I use it for email security.
Sublime Email Security Platform
Sublime SecurityReviews from AWS customer
0 AWS reviews
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
29 reviews
from
and
External reviews are not included in the AWS star rating for the product.
You Think Your Email Security is Good? I'll Show You Sublime.
What do you like best about the product?
Detections are second to none.
Ease of setup.
Ability to self host.
Customer service is excellent.
The threat research team quickly creates rules in response to new attacks.
The interface is intuitive.
Statistics are comprehensive.
The company truly value customer feedback.
Integrates to SOAR platforms easily with a robust API and webhooks.
Ease of setup.
Ability to self host.
Customer service is excellent.
The threat research team quickly creates rules in response to new attacks.
The interface is intuitive.
Statistics are comprehensive.
The company truly value customer feedback.
Integrates to SOAR platforms easily with a robust API and webhooks.
What do you dislike about the product?
I have yet to find something I dislike about the product.
What problems is the product solving and how is that benefiting you?
Sublime solves the typical business problem of managing the large and ever-evolving attack surface presented by sophisticated phishing campaigns. The benefits are endless and too exhaustive to list, however the main ones include a minimized attack surface, second-to-none detections with a high true positive detection rate, and granular insights into email attack methods.
Proactive and simplified email security
What do you like best about the product?
Sublime is a reliable, trustworthy platform that consistently delivers proactive rule logic and timely, dedicated customer support. It's user-friendly platform and minimal learning curve has been critical in enhancing my D&R team's operations. The Sublime team also goes above and beyond in their reception to feedback, quickly iterating on feature requests and enhancements to the platform. It's clear we share aligned goals, making this one of the most valuable partnerships my team has.
What do you dislike about the product?
No complaints here! I've interacted with the platform frequently over the years, and two things have remained consistent: its reliability and ease of use, and how everyone on the team is exceptionally technical, responsive, kind, and committed. They consistently go above and beyond to facilitate a strong, collaborative working relationship and ensure a seamless detection-to-response pipeline.
What problems is the product solving and how is that benefiting you?
Sublime has helped significantly enhance our email threat detection and response, by identifying sophisticated campaigns, automating rule logic, and integrating seamlessly with our SOAR, SIEM, and greater workflow. Overall, it's helped us shift from a more reactive approach to a more proactive stance on email security.
Excellent Platform, Excellent Service
What do you like best about the product?
Sublime Security is our number one email security tool. The ability to write incredibly specific rules for your environment with the MQL language combined with the seemingly ever-present rule updates from Sublime is very reassuring. We use it every day and their customer support is some of the best.
What do you dislike about the product?
There is nothing I dislike about the platform.
What problems is the product solving and how is that benefiting you?
Email security protection.
Sublime provides comprehensive email security with a low operational burden.
What do you like best about the product?
Sublime is flexible, you are able to make detection rules for all of your use cases, as well as provide additional features such as user report analysis.
What do you dislike about the product?
Nothing! As we identify feature requests, the Sublime team is continuously able provide support to ensure all of our use cases are all met.
What problems is the product solving and how is that benefiting you?
Protecting enterprise user email inboxes. This limits the risk and response need related to email threats.
Full of capabilities with excellent support
What do you like best about the product?
We recently swapped our SEG from a competitor to Sublime and the experience so far has been excellent. Sublime’s team and our CSP have been readily available to bring our team up to speed and aid in making the transition seamless. Having full transparency over our detection rules has elevated our teams ability to detect and respond to email threats.
What do you dislike about the product?
There is a significant learning curve required to fully utilize Sublimes capabilities, specifically regarding MQL. However, Sublime overs public and private training sessions to increase our ramp up rate.
What problems is the product solving and how is that benefiting you?
Building custom detections specific to our environment and allowing my team to automate processes via their API
Sublime is the reinvention of email security that everyone needs to know about
What do you like best about the product?
Detection as code so it’s infinitely flexible, the UI/UX is top tier, and there is constant innovation with actual, tangible benefits in both ease of use and efficacy.
What do you dislike about the product?
Lack of RBAC user controls (as of May, 2025)
What problems is the product solving and how is that benefiting you?
Everything surrounding email security. BEC protection, malware and spam filtering, and general protection and hygiene around email
Best in the business for email security
What do you like best about the product?
The ease of the deployment and rapid response to evolving email security threats. We were able to enable it for a large organization and have it work immediately, allowing us to start remediating threats in our email environment. Sublime is constantly pushing out detection rules for the newest threats and picking up on things way before any other tool could.
What do you dislike about the product?
There is not much to dislike about Sublime, it has worked since day one and has had a huge, positive impact for our organization.
What problems is the product solving and how is that benefiting you?
Our previous email security solution would not identify novel phishing threats and would constantly allow malicious emails to land in user's inboxes. Since implementing Sublime and enabling the auto-quarantine feature, we have seen a drop in 60% of user reported phishing emails. Sublime is constantly catching and remediating emails long before the end user ever sees them.
As my colleague one said: "It's built for analysts by analysts"
What do you like best about the product?
It’s one of the few tools we’ve implemented that truly just works. Low maintenance, no tuning—it just does what it’s supposed to do.
What do you dislike about the product?
Sublime just works and I can't think of any downsides of someone using Sublime. Product is awesome, the Sublime folks are amazing and could not say anything bad about it.
What problems is the product solving and how is that benefiting you?
We needed a solution that could reliably detect threats and automate remediation to free up analyst time for more strategic security initiatives. Before Sublime, analysts were spending hundreds of hours handling phishing cases, with each investigation taking 10-15 minutes and often requiring follow-on actions from Elastic’s Incident Response team.
After deploying Sublime, the number of investigations dropped by 62% within the first quarter, but the percentage is likely higher due to benign reports unrelated to phishing.
After deploying Sublime, the number of investigations dropped by 62% within the first quarter, but the percentage is likely higher due to benign reports unrelated to phishing.
Easy to setup, stable and highly scalable
What is our primary use case?
What is most valuable?
I like its ability to detect and block.
What needs improvement?
The ability for users to look at their own quarantine box needs improvement. So at the moment, it doesn't give you the ability to see every email that has been quarantined. No end-user has the ability to see what's being quarantined. It's only people who have access to the back-end platform that can actually see what has been quarantined. The end user doesn't know if they have an email that has been quarantined, only if they're expecting something that didn't come through.
In future releases, I would just like to see that ability for users to see what's being quarantined and what's not quarantined but safe. Just those genuine false positives.
For how long have I used the solution?
I have been using this solution for six to eight weeks at tops.
What do I think about the stability of the solution?
It is a stable product. The stability is top-notch.
What do I think about the scalability of the solution?
Since it is cloud-based, it's easily scalable. I would rate the scalability a ten out of ten.
We have around 60 end users using this solution.
How are customer service and support?
All of that's been done through our security partner. But I haven't gone through them directly.
Which solution did I use previously and why did I switch?
When I compare it to Microsoft Defender in terms of security effectiveness, I would prefer Sublime Security because it is a separate solution from the main stack, which makes it more proactive in identifying and stopping malicious emails.
How was the initial setup?
For me, it was simple because the security partner did the setup. They onboarded us.
What's my experience with pricing, setup cost, and licensing?
I would rate the pricing of Sublime Security as a seven. It is reasonably well-priced.
What other advice do I have?
I would rate Sublime Security's ability to provide security as a nine. It is a very effective security solution.
showing 21 - 29