CISO Tribune

Vendor comparison · 2 companies

Abnormal AI vs Huntress

Abnormal AI sells a behavioral security platform that protects email, identity, and AI. Huntress products are built to protect organizations of all sizes. CISO Tribune files both under Identity threat detection and response. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Abnormal AI
  • Huntress
Abnormal AI vs Huntress: Products, Customers and Funding Compared
Abnormal AIAbnormal AI sells a behavioral security platform that protects email, identity, and AI.abnormal.aiHuntressHuntress products are built to protect organizations of all sizes.huntress.com
What it sells
  • Account Takeover Protection[3][12][19]Detects and remediates compromised Microsoft 365 and Google Workspace accounts.
  • Identity Threat Protection[3][11][12][15]Correlates signals to contain threats before and after authentication.
  • Email Productivity[12][18]Moves low-priority promotional email out of the inbox.
  • Managed EDR[1][2][5]Provides 24/7 protection, detection and response that disrupts and remediates threats.
  • Managed ITDR[1][2][5][6][7]Detects, responds to and resolves identity-based threats such as account takeovers and business email compromise.
  • Managed SAT[1][4][6][8]Provides security awareness training with learning plans and phishing campaigns built by Huntress.
Categories
Headquarters
San Francisco, United States[1]Not stated on its pages
Founded
2018[1]Not stated on its pages
Ownership and funding
Privately held[2][12][14]Series D (USD 250 million round), August 6, 2024[2]Not stated on its pages
Named customers
  • Domino’s[4]
  • Avery Dennison[5]
  • Valvoline[6]
  • Ingersoll Rand[7]
  • Save the Children[8]
Not stated on its pages
Recent news
  • November 4, 2026Abnormal AI appointed Don Jeter as Chief Marketing Officer, reporting to the CEO and overseeing the global marketing team.[23]
  • September 24, 2026Abnormal AI previewed four AI Security suite products, including AI Agent Security and AI Cloud Security, with general availability planned for Q4 2026.[9]
  • August 27, 2026Abnormal AI expanded its email security platform with Control Center, Email DLP Rules and upgrades to its AI Phishing Coach.[10]
  • August 19, 2026Abnormal AI and OpenAI announced a strategic partnership, with Abnormal expanding its internal use of OpenAI and joining the OpenAI Daybreak Cyber Partner Program as an early security partner.[25]
  • July 29, 2026Abnormal AI extended its behavioral security to cover identities, AI systems and insider threats.[13]
  • June 30, 2026Huntress made its Managed Identity Security Posture Management product generally available.[13]
  • November 18, 2025Huntress acquired Inside Agent, a London-based company focused on hardening Microsoft 365 environments.[12]
G2 and Gartner Peer Insights
  • G2: listed, seen October 23, 2026[14]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
Not written yetNot written yet
Last verified
October 10, 2026November 8, 2026

Where they overlap

  • Abnormal AI and Huntress are both filed under Identity threat detection and response.

Where they differ, field by field

  • Abnormal AI's primary category is Email security; Huntress's is MDR and managed SOC.
  • Abnormal AI is also filed under Workforce AI usage security and AI model and agent security. Huntress is also filed under EDR and XDR and SIEM.
  • Abnormal AI lists Account Takeover Protection, Identity Threat Protection and Email Productivity. Huntress lists Managed EDR, Managed ITDR and Managed SAT.
  • Abnormal AI is headquartered in San Francisco, United States.
  • Abnormal AI was founded in 2018.
  • Abnormal AI is privately held.
  • Abnormal AI's latest recorded funding is Series D (USD 250 million round), dated August 6, 2024.
  • Abnormal AI publicly names Domino’s, Avery Dennison, Valvoline, Ingersoll Rand and Save the Children.

