No more typing reviews! Try our Samantha, our new voice AI agent.

Abnormal Security vs Sublime Security comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Abnormal Security
Ranking in Email Security
12th
Average Rating
9.4
Reviews Sentiment
7.5
Number of Reviews
11
Ranking in other categories
Secure Email Gateway (SEG) (5th)
Sublime Security
Ranking in Email Security
15th
Average Rating
9.0
Reviews Sentiment
6.5
Number of Reviews
6
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of September 2026, in the Email Security category, the mindshare of Abnormal Security is 3.3%, down from 6.8% compared to the previous year. The mindshare of Sublime Security is 1.2%, down from 1.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Email Security Mindshare Distribution
ProductMindshare (%)
Abnormal Security3.3%
Sublime Security1.2%
Other95.5%
Email Security
 

Featured Reviews

reviewer2251509 - PeerSpot reviewer
Senior Director, Information Technology at a insurance company with 51-200 employees
AI has helped classify threat types more accurately but product ownership can improve
Ease of use is important, and Abnormal Security's responsiveness and ability to deliver solutions when issues arise are crucial. However, there is always room for improvement, as achieving a perfect 10 means there is no more room for enhancement. For Abnormal Security, it's about leveraging AI even more, which they are already working on in their roadmap.
reviewer2764257 - PeerSpot reviewer
Manager Security Operations Center at a educational organization with 10,001+ employees
Improves decision-making with clear verdict explanations and works well across multiple environments
I know that a lot of time has been invested in improving the efficacy of the platform, and it shows; it performs very well. Moving forward, I think our focus should be on how to achieve better integration with other systems. While they do provide API-level access and web hooks, I believe more out-of-the-box integrations with SOAR platforms and SIEM tools would enhance Sublime's value. This would allow it to be integrated more closely with the workflows of various teams and could potentially increase its market appeal. From my perspective, the tool itself functions exceptionally well, which gives me confidence in the system. I want to see this functionality extend to other tools that I use, enabling faster automation and improved workflows for the team, particularly from a security operations standpoint. I have no critiques regarding the tool itself. They've done an outstanding job and are maintaining high quality throughout their development process. They have a great product, and it's essential that they continue to uphold that standard, even though it requires significant effort.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Abnormal Security's AI capabilities are what we like most, as they can categorize and classify the emails, and based on the context of the email, understand if it's a graymail, a bulk mail, or a phish."
"Ease of use is undoubtedly one of the most valuable features of Abnormal Security."
"It does some really cool stuff that other tools aren't doing. We found it to be really effective, and the AI/ML functionality is really what differentiates them."
"I would recommend Abnormal Security."
"It protects us from being business email compromised, which is invaluable for maintaining our security."
"The features that appeal to me most are the combination of auto-remediation and Detection 360."
"One of the things that I love about them is that the setup and installation are super easy. All you do is give them access to your Microsoft 365 tenant, and through APIs, they are able to do their work. They are doing all this through APIs, so you do not have to install the software and take a month to get it all set up to even see the value of the solution. You could be up and running in less than an hour."
"I have never encountered any stability issues with Abnormal."
"Overall, the auditability and the ability to evaluate the information in Sublime through various mechanisms made me very comfortable with setting these capabilities to auto-remediation."
"Sublime Security has improved our email threat detection and response by helping us identify phishing and Business Email Compromise campaigns faster, investigate related emails, and automate remediation, which has reduced our manual effort and improved our response time."
"Since I have been using Sublime Security personally, I have noticed specific improvements like fewer spam emails and improved detection, which saves me time."
"Sublime Security has positively impacted my organization by helping our team reduce manual email triage and respond to phishing and BEC threats faster."
"This is why it provides absolute value; it adds a smarter layer that catches anything missed by Microsoft 365 or Google Workspace protection, as attackers can breach those systems easily using flexible detection logic that security teams can quickly customize."
"I like its ability to detect and block."
 

