CISO Tribune

Vendor comparison · 2 companies

Abnormal AI vs Doppel

Abnormal AI sells a behavioral security platform that protects email, identity, and AI. Doppel sells an AI-powered platform that unifies Digital Risk Protection, Human Risk Management and Email Security. CISO Tribune files both under Email security. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Abnormal AI
  • Doppel
Abnormal AI vs Doppel: Products, Customers and Funding Compared
Abnormal AIAbnormal AI sells a behavioral security platform that protects email, identity, and AI.abnormal.aiDoppelDoppel sells an AI-powered platform that unifies Digital Risk Protection, Human Risk Management and Email Security.doppel.com
What it sells
  • Account Takeover Protection[3][12][19]Detects and remediates compromised Microsoft 365 and Google Workspace accounts.
  • Identity Threat Protection[3][11][12][15]Correlates signals to contain threats before and after authentication.
  • Email Productivity[12][18]Moves low-priority promotional email out of the inbox.
  • Brand Protection[1][5][6][7]Maps and dismantles impersonation, fraud, and counterfeit attacks before they escalate.
  • Executive Protection[1][5][6][8]Identifies threats targeting executives and automates enforcement against the attacker infrastructure behind them.
  • Security Awareness Training[1]Provides training videos and deepfake-driven custom training content.
  • Phishing Triage[1][12]AI-native triage of employee-reported phishing emails.
Categories
Headquarters
San Francisco, United States[1]Not stated on its pages
Founded
2018[1]2022[2]
Ownership and funding
Privately held[2][12][14]Series D (USD 250 million round), August 6, 2024[2]Not stated on its pages
Named customers
  • Domino’s[4]
  • Avery Dennison[5]
  • Valvoline[6]
  • Ingersoll Rand[7]
  • Save the Children[8]
Not stated on its pages
Recent news
  • November 4, 2026Abnormal AI appointed Don Jeter as Chief Marketing Officer, reporting to the CEO and overseeing the global marketing team.[23]
  • September 24, 2026Abnormal AI previewed four AI Security suite products, including AI Agent Security and AI Cloud Security, with general availability planned for Q4 2026.[9]
  • August 27, 2026Abnormal AI expanded its email security platform with Control Center, Email DLP Rules and upgrades to its AI Phishing Coach.[10]
  • August 19, 2026Abnormal AI and OpenAI announced a strategic partnership, with Abnormal expanding its internal use of OpenAI and joining the OpenAI Daybreak Cyber Partner Program as an early security partner.[25]
  • July 29, 2026Abnormal AI extended its behavioral security to cover identities, AI systems and insider threats.[13]
Not stated on its pages
G2 and Gartner Peer Insights
  • G2: listed, seen October 23, 2026[14]
  • Gartner Peer Insights: Not stated on its pages
  • G2: listed, seen November 10, 2026[15]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
Not written yetNot written yet
Last verified
October 10, 2026November 7, 2026

Where they overlap

  • Abnormal AI and Doppel are both filed under Email security.

Where they differ, field by field

  • Abnormal AI's primary category is Email security; Doppel's is Digital risk protection.
  • Abnormal AI is also filed under Identity threat detection and response, Workforce AI usage security and AI model and agent security. Doppel is also filed under Human risk management and Security awareness training.
  • Abnormal AI lists Account Takeover Protection, Identity Threat Protection and Email Productivity. Doppel lists Brand Protection, Executive Protection, Security Awareness Training and Phishing Triage.
  • Abnormal AI is headquartered in San Francisco, United States.
  • Abnormal AI was founded in 2018. Doppel was founded in 2022.
  • Abnormal AI is privately held.
  • Abnormal AI's latest recorded funding is Series D (USD 250 million round), dated August 6, 2024.
  • Abnormal AI publicly names Domino’s, Avery Dennison, Valvoline, Ingersoll Rand and Save the Children.

