Abnormal AI, Barracuda Networks, IRONSCALES and Sublime Security

About Barracuda Networks

Barracuda Networks sells the BarracudaONE cybersecurity platform, which covers email, data, applications and networks and is strengthened by a 24/7 managed XDR service. Barracuda says hundreds of thousands of customers worldwide count on Barracuda to protect their email, networks, applications and data. Barracuda says its cybersecurity solutions cover all the major threat vectors, protect data and automate incident response.^[1][5]

BarracudaONE unifies cybersecurity solutions in a centralized dashboard. BarracudaONE consolidates multiple solutions into a single platform, which Barracuda says eliminates the need for multi-vendor solutions. Barracuda says BarracudaONE reduces product overlap and prevents conflicting configurations. Bailey is powered by Barracuda IQ, which Barracuda describes as the AI engine and intelligence layer behind BarracudaONE.

Barracuda Email Protection is described as a complete email security solution that delivers AI-enhanced defenses, automated response and easy deployment. Barracuda Email Protection connects to Microsoft 365 or Google Workspace with no mail exchange changes. Barracuda Email Protection supplements Microsoft 365 and Google Workspace with stronger detection, behavioral account takeover identification and integrated backup for Microsoft 365 data. Barracuda IQ uses multi-model AI to analyze intent, identity behavior and multi-modal content across 100+ global threat feeds. Barracuda Cloud Security XDR detects account takeover and lateral movement.^[6]

Barracuda describes its all-in-one approach to data protection as a way to protect a business from data loss and theft. Barracuda says data can be backed up to any location including the public cloud, which eliminates the need to purchase and manage backup solutions from multiple vendors. Barracuda says Microsoft 365 data such as emails can be backed up. Backed up data is replicated to the Barracuda cloud with unlimited storage. Barracuda offers a scan of Microsoft 365 data for sensitive data and malware. Barracuda offers protection for Entra ID data and recovery from malicious attack and errors. Barracuda provides backup and recovery for collaboration data, including Microsoft Teams files and messages. Barracuda delivers security updates and incident notifications to administrators through Microsoft Teams and Slack.^[8][13]

Barracuda Application Protection is an integrated platform that brings a comprehensive set of interoperable capabilities together to ensure complete application security. Barracuda Web Application and API Protection (WAAP) solutions are available as hardware or virtual appliances, on premises or hosted in the cloud, as a container and through a SaaS solution. Barracuda Advanced Bot Protection uses artificial intelligence and machine learning in the cloud to continually improve its ability to spot and block bad bots. Barracuda Application Protection solutions integrate with AD, LDAP, SAML, JWT, OpenID and RADIUS.^[9]

Barracuda lists three core network products: SecureEdge, CloudGen Firewall and CloudGen Access. Barracuda SecureEdge is a SASE platform that combines Firewall-as-a-Service and Secure SD-WAN capabilities. Barracuda CloudGen Firewall is a family of physical, virtual and cloud-based appliances that protect complex, dispersed network infrastructures of multi-site enterprises and managed service providers.^[10]

Barracuda Managed XDR is described as able to detect threats earlier and help organizations respond to threats faster. Barracuda says its threat detection rules map to the MITRE ATT&CK framework. Barracuda says its XDR detects events from 40+ integrated data sources. Barracuda says its XDR responds to each threat with automated prescriptive instructions, automation and its 24/7 Security Operations Center. Barracuda runs a multi-tiered global SOC of security analysts and engineers that provides 24x7x365 service. Barracuda says Barracuda Managed XDR can reduce malware infection resolution from 3-4 weeks to less than one hour. With endpoint protection, Barracuda says it can identify and roll back ransomware attacks from endpoint devices.^[11]

