Sublime Email Security Platform

My main use case for Sublime Security  is email security, as it provides an AI-powered email security platform designed to manage all the emails coming to the organization, which is comparable to other email security tools available, allowing us to detect phishing attacks using different rules.

Regarding my main use case for Sublime Security , we mainly use it as an email security tool, which is customizable with detection logics and automation capabilities that help us understand why emails are flagged, enabling organization-specific detections.

The best features of Sublime Security include its seamless integration with Microsoft 365, which can be set up easily within three to four hours, the built-in detection rules that are effective against phishing, and its ability to reduce false positives compared to Microsoft Defender.

The customization and threat hunting features of Sublime Security have helped my team by allowing us to create specific detection rules for quarantined emails and alerting SOC analysts automatically, and one notable instance involved identifying a compromised user through flagged suspicious alerts.

Sublime Security positively impacts my organization with AI-driven detection that reduces false positives and improves alert severity, providing timely notifications to the SOC analyst if any interaction occurs after clicking a potentially malicious link.

To improve Sublime Security, I would appreciate better reporting capabilities, as the current reports are too high-level for regular SOC operations.

Apart from reporting, everything else about Sublime Security is impressive.

I have been using Sublime Security for more than around 1.5 years.

Sublime Security is stable, with minimal maintenance times and high reliability, experiencing very few downtimes.

Sublime Security's scalability is impressive, accommodating organizations of various sizes and capable of handling growth effortlessly.

I raised multiple support cases regarding report availability, and they have been very responsive, showing a commitment to resolving issues.

I would rate the customer support a 9.5.

I have exclusively used Sublime Security for this customer, but I have used Avanan  and Microsoft Defender for others, and I find Sublime Security to be one of the best tools for email security.

The best features of Sublime Security include its seamless integration with Microsoft 365, which can be set up easily within three to four hours.

We are customers of Sublime Security, without any other business relationship.

While quantifying return on investment is challenging, Sublime Security has helped my team by avoiding multiple false positives and facilitating better investigations.

My experience with pricing, setup cost, and licensing is limited, but I noticed that Sublime Security was slightly more expensive than Avanan  or Defender, as Defender comes included with other Microsoft products, but I believe Sublime Security is value for money.

Before choosing Sublime Security, we evaluated Avanan and Defender 365, but clients opted for Sublime Security due to its superior detection rules and customer support.

If pricing is not an issue, I advise others to go for Sublime Security.

Reduced vendor dependency in deploying new protections with Sublime Security matters to us as it enhances email classification and security alerts, aiding in the detection of subtle threats.

The impact of Autonomous Detection Engineer (ADA) on our detection coverage has been significant, blocking over 1,500 to 1,800 emails classified mostly as spear-phishing targeting VIP users.

As for the AI agents, we have not fully utilized their capabilities yet, relying more on improving detection rules and email classification.

I rate this product a 9 overall.

My main use case for Sublime Security is to test how this product works, so I am using this for that purpose.

For a quick specific example of what I tested with Sublime Security, it detects the emails of the person on this side to check that feature, and there is a feature in Sublime Security that is detection as code, which is an excellent feature that I have noticed in this product. I am talking about eleven hundred, and that detection feature is something where I can explicitly customize mentions of power spam or non-structured email. With our custom permissions, we have it, and getting that notice by word blocking is something very important. It is a great feature that I have been using.

Regarding my main use case for testing Sublime Security, it is very good, and I fully specify that detection; it is something very extensive with maximum features.

The best features Sublime Security offers include detection as code, which gives a very powerful feature for users to write rules, custom objects, and the language provides some syntax that is definitely a good feature. The second one is why it detects spam emails or justifies why this is considered spam, which is the second most valuable feature.

I use the detection as code feature in my day-to-day life, which usually identifies junk emails and spam emails by default with the conditions and the vast dataset it has. Even if some emails may not get into that machine learning dataset, I can describe if it is from an external source and has rewards; I can remove it since it is considered spam. This feature changes the usual segregation and categorization, helping users not fall for known types of emails that the system may not detect. The explanation of justification, instead of just flagging something as spam, gives the user understanding such as, this is not a Google email; we really cannot click on it. It enhances user security, and even if another user sees this type of content based on gesture events for another email, they think not to use the image correctly.

