Abnormal Security Reviews

Name: Abnormal Security
Brand: Abnormal Security
Rating: 4.8 (10 reviews)

4.8 out of 5

10 reviews
100% willing to recommend

What is Abnormal Security?

Abnormal Security is a cloud-based email security platform designed to protect organizations from advanced targeted attacks, such as phishing and business email compromise (BEC), and account takeovers. Their approach is centered on using artificial intelligence (AI) and behavioral data science to detect anomalies in email activity.

Get the Abnormal Security Buyer's Guide and find out what your peers are saying about Abnormal Security, Microsoft Defender for Office 365, Darktrace and more!

Abnormal Security is the #2 ranked solution in top Email Security solutions and top Secure Email Gateway (SEG) solutions. PeerSpot users give Abnormal Security an average rating of 9.6 out of 10. Abnormal Security is most commonly compared to Microsoft Defender for Office 365: Abnormal Security vs Microsoft Defender for Office 365. Abnormal Security is popular among the large enterprise segment, accounting for 54% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 14% of all views.

Helped 866,483 peers since 2012

Featured Abnormal Security reviews

ChrisBrown5

Manager, Information Technology Technical Services at a wholesaler/distributor with 5,001-10,000 employees

Abnormal Security is valuable because it features an automated scoring tool that doesn't require much intervention from our team. It enhances threat detection capabilities by making the process automated and is easy to scale to our entire environment. Additionally, it protects us from being business email compromised, which is invaluable for maintaining our security.

Read full review

William Schellhaas

Senior Director of IT at Crunch Fitness West Florida and Atlanta (CR Fitness)

The ideal scenario would be for Abnormal Security to work in tandem with Microsoft to analyze incoming emails. This means Abnormal Security would assess emails before they reach my inbox, even if it happens slightly after Microsoft's initial scan. Currently, the process isn't seamless. Microsoft analyzes emails and delivers legitimate ones to my inbox. Abnormal Security then scans these delivered emails, and if flagged as malicious, they disappear. This creates a problem for our ticketing system mailbox, which is a third-party service. Emails sent to the ticketing system address are automatically forwarded by Microsoft. However, if these emails are malicious, Abnormal Security only cleans them from my Outlook mailbox after they've been forwarded. Since we primarily rely on the ticketing system and not the Outlook mailbox, these malicious emails still reach the ticketing system.

Read full review

Christopher Chambers.

