CISO Tribune

Vendor comparison · 2 companies

Abnormal AI vs Alice

Abnormal AI sells a behavioral security platform that protects email, identity, and AI. Alice's WonderSuite gives security, product, and compliance teams red teaming and real-time guardrails. CISO Tribune files both under AI model and agent security. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Abnormal AI
  • Alice
Abnormal AI vs Alice: Products, Customers and Funding Compared
Abnormal AIAbnormal AI sells a behavioral security platform that protects email, identity, and AI.abnormal.aiAliceAlice's WonderSuite gives security, product, and compliance teams red teaming and real-time guardrails.alice.io
What it sells
  • Account Takeover Protection[3][12][19]Detects and remediates compromised Microsoft 365 and Google Workspace accounts.
  • Identity Threat Protection[3][11][12][15]Correlates signals to contain threats before and after authentication.
  • Email Productivity[12][18]Moves low-priority promotional email out of the inbox.
  • WonderSuite[1][2][4][5]WonderSuite is the AI security platform for teams launching customer-facing AI in regulated industries.
  • WonderBuild[1][6][9]WonderBuild red teams customer-facing AI apps, agents, and agentic workflows before launch.
  • WonderFence[1][3][4][6][7][8][9]WonderFence sits between external-facing AI and users, intercepting harmful, non-compliant, and off-policy responses before they land.
  • WonderCheck[1][4][7][9]WonderCheck's ongoing automated red-teaming detects drift, regression, and emerging risks.
  • Rabbit Hole[1][6][10][11]Rabbit Hole is an adversarial network of in-house researchers and data.
  • ActiveFence[3][8]Alice's ActiveFence is a UGC trust and safety layer that detects, prevents, and responds to online harm.
Categories
Headquarters
San Francisco, United States[1]New York, USA[1]
Founded
2018[1]Not stated on its pages
Ownership and funding
Privately held[2][12][14]Series D (USD 250 million round), August 6, 2024[2]Not stated on its pages
Named customers
  • Domino’s[4]
  • Avery Dennison[5]
  • Valvoline[6]
  • Ingersoll Rand[7]
  • Save the Children[8]
Not stated on its pages
Recent news
  • November 4, 2026Abnormal AI appointed Don Jeter as Chief Marketing Officer, reporting to the CEO and overseeing the global marketing team.[23]
  • September 24, 2026Abnormal AI previewed four AI Security suite products, including AI Agent Security and AI Cloud Security, with general availability planned for Q4 2026.[9]
  • August 27, 2026Abnormal AI expanded its email security platform with Control Center, Email DLP Rules and upgrades to its AI Phishing Coach.[10]
  • August 19, 2026Abnormal AI and OpenAI announced a strategic partnership, with Abnormal expanding its internal use of OpenAI and joining the OpenAI Daybreak Cyber Partner Program as an early security partner.[25]
  • July 29, 2026Abnormal AI extended its behavioral security to cover identities, AI systems and insider threats.[13]
Not stated on its pages
G2 and Gartner Peer Insights
  • G2: listed, seen October 23, 2026[14]
  • Gartner Peer Insights: Not stated on its pages
  • G2: Not stated on its pages
  • Gartner Peer Insights: listed, seen November 10, 2026[14]
Who it fits
Not written yetFrom its own pages, Alice offers WonderSuite to teams launching customer-facing AI in regulated industries. The pages describe WonderSuite giving security, product, and compliance teams red teaming and real-time guardrails. Foundation model labs, global enterprises and platforms deploying AI are the customers Alice names. Alice describes its ActiveFence layer as serving social platforms and marketplaces with UGC trust and safety. ActiveFence's deep web investigations serve enterprises and governments tracing malicious operations.
Last verified
October 10, 2026October 29, 2026

Where they overlap

  • Abnormal AI and Alice are both filed under AI model and agent security.

Where they differ, field by field

  • Abnormal AI's primary category is Email security; Alice's is AI model and agent security.
  • Abnormal AI is also filed under Identity threat detection and response and Workforce AI usage security. Alice is also filed under AI firewalls and guardrails.
  • Abnormal AI lists Account Takeover Protection, Identity Threat Protection and Email Productivity. Alice lists WonderSuite, WonderBuild, WonderFence, WonderCheck, Rabbit Hole and 1 more.
  • Abnormal AI is headquartered in San Francisco, United States. Alice is headquartered in New York, USA.
  • Abnormal AI was founded in 2018.
  • Abnormal AI is privately held.
  • Abnormal AI's latest recorded funding is Series D (USD 250 million round), dated August 6, 2024.
  • Abnormal AI publicly names Domino’s, Avery Dennison, Valvoline, Ingersoll Rand and Save the Children.