Sublime Security has positively impacted my organization.

I would say there are very minimal changes needed regarding Sublime Security; for first-time users, it can be difficult knowing how to write the tool. Having some templates available would improve the experience.

My advice for others looking into using Sublime Security is that each edition would be helpful for initial users, and users should set templates in, which can be added; right now, I am not trying anything new, as this is cool.

I have been using Sublime Security for three months.

Sublime Security is stable; I confirm this.

I did switch to Sublime Security; it is part of my style of working.

Before choosing Sublime Security, I evaluated alternatives such as MyCast and Proofpoint, which I refused before finalizing on Sublime Security.

Phishing versus phishing detection is also something I find good, and I have mentioned these things already.

Since I have been using Sublime Security personally, I have noticed specific improvements like fewer spam emails and improved detection, which saves me time. It helps me segregate emails instead of reviewing all things manually, as it detects spam emails. I do not have to go through every email, which makes me very efficient for other tasks. It also shows if some emails are current, and if I am about to register or receive registration links, it tells me why those emails are separated. I understand better instead of reading all the emails, and it summarizes the words or thumbnails of the emails. If an email is considered good, I continue, making my time more efficient.

Regarding the AI capabilities of Sublime Security, I think for detection, using ML to analyze content is already a feature present in Sublime Security, which also identifies phishing attempts.

I think Sublime Security shows false positives. I give this review a rating of nine.

Our main use case is two-fold. Primarily, as a channel partner, our core focus is channel enablement. We actively pitch, demonstrate, and distribute Sublime Security to our partner network, who then deploy it for end-user organizations. Secondarily, we 'drink our own champagne' by running it internally to protect our own business communications.

When we position it to our partners, we frame it as an advanced email security platform. It goes far beyond traditional junk filtering by actively hunting the sophisticated threats that bypass native defenses—specifically Business Email Compromise (BEC), CEO fraud, invoice scams, fake login pages, and malware attachments.

As a distributor, the positive impact for us is measured by how well the product performs for our partners and their end-users. Sublime Security has been a major positive because it perfectly fits our criteria for 'best-in-breed' solutions. Specifically, it delivers strong ROI, saves employee time, and significantly reduces risk exposure by preventing expensive breaches. Because it checks all these boxes, we've been able to successfully enable our partners across all our regions to confidently take it to market.

Another major positive is its deployment model. In today's cybersecurity landscape, 'rip-and-replace' is a massive hurdle for buyers. Sublime works flawlessly with existing tools, enhancing a customer's current stack rather than forcing them to rebuild it.

The standout features of Sublime Security revolve around its ability to catch advanced threats that bypass native defenses. Specifically, it excels at blocking malware attachments and stopping Business Email Compromise (BEC), such as CEO fraud and invoice scams.

A major advantage is its fast time-to-value because it isn't a rip-and-replace solution. Instead, it acts as a 'smarter layer' that enhances existing protections like Microsoft 365 or Google Workspace. While native security catches the obvious junk, Sublime uses flexible, customizable detection logic to catch the highly sophisticated attacks that easily slip through standard filters.

Finally, the platform gives you deep visibility and fast search capabilities across all email activity. Without a tool like this, investigations take far too long, and teams lack visibility into what actually breached the inbox. Sublime solves this by offering rapid detection, automated response actions, and the ability to quickly remove malicious emails in bulk.

Based on the feedback we receive from our partners and their end-users, there are two main areas for improvement: the learning curve and pricing for smaller organizations. First, while the platform is incredibly powerful, it isn't simply 'plug-and-play.' Security teams need to invest time into learning the product to extract its full value.

Second, the cost can feel a bit steep for small-to-medium-sized businesses (SMBs). However, we always caveat this by looking at the ROI: a single breach could put a small company completely out of business. While the upfront cost might seem high to them, preventing just one catastrophic breach means the tool instantly pays for itself.

I have been using the solution for eighteen months.

On a scale of one to ten, I rate Sublime Security  a nine out of ten because I believe there are a couple of negatives regarding scalability for catering to enterprise and small to medium enterprises. Additionally, the product requires a learning phase, and it is not readily usable right away.

Sublime Security  merits this rating because of a couple of changes that need to be addressed. If it catered to both small and enterprise businesses on a pricing scale, it would receive a ten, but it is not far away.