Vice President of Information Security at Comfort Systems USA Inc

I'm impressed with their API architecture. One of the main reasons is its invisibility to threat actors trying to launch attacks. Unlike our traditional email security tools in the SEG, which attackers can easily detect before they even start emailing us, the API remains hidden until they've already begun their attack. This gives us valuable early visibility via the API, allowing us to easily pipe that data to other tools and stop advanced attacks more effectively. The improved visibility into our email infrastructure also benefits our IT teams. Using the API integration, they can now remediate issues in minutes, whereas before it could take hours. Previously, identifying an inbound cyber attack meant bouncing between several tools: one to identify the attack, another to track affected emails, and yet another to quarantine them. Abnormal's APIs streamline this process. With a single search, an IT technician can identify users who received the emails, track who clicked on them, see where the emails are located, and even delete them from everyone's inbox directly. This has drastically reduced our investigation and response time for phishing and BEC attacks, from hours to mere minutes. Compared to many other vendors we considered, Abnormal Security stands out in its ability to detect the full spectrum of email threats. While our existing Secure Email Gateway handles traditional threats like spam and malware quite well, it often misses more sophisticated attacks. The SEG relies on static indicators like email flags, suspicious file hashes, or mass recipient lists. We can easily identify and filter out emails matching these criteria, but they do little to stop targeted attacks. Here's where Abnormal Security shines. Their anomaly detection engine excels at recognizing one-off attacks, including those where a threat actor infiltrates a vendor's mailbox and manipulates payment instructions or redirects transactions. Abnormal identifies these anomalies using behavioral analysis, effectively catching threats that traditional static methods typically miss. The two main benefits Abnormal Security offers us are its ease of use and its powerful search capabilities. These features empower our internal teams to get more involved in the response process, helping us track down threats efficiently. Additionally, Abnormal's ability to stop advanced attacks significantly reduces our security team's workload. Security teams are consistently stretched thin, so minimizing wasted effort chasing false alarms is crucial. By keeping harmful emails out of user inboxes, Abnormal allows us to focus on other priorities. In summary, our primary gains from Abnormal are its effectiveness in blocking attacks and its ability to empower our internal teams, ultimately strengthening our overall security posture. Abnormal Security's AI and machine learning capabilities significantly expand the range of email attacks they can block. This is crucial to optimizing their product's performance for us. Specifically, their ability to leverage AI indicators and extensive email telemetry is critical for stopping advanced threats, like compromised mailboxes sending disguised emails. Traditional methods often fall short in such scenarios. Our primary concern is identifying emails sent by a threat actor posing as a legitimate mailbox owner. AI-powered anomaly detection proves virtually indispensable in discerning the true sender's identity. Abnormal Security has identified and prevented several such sophisticated attacks in our own experience. One remarkable example involved a vendor's seemingly legitimate email flagged as suspicious by Abnormal. Initially dismissed as a false positive by our first responders, a deeper analysis of the email's telemetry revealed subtle anomalies. The email's sudden shift to a professional tone, unlike the typically casual communication with this vendor, was one such anomaly. As it turned out, Abnormal's suspicions were correct – the vendor's account had been compromised. This instance highlights the unparalleled effectiveness of AI in detecting sophisticated email threats. By focusing on abnormalities in email behavior, AI can uncover hidden dangers that might otherwise elude traditional security measures. The deployment of AI has significantly reduced the number of internal attacks we encounter, and it has even extended its benefits beyond our perimeter. We've proactively alerted several customers and vendors about potential compromises before they even realized their systems were under attack. This proactive approach has been well-received, with many recipients expressing their appreciation for our timely intervention. Within our organization, AI has dramatically streamlined our security operations by automating the analysis of sophisticated attacks, freeing up valuable time and resources for our security teams. Abnormal Security has dramatically reduced the time our team spends resolving email incidents. What used to consume hours or even days, depending on the attack and response complexity is now handled within minutes, often by less experienced team members. This has significantly improved our efficiency and freed up valuable time for other security tasks. Although no product can eliminate attacks, we've been pleasantly surprised by the effectiveness of Abnormal Security. Initially, when we approached them with our use case and problem, we'd have been happy with a much lower catch rate. Stopping even a significant number of attacks would have been a success. But the actual results have been incredibly impressive. While some attacks still slip through, the features in Abnormal allow us to feed those cases back into their system. This feedback fuels the AI's learning process, helping it avoid repeating the same mistakes. Interestingly, the attacks that remain undetected are often difficult to define even for human analysts. They involve subtle cues that would be challenging for any AI to spot in the specific contexts we've encountered. One example involved a new customer with whom we had exchanged only a handful of emails. While this customer's account became compromised, the attacker wasn't the usual contact person. Since the AI had only profiled the communication style of the usual contact, the malicious email appeared normal compared to that limited baseline. In such cases, where the AI lacks sufficient data, even exceptional systems can be caught off guard. While no product is perfect, we're highly impressed by Abnormal's speed and efficiency in catching attacks. They've dramatically reduced the workload on our help desk compared to the past, with the results being clear and measurable. Compared to our old solutions, Abnormal Security's incident response is like night and day. With our previous SEG, identifying and remediating a suspicious email was a cumbersome process. We'd flag the email, then jump through hoops to figure out who received it and if anyone clicked on it. With different modules and separate views, it was a mess. Once we confirmed the threat, another system hunt began, pulling emails from user inboxes. It was slow, fragmented, and frustrating. Abnormal is a breath of fresh air. If we spot a threat alert on the dashboard, we simply click on it to see all recipients, where the email sits, and who interacted with it. And then, the holy grail – a single button. Click 'Remediate', and those emails vanish from user inboxes, instantly neutralized. Just a button click from issue detection to resolution in seconds. All from one screen. That's the transformative power of Abnormal Security. Something our old solutions couldn't dream of.