What it sells: Abnormal AI

What Account Takeover Protection does[3][12][19]
Account Takeover Protection learns normal sign-in, device, and behavioral patterns for each user. It remediates a confirmed compromise by signing out all open sessions, blocking access, and forcing a password reset. Abnormal AI says it correlates Microsoft 365 and Google Workspace sign-in signals with communication behavior. It identifies session and token-based attacks that defeat MFA.
What Identity Threat Protection does[3][11][12][15]
Identity Threat Protection correlates signals to contain threats before and after authentication. Abnormal AI says it correlates email, IdP, and SaaS signals into one behavioral model. The model catches privilege misuse and socially-engineered MFA resets.
What Email Productivity does[12][18]
Email Productivity uses behavioral AI to learn what matters to each employee and move low-priority promotional email out of the inbox. It moves detected graymail to a Promotions folder in Outlook or a Graymail label in Gmail. It deploys through API integration with no rules, policies, or quarantine configuration to manage. It supports Passive, Partial, and Active deployment modes.

What it sells: Huntress

What Managed ITDR does[1][2][5][6][7]
Huntress Managed ITDR is designed to detect, respond to and resolve identity-based threats such as account takeovers, business email compromise and unauthorized logins. Huntress Managed ITDR covers the continuous monitoring side of identity and access requirements in Microsoft 365 and Google Workspace. Huntress Managed ITDR is built to detect existing malicious inbox rules from the moment a tenant is onboarded.
What Managed SAT does[1][4][6][8]
The Huntress Managed SAT platform provides short episodes featuring storylines that train learners on security awareness topics. The Huntress team can fully manage a customer SAT program, including creating, curating and scheduling learning. Huntress builds monthly learning plans and phishing campaigns based on the threats compromising people every day. Huntress Managed SAT integrates with email, Slack and Microsoft Teams to notify users about learning assignments.

Questions about Abnormal AI and Huntress

What do Abnormal AI and Huntress sell?
Abnormal AI sells Account Takeover Protection, Identity Threat Protection and Email Productivity. Huntress sells Managed EDR, Managed ITDR and Managed SAT.
Are Abnormal AI and Huntress in the same category?
They share Identity threat detection and response. Abnormal AI's primary category is Email security and Huntress's is MDR and managed SOC.
Where are Abnormal AI and Huntress headquartered?
Abnormal AI is headquartered in San Francisco, United States.
When were Abnormal AI and Huntress founded?
Abnormal AI was founded in 2018.
Who owns Abnormal AI and Huntress?
Abnormal AI is privately held. Abnormal AI's latest recorded funding is Series D (USD 250 million round), dated August 6, 2024.
Which customers do Abnormal AI and Huntress name?
Abnormal AI publicly names Domino’s, Avery Dennison, Valvoline, Ingersoll Rand and Save the Children.
What have Abnormal AI and Huntress announced recently?
November 4, 2026: Abnormal AI appointed Don Jeter as Chief Marketing Officer, reporting to the CEO and overseeing the global marketing team. June 30, 2026: Huntress made its Managed Identity Security Posture Management product generally available.

About Abnormal AI

Abnormal AI sells a behavioral security platform that protects email, identity, and AI. Abnormal says AI-generated attacks are often too subtle for humans to see and too new for traditional threat intel to detect. Abnormal AI says its platform stops the attacks that slip past legacy gateways, including business email compromise, advanced phishing, vendor fraud, and account takeover. Abnormal AI states its mission is to stop crime with AI.[15]

Abnormal AI says its platform connects AI tools, people, agents, and cloud activity through behavioral context to govern adoption, enforce policies, detect threats, and support investigations. The platform has native API integrations across Microsoft 365, Google Workspace, Okta, CrowdStrike, and the customer's SIEM and SOAR. Abnormal AI says each supported connection helps Abnormal understand activity, investigate threats, and apply the controls the customer's team authorizes. Abnormal AI describes Attune as the behavioral AI model that learns what is normal and detects what does not fit. AI Data Analyst lets users ask plain-English questions and get security insights instantly. AI Data Analyst consolidates insights from across the Abnormal environment into a single source of truth.[15][16][20]

