CISO Tribune

Vendor comparison · 2 companies

Abnormal AI vs Proofpoint

Abnormal AI sells a behavioral security platform that protects email, identity, and AI. Proofpoint sells security that covers data and AI as one system, with access that follows intent. CISO Tribune files both under Email security. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Abnormal AI
  • Proofpoint
Abnormal AI vs Proofpoint: Products, Customers and Funding Compared
Abnormal AIAbnormal AI sells a behavioral security platform that protects email, identity, and AI.abnormal.aiProofpointProofpoint sells security that covers data and AI as one system, with access that follows intent.proofpoint.com
What it sells
  • Account Takeover Protection[3][12][19]Detects and remediates compromised Microsoft 365 and Google Workspace accounts.
  • Identity Threat Protection[3][11][12][15]Correlates signals to contain threats before and after authentication.
  • Email Productivity[12][18]Moves low-priority promotional email out of the inbox.
  • ITM / Endpoint DLP[19]Endpoint software whose main features are supported on Windows, Mac and Linux.
  • Proofpoint Threat Intelligence Services[21]A Proofpoint team that provides Threat Insights.
  • ET Intel[21]A subscription that gives full access to all insights.
  • ET Pro[21]A subscription that gives full access to all insights.
Categories
Headquarters
San Francisco, United States[1]Sunnyvale, United States[1]
Founded
2018[1]2002[1]
Ownership and funding
Privately held[2][12][14]Series D (USD 250 million round), August 6, 2024[2]Owned by Thoma Bravo since 2021[3][12][14][15]
Named customers
  • Domino’s[4]
  • Avery Dennison[5]
  • Valvoline[6]
  • Ingersoll Rand[7]
  • Save the Children[8]
  • Xcel Energy[4]
  • Princeton University[5]
  • Columbia University[6]
  • Informatica[7]
  • California Department of Motor Vehicles[8]
Recent news
  • November 4, 2026Abnormal AI appointed Don Jeter as Chief Marketing Officer, reporting to the CEO and overseeing the global marketing team.[23]
  • September 24, 2026Abnormal AI previewed four AI Security suite products, including AI Agent Security and AI Cloud Security, with general availability planned for Q4 2026.[9]
  • August 27, 2026Abnormal AI expanded its email security platform with Control Center, Email DLP Rules and upgrades to its AI Phishing Coach.[10]
  • August 19, 2026Abnormal AI and OpenAI announced a strategic partnership, with Abnormal expanding its internal use of OpenAI and joining the OpenAI Daybreak Cyber Partner Program as an early security partner.[25]
  • July 29, 2026Abnormal AI extended its behavioral security to cover identities, AI systems and insider threats.[13]
  • October 15, 2026Proofpoint and Varonis announced a definitive agreement under which Proofpoint will acquire Varonis in an all-cash transaction valued at approximately $6.3 billion.[16]
  • September 22, 2026Proofpoint announced the Agentic Collaboration Security system, combining an intent-based detection model with agentic capabilities for email, collaboration tools and the browser.[17]
  • September 22, 2026Proofpoint announced the Proofpoint Agentic Data and AI Security system, built to secure AI and data as one connected risk.[18]
  • September 3, 2026Proofpoint introduced the SOC Analyst Agent, an AI capability that helps security teams investigate threats across Proofpoint security data, built with OpenAI models.[9]
  • August 4, 2026Proofpoint launched an OEM program that lets technology providers, security vendors and managed service providers embed its threat intelligence and detection capabilities.[10]
G2 and Gartner Peer Insights
  • G2: listed, seen October 23, 2026[14]
  • Gartner Peer Insights: Not stated on its pages
  • G2: listed, seen November 10, 2026[14]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
Not written yetFrom its own pages, Proofpoint addresses cyberattacks on organisations where people and AI agents work side by side across email, cloud and collaboration tools. The customers Proofpoint quotes include an organisation using Proofpoint for AI security for employees using AI services and tools, and for AI security in the tools and agents it is building. A quoted Proofpoint customer runs email security, DLP and insider threat management that work together, with its analyst using a single security console.
Last verified
October 10, 2026October 10, 2026

Where they overlap

  • Email security is the primary category of both Abnormal AI and Proofpoint.
  • Both are headquartered in the United States.