Read full review

Abnormal Security mindshare

Product category:

As of September 2025, the mindshare of Abnormal Security in the Email Security category stands at 7.0%, up from 5.0% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Email Security Market Share Distribution
Product	Market Share (%)
Abnormal Security	7.0%
Microsoft Defender for Office 365	11.6%
Proofpoint Email Protection	8.2%
Other	73.2%

Email Security

PeerResearch reports based on Abnormal Security reviews

Type	Title	Date
Category	Email Security	Sep 3, 2025	Download
Product	Reviews, tips, and advice from real users	Sep 3, 2025	Download
Comparison	Abnormal Security vs Microsoft Defender for Office 365	Sep 3, 2025	Download
Comparison	Abnormal Security vs Proofpoint Email Protection	Sep 3, 2025	Download
Comparison	Abnormal Security vs Check Point Harmony Email & Collaboration	Sep 3, 2025	Download

Title	Rating	Mindshare	Recommending
Microsoft Defender for Office 365	4.2	11.6%	96%	53 interviews Add to research
Darktrace	4.1	2.7%	94%	82 interviews Add to research

Valuable Features

Abnormal Security excels in spear phishing detection through AI-based spam filtering, easy setup via API, and rapid threat removal from mailboxes. It uses AI/ML to understand employee behavior, efficiently catching threats like credential phishing. The auto-remediation and Detection 360 features are highly valued, providing superb threat protection. Integrations enhance alert systems. Abnormal Security reduces team workload and supports business email compromise prevention while delivering cost savings. It's praised for its ease of use and exceptional support.

"I would recommend Abnormal Security."
"It protects us from being business email compromised, which is invaluable for maintaining our security."
"I like Abnormal's threat protection with auto-remediation, but I also love its abuse mailbox feature, which automatically responds to the end user. That feature has a super-valuable security component and helps improve the user experience."

Room for Improvement

Abnormal Security could improve API performance as asynchronous mail delivery may briefly allow threats through. Enhanced integration with other cybersecurity tools and support for on-premise systems is desirable. Users express concern about the pricing model for academic institutions. Adding outbound scanning and an ideas button in the console would benefit users. More automatic reports and granular options are needed. Working more closely with Microsoft could create a seamless email scanning process.

"There could be more selectable options and more granular selections available."
"There could be more selectable options and more granular selections available."
"Abnormal should add more automatic reports. I have an open request to our account team for more notification and report types that can be sent automatically. For example, they have an awesome report that gets sent weekly, and I also want them monthly, so I don't need to do so much adding up when my director wants numbers over time."

ROI

Abnormal Security users have reported improved security, reduced threats, and overall effectiveness in protecting their organization.

Pricing

Abnormal Security offers competitive pricing based on user count, with many users finding the costs fair and cost-efficient, especially when compared to similar solutions. Enterprises appreciate the flexibility and willingness to tailor pricing to unique needs. Many users note significant savings over competitors like Barracuda while gaining additional features. Educational and specialized industries acknowledge Abnormal’s understanding of their circumstances, making it a favored choice for those seeking robust security with budget considerations.

"Abnormal Security, on the other hand, provides the same level of functionality for just over $60,000 – that's half the price!"
"The pricing appears fair, and they demonstrate a genuine willingness to work with us on it."
"Overall, we'd certainly prefer lower pricing, but Abnormal Security doesn't seem unreasonable compared to similar offerings in the market."

Popular Use Cases

Organizations utilize Abnormal Security for advanced spam filtering and email security, targeting phishing and business email compromise. They appreciate its AI-driven technology to automate threat detection, reducing the need for manual intervention. Abnormal Security efficiently identifies targeted attacks, such as spear phishing and executive impersonation, which bypass traditional gateways. Its use enhances IT teams' efficiency, assists in incident response, and offers defense in depth alongside existing email gateways, keeping inboxes organized and secure.

