CISO Tribune

Company record · security vendor

Sublime Security

CISO Tribune company record: Sublime Security, security vendor (Email security)

Where Sublime Security appears on the record (81)

Every page on CISO Tribune and its network that carries this company, 81 in all.

What the company sells

Sublime Security sells email security software that offers AI-powered protection against modern email threats. Sublime says legacy security solutions cannot keep up with AI-powered attacks. Sublime says a centralized detection model gives every customer the same blind spots and that updates take weeks or months. Sublime says its platform deploys a team of specialized AI agents that autonomously stop targeted attacks.

Sublime names two agents. ASA, the Autonomous Security Analyst, triages, investigates and resolves user-reported emails in seconds. Sublime says ASA clears the queue and provides transparent verdicts with investigation logs. ADÉ, the Autonomous Detection Engineer, generates new org-specific detections, backtests them and deploys coverage in hours. ADÉ creates and backtests org-specific coverage, then proposes it for deployment with approval in a click.

Sublime says its distributed detection model adapts coverage to the customer's environment and generates new defenses in hours. Sublime's Distributed Detection Model adapts with every message an organization sends and receives. Detection methods named by Sublime include natural language understanding, computer vision, file explosion and dynamic link analysis. Sublime recursively unpacks files, URLs and images to find hidden payloads, and decodes QR codes, extracts text with OCR and uses computer vision to spot phishing pages. Sublime groups related messages so analysts can investigate once and remediate across all affected mailboxes. Sublime supports threat hunting through historical email data using Sublime's detection language. Sublime can automatically quarantine, delete, or warn users the moment a threat is detected. Sublime finds and remediates malicious calendar invites (ICS phishing).

Sublime applies the same detection engine that powers inbound protection to catch sensitive data before it leaves the environment. Sublime says built-in DLP detections cover personal, payment, health and credential data. Sublime says ASA investigates each flagged message and blocks confirmed violations before delivery. Sublime says teams can manage inbound and outbound email protection in one platform, with one detection engine and one console.

Tailored Phishing Simulations and Training is a Sublime add-on that uses attacks detected in the customer's environment to prioritize and create relevant simulations. Sublime lets customers choose a Sublime-curated template, turn a malicious email detected in their environment into a simulation, or generate one from a scenario they describe. When employees click, Sublime delivers immediate, attack-specific training on the email and signals they missed.

Sublime connects to Microsoft 365 or Google Workspace via API, with no MX record changes. Sublime offers multi-tenant SaaS, single-tenant SaaS, or self-hosted deployment, and self-hosting is available to Enterprise customers. In the Enterprise-only option, Sublime says the software runs in the customer's VPC, and Sublime provides updates but can never access the data. In the other option, Sublime runs the software in its own VPC and operates it like traditional SaaS. Sublime stores and manages detection rules in GitHub, and exposes REST APIs to integrate email security data into existing workflows and tools. Sublime sends enriched telemetry to a SIEM and triggers playbooks in a SOAR. Sublime ingests threat feeds, YARA signatures and indicators of compromise (IOCs). Sublime works alongside Microsoft Defender for Office 365, and works alongside Google Workspace.

Sublime offers a plan that is free for individual security practitioners getting started on Sublime Cloud. Sublime sells a plan with the full platform, premium support and advanced controls. Snowflake observed a decrease in false positives and in the time spent managing email security after implementing Sublime. Elastic uses Sublime for email security. Sublime says US Signal strengthens email defense while simplifying operations. Josh spent 10 years in offensive cyber initiatives and red teaming in the private sector, and he started Sublime to build a product that would stop phishing, which was always the fastest way for him to gain access to a network.[2][5][6][7][8][10][11][12][13]

Headquarters
Not established from our sources
Founded
Not established from our sources
Ownership
Privately held[1][4][9][14]
CISO on record
Not yet on our record. Send a verified source

Products and services

Product names as the company writes them; what each does, in our words, from the company's own product pages. Never how well it does it.

  • Tailored Phishing Simulations and Training[7]

    Creates phishing simulations from attacks detected in the customer's environment and delivers just-in-time training.