Where they differ, field by field

  • Abnormal AI is also filed under Identity threat detection and response, Workforce AI usage security and AI model and agent security. Proofpoint is also filed under Collaboration app security, Human risk management and Insider risk management.
  • Abnormal AI lists Account Takeover Protection, Identity Threat Protection and Email Productivity. Proofpoint lists ITM / Endpoint DLP, Proofpoint Threat Intelligence Services, ET Intel and ET Pro.
  • Abnormal AI is headquartered in San Francisco, United States. Proofpoint is headquartered in Sunnyvale, United States.
  • Abnormal AI was founded in 2018. Proofpoint was founded in 2002.
  • Abnormal AI is privately held. Proofpoint is owned by Thoma Bravo, since 2021.
  • Abnormal AI's latest recorded funding is Series D (USD 250 million round), dated August 6, 2024.
  • Abnormal AI publicly names Domino’s, Avery Dennison, Valvoline, Ingersoll Rand and Save the Children. Proofpoint publicly names Xcel Energy, Princeton University, Columbia University, Informatica and California Department of Motor Vehicles.

How they differ

CISO Tribune files both Abnormal AI and Proofpoint under Email security as the primary category. Abnormal AI sells a behavioral security platform that protects email, identity, and AI, with products such as Account Takeover Protection, Identity Threat Protection, and Email Productivity. Proofpoint sells security that covers data and AI as one system, along with ITM / Endpoint DLP, Proofpoint Threat Intelligence Services, and the ET Intel and ET Pro subscriptions. Both companies describe AI-related offerings: Abnormal AI previewed four AI Security suite products on September 24, 2026, and Proofpoint announced the Proofpoint Agentic Data and AI Security system on September 22, 2026.

Abnormal AI is headquartered in San Francisco, was founded in 2018, and is privately held, with a Series D of USD 250 million dated August 6, 2024. Proofpoint is headquartered in Sunnyvale, was founded in 2002, and has been owned by Thoma Bravo since 2021. Abnormal AI publicly names Domino's, Avery Dennison, Valvoline, Ingersoll Rand, and Save the Children as customers. Proofpoint publicly names Xcel Energy, Princeton University, Columbia University, Informatica, and California Department of Motor Vehicles.

On August 19, 2026, Abnormal AI and OpenAI announced a strategic partnership, and on November 4, 2026, Abnormal AI appointed a Chief Marketing Officer. On October 15, 2026, Proofpoint and Varonis announced a definitive agreement under which Proofpoint will acquire Varonis in an all-cash transaction valued at approximately $6.3 billion. Proofpoint also introduced the SOC Analyst Agent on September 3, 2026, and announced that it had acquired Acuvity on February 12, 2026.

What it sells: Abnormal AI

What Account Takeover Protection does[3][12][19]
Account Takeover Protection learns normal sign-in, device, and behavioral patterns for each user. It remediates a confirmed compromise by signing out all open sessions, blocking access, and forcing a password reset. Abnormal AI says it correlates Microsoft 365 and Google Workspace sign-in signals with communication behavior. It identifies session and token-based attacks that defeat MFA.
What Identity Threat Protection does[3][11][12][15]
Identity Threat Protection correlates signals to contain threats before and after authentication. Abnormal AI says it correlates email, IdP, and SaaS signals into one behavioral model. The model catches privilege misuse and socially-engineered MFA resets.
What Email Productivity does[12][18]
Email Productivity uses behavioral AI to learn what matters to each employee and move low-priority promotional email out of the inbox. It moves detected graymail to a Promotions folder in Outlook or a Graymail label in Gmail. It deploys through API integration with no rules, policies, or quarantine configuration to manage. It supports Passive, Partial, and Active deployment modes.