What it sells: Abnormal AI

What Account Takeover Protection does[3][12][19]
Account Takeover Protection learns normal sign-in, device, and behavioral patterns for each user. It remediates a confirmed compromise by signing out all open sessions, blocking access, and forcing a password reset. Abnormal AI says it correlates Microsoft 365 and Google Workspace sign-in signals with communication behavior. It identifies session and token-based attacks that defeat MFA.
What Identity Threat Protection does[3][11][12][15]
Identity Threat Protection correlates signals to contain threats before and after authentication. Abnormal AI says it correlates email, IdP, and SaaS signals into one behavioral model. The model catches privilege misuse and socially-engineered MFA resets.
What Email Productivity does[12][18]
Email Productivity uses behavioral AI to learn what matters to each employee and move low-priority promotional email out of the inbox. It moves detected graymail to a Promotions folder in Outlook or a Graymail label in Gmail. It deploys through API integration with no rules, policies, or quarantine configuration to manage. It supports Passive, Partial, and Active deployment modes.

What it sells: Doppel

What Brand Protection does[1][5][6][7]
Doppel detects and dismantles impersonation campaigns across social media, domains, ads, app stores, messaging platforms, and the dark web. Brand Protection integrates with SIEM/SOAR systems such as Splunk, Tines, and Elastic, enabling automated takedown workflows and audit logging. Customers get analytics and ROI dashboards with coverage metrics, takedown logs, and compliance-ready reporting.
What Executive Protection does[1][5][6][8]
Doppel Executive Protection continuously identifies threats targeting executives, uncovers the attacker infrastructure behind them, and automates enforcement to stop attacks before they escalate. Executive Protection is designed for anyone who presents a high-value target to threat actors, not just C-suite executives. Agentic AI automates takedowns and issues removals via platform APIs and escalation paths, supported by the Doppel SOC.
What Security Awareness Training does[1]
Doppel offers a library of actor-led and AI-generated security and compliance training videos, and can create deepfake-driven custom video content. Training can be conducted as a part of a simulation campaign or run independently. Doppel also provides personalized, AI-driven coaching based on user behavior during simulations.
What Phishing Triage does[1][12]
Doppel Phishing Triage is an AI-native email phishing triage engine that gives employees a way to report suspicious emails and gives security teams a way to evaluate and remediate them. Malicious emails are automatically removed from the inbox. Insight from Phishing Triage can be used to create training content and simulation campaigns.

Questions about Abnormal AI and Doppel

What do Abnormal AI and Doppel sell?
Abnormal AI sells Account Takeover Protection, Identity Threat Protection and Email Productivity. Doppel sells Brand Protection, Executive Protection, Security Awareness Training and Phishing Triage.
Are Abnormal AI and Doppel in the same category?
They share Email security. Abnormal AI's primary category is Email security and Doppel's is Digital risk protection.
Where are Abnormal AI and Doppel headquartered?
Abnormal AI is headquartered in San Francisco, United States.
When were Abnormal AI and Doppel founded?
Abnormal AI was founded in 2018. Doppel was founded in 2022.
Who owns Abnormal AI and Doppel?
Abnormal AI is privately held. Abnormal AI's latest recorded funding is Series D (USD 250 million round), dated August 6, 2024.
Which customers do Abnormal AI and Doppel name?
Abnormal AI publicly names Domino’s, Avery Dennison, Valvoline, Ingersoll Rand and Save the Children.
What have Abnormal AI and Doppel announced recently?
November 4, 2026: Abnormal AI appointed Don Jeter as Chief Marketing Officer, reporting to the CEO and overseeing the global marketing team.

About Abnormal AI

Abnormal AI sells a behavioral security platform that protects email, identity, and AI. Abnormal says AI-generated attacks are often too subtle for humans to see and too new for traditional threat intel to detect. Abnormal AI says its platform stops the attacks that slip past legacy gateways, including business email compromise, advanced phishing, vendor fraud, and account takeover. Abnormal AI states its mission is to stop crime with AI.[15]