For email, Abnormal AI describes Inbound Email Security as stopping BEC, phishing, and credential theft before delivery. AI Security Mailbox is described as an AI co-worker for email security operations. AI Phishing Coach is described as just-in-time training that adapts to each user's real risk. Messaging Security is described as detecting and remediating malicious content in messaging apps, and Misdirected Email as preventing accidental data leakage from misaddressed email. Email DLP Rules combines a custom policy engine with an AI Triage Agent. Teams can launch Email DLP Rules in passive mode, logging matches without taking action, then move to active enforcement. Email Productivity uses behavioral AI to move low-priority promotional email out of the inbox, and Email Productivity deploys through API integration.[15][17][18][21]

For identity, Account Takeover Protection detects and remediates compromised Microsoft 365 and Google Workspace accounts by learning normal sign-in, device, and behavioral patterns for each user. Account Takeover Protection locks attackers out by revoking active sessions and forcing credential resets. Abnormal AI says Account Takeover Protection connects via API to Microsoft 365 and Google Workspace. Abnormal AI says brute force, credential stuffing, and token or session theft produce sign-ins that satisfy authentication. Abnormal AI says its platform correlates email, IdP, and SaaS signals into one behavioral model, catching privilege misuse and socially-engineered MFA resets. Identity Threat Protection correlates signals to contain threats before and after authentication. Infiltration Prevention is described as detecting synthetic personas and infiltration campaigns before access is provisioned. Posture Management is described as catching risky misconfigurations across the email platform.[3][15][19]

AI Cloud Security is described as detecting AI-driven attacks against cloud identities and workloads and containing threats within the customer's response policies. AI Cloud Security is at the Priority First stage, available for purchase and production deployment to selected customers. AI Employee Guardrails is described as keeping employee AI use on task, protecting sensitive data, and enforcing policies based on the person, tool, and request. AI Agent Security is described as inventorying production agents and verifying that each one behaves as intended. AI Agent Security is at the Design Partner stage, where selected customers evaluate the product and give regular feedback to the product team. AI Employee Guardrails is at the Design Partner stage. AI Security Workbench is described as running AI-powered investigations across petabytes of behavioral events.[3][15][20][21][22]

Abnormal AI says it powers 5,000 customers, including 30% of the Fortune 500.[16][17][18][19][20][21][22]

Abnormal AI on the record

Sources

Abnormal AI full record

  1. [1]Launching 24m series a funding from greylockAbnormal AI · abnormal.ai · published November 19, 2019 · Tier A
  2. [2]Series d 5b valuationAbnormal AI · abnormal.ai · published August 6, 2024 · Tier A
  3. [3]PlatformAbnormal AI · abnormal.ai · undated page, accessed September 27, 2026 · Tier A
  4. [4]Dominos rolls out stronger communications securityAbnormal AI · abnormal.ai · undated page, accessed October 10, 2026 · Tier A
  5. [5]Avery dennison case studyAbnormal AI · abnormal.ai · undated page, accessed October 10, 2026 · Tier A
  6. [6]ValvolineAbnormal AI · abnormal.ai · undated page, accessed October 10, 2026 · Tier A
  7. [7]Ingersoll randAbnormal AI · abnormal.ai · undated page, accessed October 10, 2026 · Tier A
  8. [8]Save the childrenAbnormal AI · abnormal.ai · undated page, accessed October 10, 2026 · Tier A
  9. [9]Abnormal ai expands its ai security suiteAbnormal AI · abnormal.ai · published September 24, 2026 · Tier A
  10. [10]Abnormal expands email security platformAbnormal AI · abnormal.ai · published August 27, 2026 · Tier A
  11. [11]Abnormal extends behavioral security platformAbnormal AI · abnormal.ai · published July 28, 2026 · Tier A
  12. [12]Behavioral AI for Email, Identity, and AI Security | Abnormal AIAbnormal AI · undated page, accessed October 23, 2026 · Tier A
  13. [13]Abnormal AI extends behavioral security to identities, AI systems, and insider threatsHelp Net Security · published July 29, 2026 · Tier B
  14. [14]Abnormal AI Reviews 2026: Details, Pricing, & Features - G2G2 · undated page, accessed October 23, 2026 · Tier C
  15. [15]The Behavioral Security Platform | Abnormal AIAbnormal AI · undated page, accessed November 5, 2026 · Tier A
  16. [16]AI Data Analyst | Automated Security Reporting | Abnormal AIAbnormal AI · undated page, accessed November 5, 2026 · Tier A
  17. [17]Email DLP Rules | Abnormal AIAbnormal AI · undated page, accessed November 5, 2026 · Tier A
  18. [18]Graymail Filtering | AI Email Productivity | Abnormal AIAbnormal AI · undated page, accessed November 5, 2026 · Tier A
  19. [19]Stop Account Takeover | ATO Detection | Abnormal AIAbnormal AI · undated page, accessed November 5, 2026 · Tier A
  20. [20]AI Cloud Security | Abnormal AIAbnormal AI · undated page, accessed November 5, 2026 · Tier A
  21. [21]AI Agent Security | Abnormal AIAbnormal AI · undated page, accessed November 5, 2026 · Tier A
  22. [22]AI Employee Guardrails | Abnormal AIAbnormal AI · undated page, accessed November 5, 2026 · Tier A
  23. [23]Abnormal AI Names Don Jeter CMO to Accelerate Its Expansion in AI SecurityAbnormal AI · published November 4, 2026 · Tier A
  24. [24]Abnormal AI Expands Leadership Team to Advance Behavioral AI PlatformAbnormal AI · published April 29, 2026 · Tier A
  25. [25]Abnormal AI and OpenAI Partner to Accelerate Secure Enterprise AI Adoption and Strengthen Cyber DefenseBusiness Wire · published August 19, 2026 · Tier A