    Tailored Phishing Simulations and Training is a Sublime add-on that uses attacks detected in the customer's environment to prioritize and create simulations. When employees click, Sublime delivers immediate, attack-specific training on the email and signals they missed. Teams can track click and report rates and see exposure by attack type.

Competitors and alternatives

The other companies on our record filed under the same categories, category by category: first those that lead with that category and share more of Sublime Security's categories, then alphabetical. A list from the record, never a ranking.

What review platforms show

The headline rating and review count each platform showed in public search results on the day we looked, with the link. We do not read or reproduce the reviews, and a rating is the platform's, not ours.

  • G2 · 5.0 out of 5[9]seen November 4, 2026

References

Every fact above cites one of these by number. Tier A is the company itself, a regulator or a filing; tier B is trade or business press.

  1. [1]Sublime security raises 150m in series c funding as industry first ai agents accelerate growth 302596266Sublime Security via PR Newswire · prnewswire.com · published October 28, 2025 · Tier A: the company, a regulator or a filing
  2. [2]Email Security Software Features | SublimeSublime Security · undated page, accessed September 27, 2026 · Tier A: the company, a regulator or a filing
  3. [3]AboutSublime Security · sublime.security · undated page, accessed September 27, 2026 · Tier A: the company, a regulator or a filing
  4. [4]Sublime Security | Agentic Email SecuritySublime Security · undated page, accessed October 28, 2026 · Tier A: the company, a regulator or a filing
  5. [5]Adaptive Email Security Platform | SublimeSublime Security · undated page, accessed October 28, 2026 · Tier A: the company, a regulator or a filing
  6. [6]Email Data Loss Prevention | SublimeSublime Security · undated page, accessed October 28, 2026 · Tier A: the company, a regulator or a filing
  7. [7]Tailored Phishing Simulations and Training | SublimeSublime Security · undated page, accessed October 28, 2026 · Tier A: the company, a regulator or a filing
  8. [8]Sublime Security | Customer storiesSublime Security · undated page, accessed October 28, 2026 · Tier A: the company, a regulator or a filing
  9. [9]Sublime Email Security Platform Pros and ConsG2 · undated page, accessed October 28, 2026 · Tier C
  10. [10]Email security software for Microsoft Office 365 | SublimeSublime Security · undated page, accessed November 4, 2026 · Tier A: the company, a regulator or a filing
  11. [11]Plans · Sublime SecuritySublime Security · undated page, accessed November 4, 2026 · Tier A: the company, a regulator or a filing
  12. [12]Security at Sublime · Sublime SecuritySublime Security · undated page, accessed November 4, 2026 · Tier A: the company, a regulator or a filing
  13. [13]Email security software for Google Workspace | SublimeSublime Security · undated page, accessed November 4, 2026 · Tier A: the company, a regulator or a filing
  14. [14]Built & Backed by Security Experts · Sublime SecuritySublime Security · undated page, accessed November 4, 2026 · Tier A: the company, a regulator or a filing

Last verified September 27, 2026. Our code found the quoted passage behind each fact on its source page when the fact was recorded, and re-checks every record against its sources each month.

Recorded September 27, 2026, expanded November 4, 2026 from the references above.

Work for Sublime Security? Suggest a correction to a fact on this page (with a source on your own domain), or claim this entry by publishing a small file on your domain.

Security leadership

CISO Tribune has not yet recorded who holds the top security seat at Sublime Security. We add a seat only from a verified source; if you have one, send it to the desk.

Questions CISOs ask about Sublime Security

What does Sublime Security sell?
Sublime Security sells Tailored Phishing Simulations and Training. Tailored Phishing Simulations and Training: Creates phishing simulations from attacks detected in the customer's environment and delivers just-in-time training.
How does CISO Tribune file Sublime Security?
CISO Tribune files Sublime Security under Email security, with Data loss prevention and AI SOC analysts as secondary categories.
Who owns Sublime Security?
Sublime Security is privately held.

Related guides