Company record · security vendor
Sublime Security
Where Sublime Security appears on the record (81)
Every page on CISO Tribune and its network that carries this company, 81 in all.
- Compared with (77)
vs 7AI, vs Abnormal AI, vs Adaptive Security, vs Anomali, vs Barracuda Networks, vs Beacon, vs BigID, vs Binary Defense, vs Broadcom, vs Check Point Software Technologies, vs Code42, vs Cofense, vs Concentric AI, vs Conifers, vs Cyberhaven, vs CyberKord, vs Cyera, vs Cynet, vs D3 Security, vs Darktrace, vs Daylight, vs Doppel, vs Dropzone AI, vs DTEX Systems, vs Egress, vs Exabeam, vs Exaforce, vs F-Secure, vs Fasoo, vs Forcepoint, vs Graylog, vs Guardz, vs Gurucul, vs Harmonic Security, vs Hilt, vs Hornetsecurity, vs Hunters, vs Intezer, vs IRONSCALES, vs Island, vs Jazz, vs Judy Security, vs Kai, vs Keep Aware, vs KnowBe4, vs Legion Security, vs Leidos, vs Mate Security, vs Material Security, vs Mave, vs McAfee, vs Menlo Security, vs Mimecast, vs Netskope, vs Next DLP, vs NINJIO, vs Panther, vs Polymer, vs Proofpoint, vs Prophet Security, vs ReliaQuest, vs Rival Security, vs RunReveal, vs Securonix, vs Singulr, vs Skyhigh Security, vs Spin.AI, vs SquareX, vs Stellar Cyber, vs Swimlane, vs Teramind, vs ThreatDefence, vs Tines, vs Torq, vs Trend Micro, vs Trustifi, vs Virtru
- In the vendor directory (4)
- Email security vendors · primary category
- Data loss prevention vendors · category
- AI SOC analysts vendors · category
- SOC vendors: who they are and how CISOs compare them, from MDR to SIEM · vendor guide
What the company sells
Sublime Security sells email security software that offers AI-powered protection against modern email threats. Sublime says legacy security solutions cannot keep up with AI-powered attacks. Sublime says a centralized detection model gives every customer the same blind spots and that updates take weeks or months. Sublime says its platform deploys a team of specialized AI agents that autonomously stop targeted attacks.
Sublime names two agents. ASA, the Autonomous Security Analyst, triages, investigates and resolves user-reported emails in seconds. Sublime says ASA clears the queue and provides transparent verdicts with investigation logs. ADÉ, the Autonomous Detection Engineer, generates new org-specific detections, backtests them and deploys coverage in hours. ADÉ creates and backtests org-specific coverage, then proposes it for deployment with approval in a click.
Sublime says its distributed detection model adapts coverage to the customer's environment and generates new defenses in hours. Sublime's Distributed Detection Model adapts with every message an organization sends and receives. Detection methods named by Sublime include natural language understanding, computer vision, file explosion and dynamic link analysis. Sublime recursively unpacks files, URLs and images to find hidden payloads, and decodes QR codes, extracts text with OCR and uses computer vision to spot phishing pages. Sublime groups related messages so analysts can investigate once and remediate across all affected mailboxes. Sublime supports threat hunting through historical email data using Sublime's detection language. Sublime can automatically quarantine, delete, or warn users the moment a threat is detected. Sublime finds and remediates malicious calendar invites (ICS phishing).
Sublime applies the same detection engine that powers inbound protection to catch sensitive data before it leaves the environment. Sublime says built-in DLP detections cover personal, payment, health and credential data. Sublime says ASA investigates each flagged message and blocks confirmed violations before delivery. Sublime says teams can manage inbound and outbound email protection in one platform, with one detection engine and one console.
Tailored Phishing Simulations and Training is a Sublime add-on that uses attacks detected in the customer's environment to prioritize and create relevant simulations. Sublime lets customers choose a Sublime-curated template, turn a malicious email detected in their environment into a simulation, or generate one from a scenario they describe. When employees click, Sublime delivers immediate, attack-specific training on the email and signals they missed.
Sublime connects to Microsoft 365 or Google Workspace via API, with no MX record changes. Sublime offers multi-tenant SaaS, single-tenant SaaS, or self-hosted deployment, and self-hosting is available to Enterprise customers. In the Enterprise-only option, Sublime says the software runs in the customer's VPC, and Sublime provides updates but can never access the data. In the other option, Sublime runs the software in its own VPC and operates it like traditional SaaS. Sublime stores and manages detection rules in GitHub, and exposes REST APIs to integrate email security data into existing workflows and tools. Sublime sends enriched telemetry to a SIEM and triggers playbooks in a SOAR. Sublime ingests threat feeds, YARA signatures and indicators of compromise (IOCs). Sublime works alongside Microsoft Defender for Office 365, and works alongside Google Workspace.
Sublime offers a plan that is free for individual security practitioners getting started on Sublime Cloud. Sublime sells a plan with the full platform, premium support and advanced controls. Snowflake observed a decrease in false positives and in the time spent managing email security after implementing Sublime. Elastic uses Sublime for email security. Sublime says US Signal strengthens email defense while simplifying operations. Josh spent 10 years in offensive cyber initiatives and red teaming in the private sector, and he started Sublime to build a product that would stop phishing, which was always the fastest way for him to gain access to a network.[2][5][6][7][8][10][11][12][13]
- Categories
- Headquarters
- Not established from our sources
- Founded
- Not established from our sources
- CISO on record
- Not yet on our record. Send a verified source