What it sells: Proofpoint

What Proofpoint Threat Intelligence Services does[21]
Threat Insights are provided by the Proofpoint Threat Intelligence Services team. Premium Threat Intelligence Services analysts curate threat news highlights.
What ET Intel does[21]
Subscribing to ET Intel or ET Pro gives full access to all insights. Threat Insights are provided by the Proofpoint Threat Intelligence Services team.
What ET Pro does[21]
Subscribing to ET Intel or ET Pro gives full access to all insights. Threat Insights are provided by the Proofpoint Threat Intelligence Services team.

Questions about Abnormal AI and Proofpoint

What do Abnormal AI and Proofpoint sell?
Abnormal AI sells Account Takeover Protection, Identity Threat Protection and Email Productivity. Proofpoint sells ITM / Endpoint DLP, Proofpoint Threat Intelligence Services, ET Intel and ET Pro.
Are Abnormal AI and Proofpoint in the same category?
Yes. Email security is the primary category of both on CISO Tribune.
Where are Abnormal AI and Proofpoint headquartered?
Abnormal AI is headquartered in San Francisco, United States. Proofpoint is headquartered in Sunnyvale, United States.
When were Abnormal AI and Proofpoint founded?
Abnormal AI was founded in 2018. Proofpoint was founded in 2002.
Who owns Abnormal AI and Proofpoint?
Abnormal AI is privately held. Abnormal AI's latest recorded funding is Series D (USD 250 million round), dated August 6, 2024. Proofpoint is owned by Thoma Bravo, since 2021.
Which customers do Abnormal AI and Proofpoint name?
Abnormal AI publicly names Domino’s, Avery Dennison, Valvoline, Ingersoll Rand and Save the Children. Proofpoint publicly names Xcel Energy, Princeton University, Columbia University, Informatica and California Department of Motor Vehicles.
Who are Abnormal AI and Proofpoint sold to?
From its own pages, Proofpoint addresses cyberattacks on organisations where people and AI agents work side by side across email, cloud and collaboration tools.
What have Abnormal AI and Proofpoint announced recently?
November 4, 2026: Abnormal AI appointed Don Jeter as Chief Marketing Officer, reporting to the CEO and overseeing the global marketing team. October 15, 2026: Proofpoint and Varonis announced a definitive agreement under which Proofpoint will acquire Varonis in an all-cash transaction valued at approximately $6.3 billion.

About Abnormal AI

Abnormal AI sells a behavioral security platform that protects email, identity, and AI. Abnormal says AI-generated attacks are often too subtle for humans to see and too new for traditional threat intel to detect. Abnormal AI says its platform stops the attacks that slip past legacy gateways, including business email compromise, advanced phishing, vendor fraud, and account takeover. Abnormal AI states its mission is to stop crime with AI.[15]

Abnormal AI says its platform connects AI tools, people, agents, and cloud activity through behavioral context to govern adoption, enforce policies, detect threats, and support investigations. The platform has native API integrations across Microsoft 365, Google Workspace, Okta, CrowdStrike, and the customer's SIEM and SOAR. Abnormal AI says each supported connection helps Abnormal understand activity, investigate threats, and apply the controls the customer's team authorizes. Abnormal AI describes Attune as the behavioral AI model that learns what is normal and detects what does not fit. AI Data Analyst lets users ask plain-English questions and get security insights instantly. AI Data Analyst consolidates insights from across the Abnormal environment into a single source of truth.[15][16][20]

For email, Abnormal AI describes Inbound Email Security as stopping BEC, phishing, and credential theft before delivery. AI Security Mailbox is described as an AI co-worker for email security operations. AI Phishing Coach is described as just-in-time training that adapts to each user's real risk. Messaging Security is described as detecting and remediating malicious content in messaging apps, and Misdirected Email as preventing accidental data leakage from misaddressed email. Email DLP Rules combines a custom policy engine with an AI Triage Agent. Teams can launch Email DLP Rules in passive mode, logging matches without taking action, then move to active enforcement. Email Productivity uses behavioral AI to move low-priority promotional email out of the inbox, and Email Productivity deploys through API integration.[15][17][18][21]