Cons

"One feature I'd love to see is outbound scanning."
"When we're working on something as engineers, and we find an idea or a method of doing something that would be greatly improved by doing it another way, there should be an ability for me to click the ideas button, type in an idea that I have, and submit it to a product review team or developers to have them think through the process a little bit more."
"For Abnormal Security as a product, I would say probably somewhere around a seven, as there are some other areas where they can improve to achieve a higher rating."
"There could be more selectable options and more granular selections available."
"I, as such, do not have anything that I do not like or would like to add, but you could argue that because they are doing it API-based, there is a chance that something could slip through temporarily before they are able to pull it out. In theory, it could happen just because of the nature of the system. They are not in line with the delivery of the mail. They are kind of asynchronous, which is a pro as well as a con. If it is synchronous, then I know it would always stop them, but because it is asynchronous, things could get through temporarily or because of some system issues on the Microsoft side or their side. It is the nature of the beast, but it is a little bit of a con."
"The pricing for academic institutions and student mailboxes is challenging."
"The ideal scenario would be for Abnormal Security to work in tandem with Microsoft to analyze incoming emails."
"There could be room for improvement in enhancing integration with other cybersecurity tools."
"Sublime Security could be improved by enabling more integration, better customization of alerts, and more detailed reporting."
"I believe the main areas for improvement for Sublime Security are ease of onboarding and learning, as the platform has many powerful capabilities, making it take some time for new analysts to become comfortable with all the features and detection logic."
"To improve Sublime Security, I think the learning curve is the primary concern; it is powerful, but it is not plug and play."
"While they do provide API-level access and web hooks, I believe more out-of-the-box integrations with SOAR platforms and SIEM tools would enhance Sublime's value."
"The ability for users to look at their own quarantine box needs improvement. So at the moment, it doesn't give you the ability to see every email that has been quarantined. No end-user has the ability to see what's being quarantined. It's only people who have access to the back-end platform that can actually see what has been quarantined. The end user doesn't know if they have an email that has been quarantined, only if they're expecting something that didn't come through."
"I would say there are very minimal changes needed regarding Sublime Security; for first-time users, it can be difficult knowing how to write the tool."
 

Pricing and Cost Advice

"The license is based on the user count, so the number of users that have an email address in the organization."
"Overall, we'd certainly prefer lower pricing, but Abnormal Security doesn't seem unreasonable compared to similar offerings in the market."
"The pricing appears fair, and they demonstrate a genuine willingness to work with us on it."
"Abnormal Security, on the other hand, provides the same level of functionality for just over $60,000 – that's half the price!"
"I would rate the pricing of Sublime Security as a seven out of ten. It is reasonably well-priced."
report
Use our free recommendation engine to learn which Email Security solutions are best for your needs.
913,683 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
10%
Financial Services Firm
9%
Computer Software Company
8%
Government
6%
Outsourcing Company
11%
Computer Software Company
9%
Financial Services Firm
9%
Marketing Services Firm
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business1
Midsize Enterprise2
Large Enterprise8
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise5
Large Enterprise10
 

Questions from the Community

What is your experience regarding pricing and costs for Abnormal Security?
I find the pricing to be favorable, but I did not disclose the exact cost.
What needs improvement with Abnormal Security?
Ease of use is important, and Abnormal Security's responsiveness and ability to deliver solutions when issues arise are crucial. However, there is always room for improvement, as achieving a perfec...
What is your primary use case for Abnormal Security?
The main use case for Abnormal Security is as a spam filter and for mail hygiene. This use case is for the finance industry.
What is your experience regarding pricing and costs for Sublime Security?
My experience with pricing, setup cost, and licensing is limited, but I noticed that Sublime Security was slightly more expensive than Avanan or Defender, as Defender comes included with other Micr...
What needs improvement with Sublime Security?
I believe the main areas for improvement for Sublime Security are ease of onboarding and learning, as the platform has many powerful capabilities, making it take some time for new analysts to becom...
What is your primary use case for Sublime Security?
My main use case for Sublime Security is email security and phishing detection, where I use it to investigate suspicious emails, identify phishing and BEC attempts, analyze malicious links and atta...
 

Overview

 

Sample Customers

Foot Lcoker, Xerox, Liberty Mutual, Mattel, Boston Scientific
Snowflake, Spotify, Anduril, Elastic, Compass, Encompass Health, Zscaler, Ovo Energy, Personio, Beneteler 
Find out what your peers are saying about Abnormal Security vs. Sublime Security and other solutions. Updated: September 2026.
913,683 professionals have used our research since 2012.