- Website
- sublime.security
Products and services
Product names as the company writes them; what each does, in our words, from the company's own product pages. Never how well it does it.
Tailored Phishing Simulations and Training[7]
Creates phishing simulations from attacks detected in the customer's environment and delivers just-in-time training.
Tailored Phishing Simulations and Training is a Sublime add-on that uses attacks detected in the customer's environment to prioritize and create simulations. When employees click, Sublime delivers immediate, attack-specific training on the email and signals they missed. Teams can track click and report rates and see exposure by attack type.
Competitors and alternatives
The other companies on our record filed under the same categories, category by category: first those that lead with that category and share more of Sublime Security's categories, then alphabetical. A list from the record, never a ranking.
On email security, Sublime Security competes with Barracuda Networks, Egress, IRONSCALES, Trustifi, Abnormal AI, Cofense, Hornetsecurity, Material Security, Mimecast, Proofpoint and 12 more.
On data loss prevention, Sublime Security competes with Cyberhaven, Fasoo, Forcepoint, Hilt, Jazz, Next DLP, Barracuda Networks, Broadcom, Egress, Trustifi and 19 more.
On ai soc analysts, Sublime Security competes with 7AI, Anomali, Conifers, CyberKord, Dropzone AI, Exaforce, Intezer, Kai, Legion Security, Mate Security and 21 more.
What review platforms show
The headline rating and review count each platform showed in public search results on the day we looked, with the link. We do not read or reproduce the reviews, and a rating is the platform's, not ours.
References
Every fact above cites one of these by number. Tier A is the company itself, a regulator or a filing; tier B is trade or business press.
- [1]Sublime security raises 150m in series c funding as industry first ai agents accelerate growth 302596266Sublime Security via PR Newswire · prnewswire.com · published October 28, 2025 · Tier A: the company, a regulator or a filing
- [2]Email Security Software Features | SublimeSublime Security · undated page, accessed September 27, 2026 · Tier A: the company, a regulator or a filing
- [3]AboutSublime Security · sublime.security · undated page, accessed September 27, 2026 · Tier A: the company, a regulator or a filing
- [4]Sublime Security | Agentic Email SecuritySublime Security · undated page, accessed October 28, 2026 · Tier A: the company, a regulator or a filing
- [5]Adaptive Email Security Platform | SublimeSublime Security · undated page, accessed October 28, 2026 · Tier A: the company, a regulator or a filing
- [6]Email Data Loss Prevention | SublimeSublime Security · undated page, accessed October 28, 2026 · Tier A: the company, a regulator or a filing
- [7]Tailored Phishing Simulations and Training | SublimeSublime Security · undated page, accessed October 28, 2026 · Tier A: the company, a regulator or a filing
- [8]Sublime Security | Customer storiesSublime Security · undated page, accessed October 28, 2026 · Tier A: the company, a regulator or a filing
- [9]Sublime Email Security Platform Pros and ConsG2 · undated page, accessed October 28, 2026 · Tier C
- [10]Email security software for Microsoft Office 365 | SublimeSublime Security · undated page, accessed November 4, 2026 · Tier A: the company, a regulator or a filing
- [11]Plans · Sublime SecuritySublime Security · undated page, accessed November 4, 2026 · Tier A: the company, a regulator or a filing
- [12]Security at Sublime · Sublime SecuritySublime Security · undated page, accessed November 4, 2026 · Tier A: the company, a regulator or a filing
- [13]Email security software for Google Workspace | SublimeSublime Security · undated page, accessed November 4, 2026 · Tier A: the company, a regulator or a filing
- [14]Built & Backed by Security Experts · Sublime SecuritySublime Security · undated page, accessed November 4, 2026 · Tier A: the company, a regulator or a filing
Last verified September 27, 2026. Our code found the quoted passage behind each fact on its source page when the fact was recorded, and re-checks every record against its sources each month.
Recorded September 27, 2026, expanded November 4, 2026 from the references above.
Work for Sublime Security? Suggest a correction to a fact on this page (with a source on your own domain), or claim this entry by publishing a small file on your domain.
Security leadership
CISO Tribune has not yet recorded who holds the top security seat at Sublime Security. We add a seat only from a verified source; if you have one, send it to the desk.
Questions CISOs ask about Sublime Security
- What does Sublime Security sell?
- Sublime Security sells Tailored Phishing Simulations and Training. Tailored Phishing Simulations and Training: Creates phishing simulations from attacks detected in the customer's environment and delivers just-in-time training.
- How does CISO Tribune file Sublime Security?
- CISO Tribune files Sublime Security under Email security, with Data loss prevention and AI SOC analysts as secondary categories.
- Who owns Sublime Security?
- Sublime Security is privately held.
Related guides

CISO Reporting Structure, the Five Models and What the Filings Show
Most security chiefs report into technology leadership (64%), the rest to business leaders. The five models, their trade-offs and what 10-K filings show.

CISO News: Tracking Every Appointment and Departure in the Top Security Seat
CISO Tribune records every CISO appointment and departure as a sourced, dated entry, not a column: 466 moves to date, each with a primary source and a confirmed-or-reported label.

CISO, CSO, VP of Security, Head of Security: What the Titles Mean and What the Record Shows
A chief information security officer (CISO) owns information security. A chief security officer (CSO) usually adds physical security and investigations.