Barracuda AI Data Security is built on the BarracudaONE platform and combines AI visibility, shadow AI discovery, data protection, threat defense and governance. Barracuda says Barracuda AI Data Security protects more than 1,300 GenAI tools. Barracuda AI Data Security can inspect AI prompts and uploads in real time and block sensitive data from reaching generative AI tools. Barracuda describes prebuilt detection for personally identifiable information, credentials, source code, payment cards and health data. MSPs can centrally manage customer environments and help customers adopt AI safely. For managed service providers, Barracuda describes a platform to protect customers' attack surfaces, including email, endpoints, networks, data and applications. Barracuda says its MSP-centric offerings include remote monitoring and management (RMM), extended detection and response (XDR) with SOC-as-a-Service, email protection and more. Barracuda Assistant, powered by Barracuda AI, gives MSPs real-time guidance, step-by-step resources and actionable insights.^{[5][9][12][13][14]}

About IRONSCALES

IRONSCALES sells email security that protects Microsoft 365 and Google Workspace against business email compromise, account takeover, malware and malicious URLs, credential harvesting, generative AI attacks, QR code and image-based phishing, and deepfake impersonation in Microsoft Teams meetings. IRONSCALES connects to Microsoft 365 or Google Workspace through a native API integration, with no MX record changes, no agents, and no mail flow disruption. IRONSCALES can be added behind an existing secure email gateway, and the gateway can be retired later.^[7]

Adaptive AI builds a behavioral baseline and social graph using NLP and NLU, learning how users normally communicate. Adaptive AI provides real-time reputation, content, and behavioral analysis to detect malicious threats. Adaptive AI works at the mailbox level and sees internal and external traffic. IRONSCALES combines Adaptive AI with human insight from 36,000+ threat hunters across 18,000+ organizations, so an attack confirmed in one organization is blocked for the rest.^[2][7]

Themis is described as an agentic AI virtual SOC that automatically classifies, clusters, and remediates threats detected by machine learning models or user-reported emails. When a threat is detected, Themis takes autonomous action: quarantining, clustering, or escalating based on automation preferences. IRONSCALES automates threat classification, incident clustering, quarantine actions, user notifications, and enrichment with threat intelligence. Admins can configure workflows from alert-only to fully automated remediation and end-user notification. When a user clicks the Report Phishing button, IRONSCALES scans the message, clusters it with similar emails, and evaluates it using Adaptive AI and community insights. The platform integrates with SIEM, SOAR, XDR, and EDR systems to support incident response workflows.^[2][9]

Red Teaming Agent runs the same OSINT reconnaissance attackers run, pulling from social media, press releases, job postings, and vendor relationships. Red Teaming Agent generates attack simulations from what it finds. Phishing SOC Agent delivers L2-level forensics in minutes and runs five analysis tracks in parallel: sender verification, body analysis for social engineering, link inspection through the full redirect chain, attachment detonation across 100+ engines, and relay path tracing. Phishing Simulation Agent gathers OSINT on people, including social media profiles, data breach exposure, and recent job changes, and builds simulations that mirror the tactics targeting the organization.^[6][10]

The platform incorporates Human Risk Management: phishing simulation, security awareness training, and user risk scoring modules that automatically tailor simulations to each employee's specific threat profile. IRONSCALES offers a GPT-powered spear phishing module for VIPs and frequently targeted employees. IRONSCALES experts handle email threat investigation, remediation, and AI tuning on the customer's behalf.^[2][11][12]

Deepfake Protection analyzes voice independently of video, so it catches impersonation even when cameras are off. Protected identity profiles build automatically from normal meeting activity, with no manual uploads and no IT involvement. Outbound email encryption is elective or policy-based, with AES-256 encryption in transit and at rest. Hosted DMARC, SPF, and DKIM come with automated policy enforcement, SPF record flattening, and continuous monitoring with detailed authentication reports. Account takeover protection detects unauthorized access attempts to Microsoft user accounts to prevent data breaches, internal BEC attacks, and ransomware.^[10][12]