Abnormal AI says its platform connects AI tools, people, agents, and cloud activity through behavioral context to govern adoption, enforce policies, detect threats, and support investigations. The platform has native API integrations across Microsoft 365, Google Workspace, Okta, CrowdStrike, and the customer's SIEM and SOAR. Abnormal AI says each supported connection helps Abnormal understand activity, investigate threats, and apply the controls the customer's team authorizes. Abnormal AI describes Attune as the behavioral AI model that learns what is normal and detects what does not fit. AI Data Analyst lets users ask plain-English questions and get security insights instantly. AI Data Analyst consolidates insights from across the Abnormal environment into a single source of truth.[15][16][20]

For email, Abnormal AI describes Inbound Email Security as stopping BEC, phishing, and credential theft before delivery. AI Security Mailbox is described as an AI co-worker for email security operations. AI Phishing Coach is described as just-in-time training that adapts to each user's real risk. Messaging Security is described as detecting and remediating malicious content in messaging apps, and Misdirected Email as preventing accidental data leakage from misaddressed email. Email DLP Rules combines a custom policy engine with an AI Triage Agent. Teams can launch Email DLP Rules in passive mode, logging matches without taking action, then move to active enforcement. Email Productivity uses behavioral AI to move low-priority promotional email out of the inbox, and Email Productivity deploys through API integration.[15][17][18][21]

For identity, Account Takeover Protection detects and remediates compromised Microsoft 365 and Google Workspace accounts by learning normal sign-in, device, and behavioral patterns for each user. Account Takeover Protection locks attackers out by revoking active sessions and forcing credential resets. Abnormal AI says Account Takeover Protection connects via API to Microsoft 365 and Google Workspace. Abnormal AI says brute force, credential stuffing, and token or session theft produce sign-ins that satisfy authentication. Abnormal AI says its platform correlates email, IdP, and SaaS signals into one behavioral model, catching privilege misuse and socially-engineered MFA resets. Identity Threat Protection correlates signals to contain threats before and after authentication. Infiltration Prevention is described as detecting synthetic personas and infiltration campaigns before access is provisioned. Posture Management is described as catching risky misconfigurations across the email platform.[3][15][19]

AI Cloud Security is described as detecting AI-driven attacks against cloud identities and workloads and containing threats within the customer's response policies. AI Cloud Security is at the Priority First stage, available for purchase and production deployment to selected customers. AI Employee Guardrails is described as keeping employee AI use on task, protecting sensitive data, and enforcing policies based on the person, tool, and request. AI Agent Security is described as inventorying production agents and verifying that each one behaves as intended. AI Agent Security is at the Design Partner stage, where selected customers evaluate the product and give regular feedback to the product team. AI Employee Guardrails is at the Design Partner stage. AI Security Workbench is described as running AI-powered investigations across petabytes of behavioral events.[3][15][20][21][22]

Abnormal AI says it powers 5,000 customers, including 30% of the Fortune 500.[16][17][18][19][20][21][22]