For identity, Account Takeover Protection detects and remediates compromised Microsoft 365 and Google Workspace accounts by learning normal sign-in, device, and behavioral patterns for each user. Account Takeover Protection locks attackers out by revoking active sessions and forcing credential resets. Abnormal AI says Account Takeover Protection connects via API to Microsoft 365 and Google Workspace. Abnormal AI says brute force, credential stuffing, and token or session theft produce sign-ins that satisfy authentication. Abnormal AI says its platform correlates email, IdP, and SaaS signals into one behavioral model, catching privilege misuse and socially-engineered MFA resets. Identity Threat Protection correlates signals to contain threats before and after authentication. Infiltration Prevention is described as detecting synthetic personas and infiltration campaigns before access is provisioned. Posture Management is described as catching risky misconfigurations across the email platform.[3][15][19]

AI Cloud Security is described as detecting AI-driven attacks against cloud identities and workloads and containing threats within the customer's response policies. AI Cloud Security is at the Priority First stage, available for purchase and production deployment to selected customers. AI Employee Guardrails is described as keeping employee AI use on task, protecting sensitive data, and enforcing policies based on the person, tool, and request. AI Agent Security is described as inventorying production agents and verifying that each one behaves as intended. AI Agent Security is at the Design Partner stage, where selected customers evaluate the product and give regular feedback to the product team. AI Employee Guardrails is at the Design Partner stage. AI Security Workbench is described as running AI-powered investigations across petabytes of behavioral events.[3][15][20][21][22]

Abnormal AI says it powers 5,000 customers, including 30% of the Fortune 500.[16][17][18][19][20][21][22]

Abnormal AI on the record

Sources

Abnormal AI full record

  1. [1]Launching 24m series a funding from greylockAbnormal AI · abnormal.ai · published November 19, 2019 · Tier A
  2. [2]Series d 5b valuationAbnormal AI · abnormal.ai · published August 6, 2024 · Tier A
  3. [3]PlatformAbnormal AI · abnormal.ai · undated page, accessed September 27, 2026 · Tier A
  4. [4]Dominos rolls out stronger communications securityAbnormal AI · abnormal.ai · undated page, accessed October 10, 2026 · Tier A
  5. [5]Avery dennison case studyAbnormal AI · abnormal.ai · undated page, accessed October 10, 2026 · Tier A
  6. [6]ValvolineAbnormal AI · abnormal.ai · undated page, accessed October 10, 2026 · Tier A
  7. [7]Ingersoll randAbnormal AI · abnormal.ai · undated page, accessed October 10, 2026 · Tier A
  8. [8]Save the childrenAbnormal AI · abnormal.ai · undated page, accessed October 10, 2026 · Tier A
  9. [9]Abnormal ai expands its ai security suiteAbnormal AI · abnormal.ai · published September 24, 2026 · Tier A
  10. [10]Abnormal expands email security platformAbnormal AI · abnormal.ai · published August 27, 2026 · Tier A
  11. [11]Abnormal extends behavioral security platformAbnormal AI · abnormal.ai · published July 28, 2026 · Tier A
  12. [12]Behavioral AI for Email, Identity, and AI Security | Abnormal AIAbnormal AI · undated page, accessed October 23, 2026 · Tier A
  13. [13]Abnormal AI extends behavioral security to identities, AI systems, and insider threatsHelp Net Security · published July 29, 2026 · Tier B
  14. [14]Abnormal AI Reviews 2026: Details, Pricing, & Features - G2G2 · undated page, accessed October 23, 2026 · Tier C
  15. [15]The Behavioral Security Platform | Abnormal AIAbnormal AI · undated page, accessed November 5, 2026 · Tier A
  16. [16]AI Data Analyst | Automated Security Reporting | Abnormal AIAbnormal AI · undated page, accessed November 5, 2026 · Tier A
  17. [17]Email DLP Rules | Abnormal AIAbnormal AI · undated page, accessed November 5, 2026 · Tier A
  18. [18]Graymail Filtering | AI Email Productivity | Abnormal AIAbnormal AI · undated page, accessed November 5, 2026 · Tier A
  19. [19]Stop Account Takeover | ATO Detection | Abnormal AIAbnormal AI · undated page, accessed November 5, 2026 · Tier A
  20. [20]AI Cloud Security | Abnormal AIAbnormal AI · undated page, accessed November 5, 2026 · Tier A
  21. [21]AI Agent Security | Abnormal AIAbnormal AI · undated page, accessed November 5, 2026 · Tier A
  22. [22]AI Employee Guardrails | Abnormal AIAbnormal AI · undated page, accessed November 5, 2026 · Tier A
  23. [23]Abnormal AI Names Don Jeter CMO to Accelerate Its Expansion in AI SecurityAbnormal AI · published November 4, 2026 · Tier A
  24. [24]Abnormal AI Expands Leadership Team to Advance Behavioral AI PlatformAbnormal AI · published April 29, 2026 · Tier A
  25. [25]Abnormal AI and OpenAI Partner to Accelerate Secure Enterprise AI Adoption and Strengthen Cyber DefenseBusiness Wire · published August 19, 2026 · Tier A