IRONSCALES was founded in 2014 by alumni of the Israel Defense Forces' Intelligence Technology unit. IRONSCALES is headquartered in Atlanta, Georgia, and Tel Aviv, Israel. Series B funding of $8 million was led by Jump Capital, bringing total financing to $16 million since 2015. Series C funding of $64 million was led by PSG, bringing total financing to $80 million since 2015. Organizations worldwide are served both directly and through a network of more than 3,500 managed service provider (MSP) partners. For schools, the AI trains on actual attacks that target K-12 and higher education environments.^{[2][3][5][6][7][10][12][14][15][16]}

About Sublime Security

Sublime Security sells email security software that offers AI-powered protection against modern email threats. Sublime says legacy security solutions cannot keep up with AI-powered attacks. Sublime says a centralized detection model gives every customer the same blind spots and that updates take weeks or months. Sublime says its platform deploys a team of specialized AI agents that autonomously stop targeted attacks.^[2][5]

Sublime names two agents. ASA, the Autonomous Security Analyst, triages, investigates and resolves user-reported emails in seconds. Sublime says ASA clears the queue and provides transparent verdicts with investigation logs. ADÉ, the Autonomous Detection Engineer, generates new org-specific detections, backtests them and deploys coverage in hours. ADÉ creates and backtests org-specific coverage, then proposes it for deployment with approval in a click.^[2][10]

Sublime says its distributed detection model adapts coverage to the customer's environment and generates new defenses in hours. Sublime's Distributed Detection Model adapts with every message an organization sends and receives. Detection methods named by Sublime include natural language understanding, computer vision, file explosion and dynamic link analysis. Sublime recursively unpacks files, URLs and images to find hidden payloads, and decodes QR codes, extracts text with OCR and uses computer vision to spot phishing pages. Sublime groups related messages so analysts can investigate once and remediate across all affected mailboxes. Sublime supports threat hunting through historical email data using Sublime's detection language. Sublime can automatically quarantine, delete, or warn users the moment a threat is detected. Sublime finds and remediates malicious calendar invites (ICS phishing).^[2][5][11]

Sublime applies the same detection engine that powers inbound protection to catch sensitive data before it leaves the environment. Sublime says built-in DLP detections cover personal, payment, health and credential data. Sublime says ASA investigates each flagged message and blocks confirmed violations before delivery. Sublime says teams can manage inbound and outbound email protection in one platform, with one detection engine and one console.^[5][6]

Tailored Phishing Simulations and Training is a Sublime add-on that uses attacks detected in the customer's environment to prioritize and create relevant simulations. Sublime lets customers choose a Sublime-curated template, turn a malicious email detected in their environment into a simulation, or generate one from a scenario they describe. When employees click, Sublime delivers immediate, attack-specific training on the email and signals they missed.^[7]

Sublime connects to Microsoft 365 or Google Workspace via API, with no MX record changes. Sublime offers multi-tenant SaaS, single-tenant SaaS, or self-hosted deployment, and self-hosting is available to Enterprise customers. In the Enterprise-only option, Sublime says the software runs in the customer's VPC, and Sublime provides updates but can never access the data. In the other option, Sublime runs the software in its own VPC and operates it like traditional SaaS. Sublime stores and manages detection rules in GitHub, and exposes REST APIs to integrate email security data into existing workflows and tools. Sublime sends enriched telemetry to a SIEM and triggers playbooks in a SOAR. Sublime ingests threat feeds, YARA signatures and indicators of compromise (IOCs). Sublime works alongside Microsoft Defender for Office 365, and works alongside Google Workspace.^{[5][10][11][12][13]}

Sublime offers a plan that is free for individual security practitioners getting started on Sublime Cloud. Sublime sells a plan with the full platform, premium support and advanced controls. Snowflake observed a decrease in false positives and in the time spent managing email security after implementing Sublime. Elastic uses Sublime for email security. Sublime says US Signal strengthens email defense while simplifying operations. Josh spent 10 years in offensive cyber initiatives and red teaming in the private sector, and he started Sublime to build a product that would stop phishing, which was always the fastest way for him to gain access to a network.^{[2][5][6][7][8][11]}