to the page that names it. Not a complete list, and not an endorsement.

• Domino’s^[4]Abnormal AI
• Avery Dennison^[5]Abnormal AI
• Valvoline^[6]Abnormal AI
• Ingersoll Rand^[7]Abnormal AI
• Save the Children^[8]Abnormal AI

Recent news

Dated company events from the last twelve months, each in one sentence of ours with its source. Newest first.

• November 4, 2026

  Abnormal AI appointed Don Jeter as Chief Marketing Officer, reporting to the CEO and overseeing the global marketing team. Abnormal AI^[23]

• September 24, 2026

  Abnormal AI previewed four AI Security suite products, including AI Agent Security and AI Cloud Security, with general availability planned for Q4 2026. Abnormal AI^[9]

• August 27, 2026

  Abnormal AI expanded its email security platform with Control Center, Email DLP Rules and upgrades to its AI Phishing Coach. Abnormal AI^[10]

• August 19, 2026

  Abnormal AI and OpenAI announced a strategic partnership, with Abnormal expanding its internal use of OpenAI and joining the OpenAI Daybreak Cyber Partner Program as an early security partner. Business Wire^[25]

• July 29, 2026

  Abnormal AI extended its behavioral security to cover identities, AI systems and insider threats. Help Net Security^[13]

• July 28, 2026

  Abnormal AI added three products to its Behavioral Security Platform: Identity Threat Protection, AI Governance and Infiltration Prevention. Abnormal AI^[11]

• April 29, 2026

  Abnormal AI appointed three senior executives: Stephen Harrison, Noah Rolff and John Slavitt. Abnormal AI^[24]

References

Every fact above cites one of these by number. Tier A is the company itself, a regulator or a filing; tier B is trade or business press.

1. [1]Launching 24m series a funding from greylockAbnormal AI · abnormal.ai · published November 19, 2019 · Tier A: the company, a regulator or a filing
2. [2]Series d 5b valuationAbnormal AI · abnormal.ai · published August 6, 2024 · Tier A: the company, a regulator or a filing
3. [3]PlatformAbnormal AI · abnormal.ai · undated page, accessed September 27, 2026 · Tier A: the company, a regulator or a filing
4. [4]Dominos rolls out stronger communications securityAbnormal AI · abnormal.ai · undated page, accessed October 10, 2026 · Tier A: the company, a regulator or a filing
5. [5]Avery dennison case studyAbnormal AI · abnormal.ai · undated page, accessed October 10, 2026 · Tier A: the company, a regulator or a filing
6. [6]ValvolineAbnormal AI · abnormal.ai · undated page, accessed October 10, 2026 · Tier A: the company, a regulator or a filing
7. [7]Ingersoll randAbnormal AI · abnormal.ai · undated page, accessed October 10, 2026 · Tier A: the company, a regulator or a filing
8. [8]Save the childrenAbnormal AI · abnormal.ai · undated page, accessed October 10, 2026 · Tier A: the company, a regulator or a filing
9. [9]Abnormal ai expands its ai security suiteAbnormal AI · abnormal.ai · published September 24, 2026 · Tier A: the company, a regulator or a filing
10. [10]Abnormal expands email security platformAbnormal AI · abnormal.ai · published August 27, 2026 · Tier A: the company, a regulator or a filing
11. [11]Abnormal extends behavioral security platformAbnormal AI · abnormal.ai · published July 28, 2026 · Tier A: the company, a regulator or a filing
12. [12]Behavioral AI for Email, Identity, and AI Security | Abnormal AIAbnormal AI · undated page, accessed October 23, 2026 · Tier A: the company, a regulator or a filing
13. [13]Abnormal AI extends behavioral security to identities, AI systems, and insider threatsHelp Net Security · published July 29, 2026 · Tier B: trade or business press
14. [14]Abnormal AI Reviews 2026: Details, Pricing, & Features - G2G2 · undated page, accessed October 23, 2026 · Tier C
15. [15]The Behavioral Security Platform | Abnormal AIAbnormal AI · undated page, accessed November 5, 2026 · Tier A: the company, a regulator or a filing
16. [16]AI Data Analyst | Automated Security Reporting | Abnormal AIAbnormal AI · undated page, accessed November 5, 2026 · Tier A: the company, a regulator or a filing
17. [17]Email DLP Rules | Abnormal AIAbnormal AI · undated page, accessed November 5, 2026 · Tier A: the company, a regulator or a filing
18. [18]Graymail Filtering | AI Email Productivity | Abnormal AIAbnormal AI · undated page, accessed November 5, 2026 · Tier A: the company, a regulator or a filing
19. [19]Stop Account Takeover | ATO Detection | Abnormal AIAbnormal AI · undated page, accessed November 5, 2026 · Tier A: the company, a regulator or a filing
20. [20]AI Cloud Security | Abnormal AIAbnormal AI · undated page, accessed November 5, 2026 · Tier A: the company, a regulator or a filing
21. [21]AI Agent Security | Abnormal AIAbnormal AI · undated page, accessed November 5, 2026 · Tier A: the company, a regulator or a filing
22. [22]AI Employee Guardrails | Abnormal AIAbnormal AI · undated page, accessed November 5, 2026 · Tier A: the company, a regulator or a filing
23. [23]Abnormal AI Names Don Jeter CMO to Accelerate Its Expansion in AI SecurityAbnormal AI · published November 4, 2026 · Tier A: the company, a regulator or a filing
24. [24]Abnormal AI Expands Leadership Team to Advance Behavioral AI PlatformAbnormal AI · published April 29, 2026 · Tier A: the company, a regulator or a filing
25. [25]Abnormal AI and OpenAI Partner to Accelerate Secure Enterprise AI Adoption and Strengthen Cyber DefenseBusiness Wire · published August 19, 2026 · Tier A: the company, a regulator or a filing

Last verified October 10, 2026. Our code found the quoted passage behind each fact on its source page when the fact was recorded, and re-checks every record against its sources each month.

Recorded September 27, 2026, expanded November 5, 2026 from the references above.

Work for Abnormal AI? Suggest a correction to a fact on this page (with a source on your own domain), or claim this entry by publishing a small file on your domain.