What it sells: Abnormal AI

What Account Takeover Protection does[3][12][19]
Account Takeover Protection learns normal sign-in, device, and behavioral patterns for each user. It remediates a confirmed compromise by signing out all open sessions, blocking access, and forcing a password reset. Abnormal AI says it correlates Microsoft 365 and Google Workspace sign-in signals with communication behavior. It identifies session and token-based attacks that defeat MFA.
What Identity Threat Protection does[3][11][12][15]
Identity Threat Protection correlates signals to contain threats before and after authentication. Abnormal AI says it correlates email, IdP, and SaaS signals into one behavioral model. The model catches privilege misuse and socially-engineered MFA resets.
What Email Productivity does[12][18]
Email Productivity uses behavioral AI to learn what matters to each employee and move low-priority promotional email out of the inbox. It moves detected graymail to a Promotions folder in Outlook or a Graymail label in Gmail. It deploys through API integration with no rules, policies, or quarantine configuration to manage. It supports Passive, Partial, and Active deployment modes.

What it sells: Alice

What WonderSuite does[1][2][4][5]
WonderSuite tests security and safety posture before launch, protects the AI experience in production, and catches what changes over time. WonderSuite covers pre-launch red teaming, real-time guardrails, and continuous post-launch testing in a single platform. WonderSuite provides end-to-end security coverage for agentic systems, from adversarial testing before deployment to real-time behavioral guardrails in production.
What WonderBuild does[1][6][9]
WonderBuild identifies gaps between policies and the system prompt, across text, multimodal, and agentic systems. WonderBuild gives CISO, legal, and compliance teams test documentation with findings mapped to regulatory requirements. WonderBuild red-teaming findings integrate into WonderFence.
What WonderFence does[1][3][4][6][7][8][9]
WonderFence reviews every prompt coming in and every response going out, and blocks harmful inputs before they hit the LLM. WonderFence trains a dedicated detector for each policy using real-world adversarial data, deployed at sub-100ms latency. WonderFence maps guardrails to EU AI Act, ISO 42001, NIST, MITRE ATLAS, and OWASP.
What WonderCheck does[1][4][7][9]
WonderCheck integrates directly into CI/CD pipelines for on-demand, scheduled, and ongoing testing. WonderCheck ranks issues by severity and pairs each one with clear remediation guidance. WonderCheck findings flow directly into WonderFence guardrails, or back into WonderBuild for deeper refinement.
What Rabbit Hole does[1][6][10][11]
Rabbit Hole collects real attacks and uses them to secure AI. Alice's solutions are powered by Rabbit Hole, an adversarial threat intelligence engine built on billions of real-world data samples.
What ActiveFence does[3][8]
ActiveFence live feeds surface harmful content, viral narratives, and coordinated manipulation in real time, across languages and regions. ActiveFence conducts deep web investigations to expose networks, specific threat actors, and emerging tactics. ActiveFence's SaaS tools are built for content moderation.

Questions about Abnormal AI and Alice

What do Abnormal AI and Alice sell?
Abnormal AI sells Account Takeover Protection, Identity Threat Protection and Email Productivity. Alice sells WonderSuite, WonderBuild, WonderFence, WonderCheck, Rabbit Hole and 1 more.
Are Abnormal AI and Alice in the same category?
They share AI model and agent security. Abnormal AI's primary category is Email security and Alice's is AI model and agent security.
Where are Abnormal AI and Alice headquartered?
Abnormal AI is headquartered in San Francisco, United States. Alice is headquartered in New York, USA.
When were Abnormal AI and Alice founded?
Abnormal AI was founded in 2018.
Who owns Abnormal AI and Alice?
Abnormal AI is privately held. Abnormal AI's latest recorded funding is Series D (USD 250 million round), dated August 6, 2024.
Which customers do Abnormal AI and Alice name?
Abnormal AI publicly names Domino’s, Avery Dennison, Valvoline, Ingersoll Rand and Save the Children.
Who are Abnormal AI and Alice sold to?
From its own pages, Alice offers WonderSuite to teams launching customer-facing AI in regulated industries.
What have Abnormal AI and Alice announced recently?
November 4, 2026: Abnormal AI appointed Don Jeter as Chief Marketing Officer, reporting to the CEO and overseeing the global marketing team.

