Abnormal Security

Abnormal Security applies behavioral AI to baseline normal communication patterns inside Microsoft 365 and Google Workspace, then detects deviations indicative of business email compromise, vendor email compromise, account takeover, and credential phishing. The platform installs through API integration, requires no MX record changes, and remediates threats post-delivery from inboxes. Beyond email, it monitors connected SaaS applications for unusual behavior such as suspicious mailbox rule creation or anomalous logins.