Abnormal AI on the record

Sources

Abnormal AI full record

  1. [1]Launching 24m series a funding from greylockAbnormal AI · abnormal.ai · published November 19, 2019 · Tier A
  2. [2]Series d 5b valuationAbnormal AI · abnormal.ai · published August 6, 2024 · Tier A
  3. [3]PlatformAbnormal AI · abnormal.ai · undated page, accessed September 27, 2026 · Tier A
  4. [4]Dominos rolls out stronger communications securityAbnormal AI · abnormal.ai · undated page, accessed October 10, 2026 · Tier A
  5. [5]Avery dennison case studyAbnormal AI · abnormal.ai · undated page, accessed October 10, 2026 · Tier A
  6. [6]ValvolineAbnormal AI · abnormal.ai · undated page, accessed October 10, 2026 · Tier A
  7. [7]Ingersoll randAbnormal AI · abnormal.ai · undated page, accessed October 10, 2026 · Tier A
  8. [8]Save the childrenAbnormal AI · abnormal.ai · undated page, accessed October 10, 2026 · Tier A
  9. [9]Abnormal ai expands its ai security suiteAbnormal AI · abnormal.ai · published September 24, 2026 · Tier A
  10. [10]Abnormal expands email security platformAbnormal AI · abnormal.ai · published August 27, 2026 · Tier A
  11. [11]Abnormal extends behavioral security platformAbnormal AI · abnormal.ai · published July 28, 2026 · Tier A
  12. [12]Behavioral AI for Email, Identity, and AI Security | Abnormal AIAbnormal AI · undated page, accessed October 23, 2026 · Tier A
  13. [13]Abnormal AI extends behavioral security to identities, AI systems, and insider threatsHelp Net Security · published July 29, 2026 · Tier B
  14. [14]Abnormal AI Reviews 2026: Details, Pricing, & Features - G2G2 · undated page, accessed October 23, 2026 · Tier C
  15. [15]The Behavioral Security Platform | Abnormal AIAbnormal AI · undated page, accessed November 5, 2026 · Tier A
  16. [16]AI Data Analyst | Automated Security Reporting | Abnormal AIAbnormal AI · undated page, accessed November 5, 2026 · Tier A
  17. [17]Email DLP Rules | Abnormal AIAbnormal AI · undated page, accessed November 5, 2026 · Tier A
  18. [18]Graymail Filtering | AI Email Productivity | Abnormal AIAbnormal AI · undated page, accessed November 5, 2026 · Tier A
  19. [19]Stop Account Takeover | ATO Detection | Abnormal AIAbnormal AI · undated page, accessed November 5, 2026 · Tier A
  20. [20]AI Cloud Security | Abnormal AIAbnormal AI · undated page, accessed November 5, 2026 · Tier A
  21. [21]AI Agent Security | Abnormal AIAbnormal AI · undated page, accessed November 5, 2026 · Tier A
  22. [22]AI Employee Guardrails | Abnormal AIAbnormal AI · undated page, accessed November 5, 2026 · Tier A
  23. [23]Abnormal AI Names Don Jeter CMO to Accelerate Its Expansion in AI SecurityAbnormal AI · published November 4, 2026 · Tier A
  24. [24]Abnormal AI Expands Leadership Team to Advance Behavioral AI PlatformAbnormal AI · published April 29, 2026 · Tier A
  25. [25]Abnormal AI and OpenAI Partner to Accelerate Secure Enterprise AI Adoption and Strengthen Cyber DefenseBusiness Wire · published August 19, 2026 · Tier A

Doppel full record

  1. [1]doppel.comDoppel · doppel.com · undated page, accessed November 7, 2026 · Tier A
  2. [2]About usDoppel · doppel.com · undated page, accessed November 7, 2026 · Tier A
  3. [3]Solutions | DoppelDoppel · undated page, accessed November 10, 2026 · Tier A
  4. [4]Doppel | The world's first platform for Social Engineering Defense.Doppel · undated page, accessed November 10, 2026 · Tier A
  5. [5]Doppel Platform | DoppelDoppel · undated page, accessed November 10, 2026 · Tier A
  6. [6]Digital Risk Protection (DRP) | DoppelDoppel · undated page, accessed November 10, 2026 · Tier A
  7. [7]Brand Protection | DoppelDoppel · undated page, accessed November 10, 2026 · Tier A
  8. [8]Executive Protection | DoppelDoppel · undated page, accessed November 10, 2026 · Tier A
  9. [9]Simulation | DoppelDoppel · undated page, accessed November 10, 2026 · Tier A
  10. [10]Security Awareness Training | DoppelDoppel · undated page, accessed November 10, 2026 · Tier A
  11. [11]Email Security | DoppelDoppel · undated page, accessed November 10, 2026 · Tier A
  12. [12]Doppel Phishing Triage | DoppelDoppel · undated page, accessed November 10, 2026 · Tier A
  13. [13]Brand AbuseBox | DoppelDoppel · undated page, accessed November 10, 2026 · Tier A
  14. [14]Social Engineering Defense for Every Business | DoppelDoppel · undated page, accessed November 10, 2026 · Tier A
  15. [15]Doppel Reviews 2026: Details, Pricing, & FeaturesG2 · undated page, accessed November 10, 2026 · Tier C

Spot a factual error? Request a correction.