Service and Support

Abnormal Security's customer service excels in speed and thoroughness, providing accurate responses and maintaining excellent communication. Their technical support team is highly responsive, quickly addressing issues without unnecessary delays. Users appreciate the detailed explanations for complex queries and feel valued by the team's attention to detail. Abnormal Security consistently offers fast, knowledgeable assistance, improving over time and earning high satisfaction scores from users for their dedication to resolving issues efficiently.

Deployment

Users found Abnormal Security's initial setup to be exceptionally easy and quick. The integration process via API required minimal effort, often taking less than a day. Teams highlighted the simplicity and efficiency, noting that it involved minimal configuration work. Maintenance is minimal due to its automated backend processes. Users appreciated how the setup process eliminated the complexities associated with traditional security configurations, allowing seamless integration with existing systems.

Scalability

Abnormal Security demonstrates robust scalability, effectively adapting to diverse and expanding environments. Users report seamless integration across setups of various sizes, supporting substantial user bases effortlessly. This cloud-based platform successfully accommodates both substantial and moderate growth trajectories, seamlessly adjusting as organizations integrate new entities. Abnormal Security is praised for its solid performance and ability to handle increased demands, earning high ratings for its flexible and scalable capabilities across multiple environments.

Stability

Abnormal Security is consistently stable, with users reporting almost no issues affecting performance or uptime. Stability ratings are frequently high, ranging from eight to ten out of ten. While minor bugs are occasionally noted, they don't compromise security. Users appreciate effective communication when incidents occur, which rarely impact daily operations. Stability is described as excellent, with occasional portal incidents and backend issues, yet these are managed well, ensuring minimal disruption.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Abnormal Security Buyer's Guide for additional reliable information.

Review data by company size

By reviewers
Company Size	Count
Midsize Enterprise	2
Large Enterprise	8

By reviewers

By visitors reading reviews
Company Size	Count
Small Business	373
Midsize Enterprise	319
Large Enterprise	819

By visitors reading reviews

Top industries

By visitors reading reviews

Computer Software Company

14%

Financial Services Firm

Manufacturing Company

Government

Healthcare Company

Retailer

Construction Company

University

Educational Organization

Comms Service Provider

Real Estate/Law Firm

Energy/Utilities Company

Non Profit

Insurance Company

Legal Firm

Hospitality Company

Consumer Goods Company

Outsourcing Company

Wholesaler/Distributor

Performing Arts

Media Company

Pharma/Biotech Company

Transportation Company

Compare Abnormal Security with alternative products

Learn more about Abnormal Security

Abnormal Security is specializes in protecting email communications, detecting and preventing threats, filtering out spam and phishing emails, and blocking malicious attachments. Users rely on Abnormal Security to enhance their email security, identify and stop sophisticated attacks, safeguard sensitive information, and improve overall cybersecurity measures.

Abnormal Security targets sophisticated attacks that traditional email security measures might miss. Their system analyzes various data points to build an understanding of email behavior within your organization. This includes emails themselves, sender and recipient information, and even business context. By understanding these patterns, they can identify anomalies that might indicate a malicious attempt. Their solution is designed for the cloud, offering quick deployment and minimal configuration. This eliminates the need for complex setup processes often associated with security software.

Abnormal Security customers appreciate the ease of use in setting up and managing the platform, along with its ability to accurately filter out suspicious emails and prevent potential cyber threats. Abnormal Security has been praised for streamlining processes, boosting productivity, improving communication within teams, providing valuable analytics for informed decision-making, and driving success in various projects. Experience the robust security measures and benefits of Abnormal Security to safeguard your sensitive information and maintain a secure email environment.