Proofpoint full record

  1. [1]AboutProofpoint · proofpoint.com · published April 21, 2025 · Tier A
  2. [2]ProductsProofpoint · proofpoint.com · published September 24, 2026 · Tier A
  3. [3]Thoma bravo completes acquisition of proofpointThoma Bravo · thomabravo.com · published August 31, 2021 · Tier A
  4. [4]Xcel energyProofpoint · proofpoint.com · undated page, accessed October 10, 2026 · Tier A
  5. [5]Princeton university safe with proofpoint email securityProofpoint · proofpoint.com · undated page, accessed October 10, 2026 · Tier A
  6. [6]Columbia universityProofpoint · proofpoint.com · undated page, accessed October 10, 2026 · Tier A
  7. [7]InformaticaProofpoint · proofpoint.com · undated page, accessed October 10, 2026 · Tier A
  8. [8]California department motor vehiclesProofpoint · proofpoint.com · undated page, accessed October 10, 2026 · Tier A
  9. [9]Proofpoint soc analyst agent openai daybreakProofpoint · proofpoint.com · published September 3, 2026 · Tier A
  10. [10]Proofpoint launches oem program help security providers embed trusted threatProofpoint · proofpoint.com · published August 4, 2026 · Tier A
  11. [11]Proofpoint launches dedicated msp business unit and introduces 365 totalProofpoint · proofpoint.com · published May 13, 2026 · Tier A
  12. [12]Enterprise Cybersecurity Solutions, Services & Training | Proofpoint USProofpoint · undated page, accessed October 27, 2026 · Tier A
  13. [13]Integrating ITM On-Prem (ObserveIT) with a Service Desk SystemProofpoint · undated page, accessed October 27, 2026 · Tier A
  14. [14]Proofpoint Core Email Protection Reviews & Product Details - G2G2 · undated page, accessed October 27, 2026 · Tier C
  15. [15]Proofpoint Acquires Acuvity to Deliver AI Security and Governance Across the Agentic WorkspaceProofpoint · published February 12, 2026 · Tier A
  16. [16]Proofpoint to Acquire Varonis in a $6.3 Billion TransactionProofpoint · published October 15, 2026 · Tier A
  17. [17]Proofpoint Stops the Attacks Traditional Defenses Miss in the AI EraProofpoint · published September 22, 2026 · Tier A
  18. [18]Proofpoint Breaks Down the Divide Between Data Security and AI Security with the Industry’s First Unified Agentic SystemProofpoint · published September 22, 2026 · Tier A
  19. [19]ITM / Endpoint DLP Windows / Mac / Linux SupportProofpoint · published November 9, 2026 · Tier A
  20. [20]Assigning SQL Permissions to the Service Account UserProofpoint · undated page, accessed November 10, 2026 · Tier A
  21. [21]Proofpoint: Emerging Threats IntelligenceProofpoint · published November 9, 2026 · Tier A

Spot a factual error? Request a correction.