About Abnormal AI

Abnormal AI sells a behavioral security platform that protects email, identity, and AI. Abnormal says AI-generated attacks are often too subtle for humans to see and too new for traditional threat intel to detect. Abnormal AI says its platform stops the attacks that slip past legacy gateways, including business email compromise, advanced phishing, vendor fraud, and account takeover. Abnormal AI states its mission is to stop crime with AI.[15]

Abnormal AI says its platform connects AI tools, people, agents, and cloud activity through behavioral context to govern adoption, enforce policies, detect threats, and support investigations. The platform has native API integrations across Microsoft 365, Google Workspace, Okta, CrowdStrike, and the customer's SIEM and SOAR. Abnormal AI says each supported connection helps Abnormal understand activity, investigate threats, and apply the controls the customer's team authorizes. Abnormal AI describes Attune as the behavioral AI model that learns what is normal and detects what does not fit. AI Data Analyst lets users ask plain-English questions and get security insights instantly. AI Data Analyst consolidates insights from across the Abnormal environment into a single source of truth.[15][16][20]

For email, Abnormal AI describes Inbound Email Security as stopping BEC, phishing, and credential theft before delivery. AI Security Mailbox is described as an AI co-worker for email security operations. AI Phishing Coach is described as just-in-time training that adapts to each user's real risk. Messaging Security is described as detecting and remediating malicious content in messaging apps, and Misdirected Email as preventing accidental data leakage from misaddressed email. Email DLP Rules combines a custom policy engine with an AI Triage Agent. Teams can launch Email DLP Rules in passive mode, logging matches without taking action, then move to active enforcement. Email Productivity uses behavioral AI to move low-priority promotional email out of the inbox, and Email Productivity deploys through API integration.[15][17][18][21]

For identity, Account Takeover Protection detects and remediates compromised Microsoft 365 and Google Workspace accounts by learning normal sign-in, device, and behavioral patterns for each user. Account Takeover Protection locks attackers out by revoking active sessions and forcing credential resets. Abnormal AI says Account Takeover Protection connects via API to Microsoft 365 and Google Workspace. Abnormal AI says brute force, credential stuffing, and token or session theft produce sign-ins that satisfy authentication. Abnormal AI says its platform correlates email, IdP, and SaaS signals into one behavioral model, catching privilege misuse and socially-engineered MFA resets. Identity Threat Protection correlates signals to contain threats before and after authentication. Infiltration Prevention is described as detecting synthetic personas and infiltration campaigns before access is provisioned. Posture Management is described as catching risky misconfigurations across the email platform.[3][15][19]

AI Cloud Security is described as detecting AI-driven attacks against cloud identities and workloads and containing threats within the customer's response policies. AI Cloud Security is at the Priority First stage, available for purchase and production deployment to selected customers. AI Employee Guardrails is described as keeping employee AI use on task, protecting sensitive data, and enforcing policies based on the person, tool, and request. AI Agent Security is described as inventorying production agents and verifying that each one behaves as intended. AI Agent Security is at the Design Partner stage, where selected customers evaluate the product and give regular feedback to the product team. AI Employee Guardrails is at the Design Partner stage. AI Security Workbench is described as running AI-powered investigations across petabytes of behavioral events.[3][15][20][21][22]

Abnormal AI says it powers 5,000 customers, including 30% of the Fortune 500.[16][17][18][19][20][21][22]