Abnormal Security customers

Foot Lcoker, Xerox, Liberty Mutual, Mattel, Boston Scientific

Product Categories

Email Security

Secure Email Gateway (SEG)

Popular Comparisons

Microsoft Defender for Office 365 vs Abnormal Security

Darktrace vs Abnormal Security

Cloudflare One vs Abnormal Security

Proofpoint Email Protection vs Abnormal Security

Microsoft Exchange Online Protection (EOP) vs Abnormal Security

Cisco Secure Email vs Abnormal Security

Check Point Harmony Email & Collaboration vs Abnormal Security

Mimecast Email Security vs Abnormal Security

Fortinet FortiMail vs Abnormal Security

Avanan vs Abnormal Security

Barracuda Email Security Gateway vs Abnormal Security

Barracuda Email Protection vs Abnormal Security

IRONSCALES vs Abnormal Security

TitanHQ SpamTitan vs Abnormal Security

Fortinet FortiMail Cloud vs Abnormal Security

See all alternatives

Abnormal Security Reviews Summary
Author info	Rating	Review Summary
Manager, Information Technology Technical Services at a wholesaler/distributor with 5,001-10,000 employees	5.0	I use Abnormal Security in a medium-sized manufacturing environment to block spam and email threats. Its automated scoring tool enhances threat detection and scales easily. It offers great ROI by preventing business email compromise, though more granular options would be beneficial.
Senior Director of IT at Crunch Fitness West Florida and Atlanta (CR Fitness)	5.0	We transitioned from Mailroute to Abnormal Security for enhanced email protection alongside Microsoft 365. Despite some integration challenges, Abnormal Security's ability to detect threats, including compromised accounts, convinced us of its superior capabilities over other considered solutions.
Vice President of Information Security at Comfort Systems USA Inc	5.0	We implemented Abnormal Security to combat advanced email threats, finding it intuitive and efficient. Although it lacks on-premise support, it surpasses our previous solutions by effectively detecting sophisticated attacks with minimal configuration and excellent support.
IT Manager at a media company with 501-1,000 employees	4.5	We transitioned from Mimecast to Abnormal Security for enhanced email security. Abnormal Security's auto-remediation and Detection 360 features effectively identify missed threats and improve AI training. However, I wish they could include outbound scanning to prevent malicious emails from being sent.
Sr. Director Information Security at a energy/utilities company with 5,001-10,000 employees	4.5	I use Abnormal Security for phishing protection, appreciating its auto-remediation and quick deployment. It outperformed previous solutions and integrates AI for evolving threats. Improvement is needed in partnerships. The lack of customization is a drawback.
Cyber Security Engineer at a hospitality company with 10,001+ employees	5.0	Abnormal Security is crucial for us, providing valuable threat protection, auto-remediation, and an effective abuse mailbox feature. It augments our Proofpoint gateway, offering a great return on investment by saving costs and preventing threats that might be missed otherwise.
VP of Engineering at a hospitality company with 1,001-5,000 employees	5.0	I use Abnormal Security for advanced spam filtering, particularly spear-phishing detection using AI. Its setup is quick via APIs with Microsoft 365. While it's asynchronous, occasionally allowing threats temporarily, it surpasses previous solutions like Cisco IronPort in effectiveness.
Associate CIO & Enterprise CISO at a educational organization with 10,001+ employees	5.0	We implemented Abnormal Security to enhance our email protection against impersonation attacks. Its AI capabilities significantly reduced email incidents and saved time, although pricing remains a challenge for academic institutions. It complements Microsoft Advanced Threat Protection effectively.

Abnormal Security Reviews

What is Abnormal Security?

Featured Abnormal Security reviews

Abnormal Security mindshare

PeerResearch reports based on Abnormal Security reviews

Valuable Features

Room for Improvement

ROI

Pricing

Popular Use Cases

Service and Support

Deployment

Scalability

Stability

Review data by company size

Top industries

Compare Abnormal Security with alternative products

Learn more about Abnormal Security

Abnormal Security customers

Related questions

Product Categories

Popular Comparisons