Huntress full record

  1. [1]huntress.comHuntress · huntress.com · undated page, accessed November 8, 2026 · Tier A
  2. [2]Managed Security Platform with 24/7 AI SOC | HuntressHuntress · undated page, accessed November 10, 2026 · Tier A
  3. [3]EDR, ITDR, SAT & SIEM Pricing With 24/7 SOC | HuntressHuntress · undated page, accessed November 10, 2026 · Tier A
  4. [4]Cyber Security Awareness Training Content | HuntressHuntress · undated page, accessed November 10, 2026 · Tier A
  5. [5]How to Implement an Effective Secure Remote Work Strategy? | HuntressHuntress · undated page, accessed November 10, 2026 · Tier A
  6. [6]Compliance Monitoring Made Practical: How Managed EDR, ITDR, and SIEM Support Your Audits. \ | HuntressHuntress · undated page, accessed November 10, 2026 · Tier A
  7. [7]Find Hidden Inbox Rules in Microsoft 365 | HuntressHuntress · undated page, accessed November 10, 2026 · Tier A
  8. [8]Manage Human Risk with Huntress SAT | Expert-Backed Training | HuntressHuntress · undated page, accessed November 10, 2026 · Tier A
  9. [9]GDPR Compliance Security Awareness Training for Employees | HuntressHuntress · undated page, accessed November 10, 2026 · Tier A
  10. [10]SAT Pricing | HuntressHuntress · undated page, accessed November 10, 2026 · Tier A
  11. [11]How Huntress Uses AI Responsibly in Cybersecurity | HuntressHuntress · undated page, accessed November 10, 2026 · Tier A
  12. [12]Huntress Acquires Inside Agent to Strengthen Identity Security Posture Management | HuntressHuntress · published November 18, 2025 · Tier A
  13. [13]Huntress Announces the General Availability of Managed ISPM, Expanding its Agentic Security Platform with Proactive Controls that Strengthen Identity Resilience at Scale | HuntressHuntress · published June 30, 2026 · Tier A
  14. [14]Huntress Managed EDR Reviews & Product DetailsG2 · undated page, accessed November 10, 2026 · Tier C
  15. [15]Huntress Reviews, Ratings & Features 2026Gartner Peer Insights · undated page, accessed November 10, 2026 · Tier C

Spot a factual error? Request a correction.