Abnormal - Cloud Email Security (EU)

What do you like best about the product?

It works best for securing against threats and malicious emails. It scans every email, filters out suspicious data or content, and then asks a human to review anything questionable, which helps provide end-to-end security.

What do you dislike about the product?

Sometimes it flags valid emails and data, so it requires manual intervention to review them; otherwise, we can miss important emails.

What problems is the product solving and how is that benefiting you?

It reduces the manual effort of scanning suspicious emails. It scans incoming email attachments first and only allows them through if they look safe, which helps provide complete security. It also sends phishing alerts.

What do you like best about the product?

I enjoy the protection Abnormal AI provides for my inbox. Once it's set up it prevents scams and phishing emails to come through to your inbox which alleviates stress from wondering if the conversations coming to my inbox are legit or not. Lastly, I enjoy how it provides reports so you can build self awareness to continue to protect yourself.

What do you dislike about the product?

There are not many drawbacks, but some simple attacks can make it's way to your inbox which can be a downfall, but the more you familiarize yourself with the scams its easier to see through it.

What problems is the product solving and how is that benefiting you?

As a non-profit we receive hundreds of communications a day. This program vets emails before it hits our inbox so we can efficiently collaborate with people who have genuine interest.

What do you like best about the product?

It easily integrates with Office 365, is very good at identifying threats, spam, phishing scams, and other threats,

What do you dislike about the product?

I wish there was the ability to implement custom graymail categories for smart filtering. Currently there only exists "Promotional", however it would be nice to add additional categories if we wanted, ie social media, etc.

What problems is the product solving and how is that benefiting you?

Abnormal AI has given us an intelligent email filter that can keep up with new risks that are developing. This is one of the important cybersecurity layers for our organization.

What do you like best about the product?

Abnormal Alerted us to sophisticated phishing emails, business email compromise, and account takeover attempts. Instead of relying on rules to detect email threats, its behavioral AI analyzes how people and systems communicate and behave to uncover suspicious emails. We also had better visibility into why an email was flagged, which was valuable during our security investigation and response efforts.

What do you dislike about the product?

Performs well once configured. The Abnormal platform works well for securing enterprise email, however it takes time to learn how it detects threats and properly tune it to meet your organization's needs. Your security team may require a learning curve when integrating with your incident response processes.

What problems is the product solving and how is that benefiting you?

Helped us better handle targeted email attacks. Abnormal reduced the risk of phishing emails, business email compromise attacks, and compromised accounts. It also decreased our reliance on heavily staffing email investigations by automating threat analysis and remediation.

What do you like best about the product?

I appreciate the fact that it sorts your emails based on your preferences. This feature keeps my inbox cleaned up while allowing me to look at less pertinent emails easily and on my own time.

What do you dislike about the product?

It can be a distraction when it sorts emails into folders. For a split second, all emails show up in my main inbox before disappearing to their sorted folders. It takes some getting used to, and even at that it can be annoying.

What problems is the product solving and how is that benefiting you?

We use Abnormal AI as our email security program filtering out malicious and spam emails as well as sorting emails by potential importance. It's not just providing email security, it's also saving us time.

What do you like best about the product?

It’s virtually zero-touch. You enable it, it scans your mailboxes and learns, and there’s very little you need to do beyond that—no real setup of policies, groups, definitions, or configuration. Catching even a single Business Email Compromise and we're getting our money's worth. with Abnormal AI since go live, its caught almost 7000!!

What do you dislike about the product?

There’s very little to dislike. The only drawback is that you need to keep monitoring for false positives, although I suppose that’s true of most automated email security systems.

What problems is the product solving and how is that benefiting you?

It helps plug gaps in our Mimecast solution, such as Business Email Compromise and VIP Targeted Threats. It also complements our Entra User Account Compromise coverage.

What do you like best about the product?

I like that Abnormal AI allows smaller teams to manage threats with a more hands-off approach, saving time tuning models and reviewing phishing reports. The AI security mailbox is quite good, as we can direct reports there without our internal SOC intervention, saving us invaluable time. Integrating with KnowBe4's PAB and directing reports to the AI security mailbox allows users to report potentially malicious or spam emails for another analysis. I also appreciate the integrations with Rapid7 and Entra, which help detect account takeovers and take automated actions. The upcoming integration with Cyera will likely be invaluable. The initial setup of Abnormal AI was extremely easy.

What do you dislike about the product?

We've found that some quite basic attacks get past Abnormal AI, including BEC and VIP impersonation, which didn't happen before with Darktrace. The model improvements from the D360 team need to be more considered and holistic, as similar attacks continue to get through.

What problems is the product solving and how is that benefiting you?

Abnormal AI helps prevent and detect account takeovers, malicious mail, and spam without SOC intervention, automating reports. It saves us time since we don't manually review phish reports. The AI security mailbox is beneficial for a hands-off threat management approach, integrating well with other tools and reducing false negatives.

What do you like best about the product?

I like the ease of use of Abnormal AI and how it provides alerts when it monitors and finds something unusual in our environment. I also appreciate that it is not information intensive; we only need to provide minimal information initially, and it quickly learns and adapts to our environment. The initial setup was almost too easy, and I was pleased that nothing went wrong during the process.

What do you dislike about the product?

I find setting up the UI a bit cumbersome and it takes effort to get the dashboards to show the information I need.

What problems is the product solving and how is that benefiting you?

I appreciate that Abnormal AI reduces our need for a dedicated security team for data threats and provides ease of use with its alert system for abnormal activities.

What do you like best about the product?

I like that I am protected by Abnormal and the Graymail addon has boosted the productivity of the office.

What do you dislike about the product?

Haven’t found anything yet to be upset about

What problems is the product solving and how is that benefiting you?

Protecting the business from malicious emails and improving productivity with Graymail.

What do you like best about the product?

Working in the SOC, dealing with the daily avalanche of user-reported suspicious emails used to be a massive time sink. Abnormal completely transformed this workflow. The AI Security Mailbox feature is incredible—it autonomously triages every user-reported email, categorizing them as malicious, spam, or safe. Instead of me manually extracting headers, firing up a Kali Linux VM to sandbox suspicious payloads, or running various penetration testing tools to validate a malicious link, the behavioral AI engine does the heavy lifting instantly. I also really appreciate the API-native deployment. We integrated it directly with our Microsoft 365 environment in minutes without having to mess with MX records or complex mail routing. Because it analyzes thousands of behavioral signals rather than just static threat signatures, it catches advanced Business Email Compromise (BEC) and vendor fraud that our legacy secure email gateway (SEG) consistently missed.

What do you dislike about the product?

While the behavioral AI is highly effective, it can occasionally feel like a "black box." When the system flags an internal email as anomalous or blocks a seemingly legitimate vendor communication, explaining the exact rationale to end-users can be tricky because the decision is based on complex behavioral deviations rather than a simple blocked IP address or malicious URL. Additionally, while the dashboard is clean, it could offer more customizable reporting widgets for the highly specific metrics our team needs to present during weekly security briefings.

What problems is the product solving and how is that benefiting you?

The primary problem it solves is the immense operational burden of manual email investigation. By automating the triage process and instantly removing malicious emails across all mailboxes (while also finding unreported emails in the same campaign), it frees up hours of my day. This allows our team to focus strictly on proactive threat hunting and complex identity threats instead of being buried in a queue of low-level phishing reports. It has drastically reduced our mean time to respond (MTTR) to email-based attacks.