Abnormal AI on the record

Sources

Abnormal AI full record

  1. [1]Launching 24m series a funding from greylockAbnormal AI · abnormal.ai · published November 19, 2019 · Tier A
  2. [2]Series d 5b valuationAbnormal AI · abnormal.ai · published August 6, 2024 · Tier A
  3. [3]PlatformAbnormal AI · abnormal.ai · undated page, accessed September 27, 2026 · Tier A
  4. [4]Dominos rolls out stronger communications securityAbnormal AI · abnormal.ai · undated page, accessed October 10, 2026 · Tier A
  5. [5]Avery dennison case studyAbnormal AI · abnormal.ai · undated page, accessed October 10, 2026 · Tier A
  6. [6]ValvolineAbnormal AI · abnormal.ai · undated page, accessed October 10, 2026 · Tier A
  7. [7]Ingersoll randAbnormal AI · abnormal.ai · undated page, accessed October 10, 2026 · Tier A
  8. [8]Save the childrenAbnormal AI · abnormal.ai · undated page, accessed October 10, 2026 · Tier A
  9. [9]Abnormal ai expands its ai security suiteAbnormal AI · abnormal.ai · published September 24, 2026 · Tier A
  10. [10]Abnormal expands email security platformAbnormal AI · abnormal.ai · published August 27, 2026 · Tier A
  11. [11]Abnormal extends behavioral security platformAbnormal AI · abnormal.ai · published July 28, 2026 · Tier A
  12. [12]Behavioral AI for Email, Identity, and AI Security | Abnormal AIAbnormal AI · undated page, accessed October 23, 2026 · Tier A
  13. [13]Abnormal AI extends behavioral security to identities, AI systems, and insider threatsHelp Net Security · published July 29, 2026 · Tier B
  14. [14]Abnormal AI Reviews 2026: Details, Pricing, & Features - G2G2 · undated page, accessed October 23, 2026 · Tier C
  15. [15]The Behavioral Security Platform | Abnormal AIAbnormal AI · undated page, accessed November 5, 2026 · Tier A
  16. [16]AI Data Analyst | Automated Security Reporting | Abnormal AIAbnormal AI · undated page, accessed November 5, 2026 · Tier A
  17. [17]Email DLP Rules | Abnormal AIAbnormal AI · undated page, accessed November 5, 2026 · Tier A
  18. [18]Graymail Filtering | AI Email Productivity | Abnormal AIAbnormal AI · undated page, accessed November 5, 2026 · Tier A
  19. [19]Stop Account Takeover | ATO Detection | Abnormal AIAbnormal AI · undated page, accessed November 5, 2026 · Tier A
  20. [20]AI Cloud Security | Abnormal AIAbnormal AI · undated page, accessed November 5, 2026 · Tier A
  21. [21]AI Agent Security | Abnormal AIAbnormal AI · undated page, accessed November 5, 2026 · Tier A
  22. [22]AI Employee Guardrails | Abnormal AIAbnormal AI · undated page, accessed November 5, 2026 · Tier A
  23. [23]Abnormal AI Names Don Jeter CMO to Accelerate Its Expansion in AI SecurityAbnormal AI · published November 4, 2026 · Tier A
  24. [24]Abnormal AI Expands Leadership Team to Advance Behavioral AI PlatformAbnormal AI · published April 29, 2026 · Tier A
  25. [25]Abnormal AI and OpenAI Partner to Accelerate Secure Enterprise AI Adoption and Strengthen Cyber DefenseBusiness Wire · published August 19, 2026 · Tier A

Alice full record

  1. [1]alice.ioAlice · alice.io · undated page, accessed October 29, 2026 · Tier A
  2. [2]GenAI Apps & Agents Security | WonderSuite by AliceAlice · undated page, accessed November 10, 2026 · Tier A
  3. [3]Alice for third-party CX agentsAlice · undated page, accessed November 10, 2026 · Tier A
  4. [4]AI Governance & Safety Platform for Enterprise | AliceAlice · undated page, accessed November 10, 2026 · Tier A
  5. [5]AI Detection Response | Alice Red Teaming and GuardrailsAlice · undated page, accessed November 10, 2026 · Tier A
  6. [6]WonderBuild: Pre-Launch AI Red Teaming | AliceAlice · undated page, accessed November 10, 2026 · Tier A
  7. [7]WonderFence: Real-Time AI Guardrails | Sub-150ms LatencyAlice · undated page, accessed November 10, 2026 · Tier A
  8. [8]ActiveFence UGC Protection | Alice Trust & Safety PlatformAlice · undated page, accessed November 10, 2026 · Tier A
  9. [9]WonderCheck | Ongoing AI Red Teaming for Production | AliceAlice · undated page, accessed November 10, 2026 · Tier A
  10. [10]Alice | Secure, Safe, & Trustworthy AIAlice · undated page, accessed November 10, 2026 · Tier A
  11. [11]Foundation Models | AI Security, Safety & Trust Ecosystem | AliceAlice · undated page, accessed November 10, 2026 · Tier A
  12. [12]Multilingual AI Guardrails, Every Language & Dialect | AliceAlice · undated page, accessed November 10, 2026 · Tier A
  13. [13]Internal AgentsAlice · undated page, accessed November 10, 2026 · Tier A
  14. [14]Alice Reviews, Ratings & Features 2026Gartner Peer Insights · undated page, accessed November 10, 2026 · Tier C

Spot a factual error? Request a correction.