What is Abnormal AI?

Abnormal AI sells a cloud security platform covering email security, identity security and AI security. Its pages say it connects by API to services such as Microsoft 365, Google Workspace and Slack and uses behavioral AI (a model it calls Attune) that builds a baseline of normal behavior for each identity and flags deviations.

Who it's for

Organizations with Microsoft 365 or Google Workspace email that want API-based protection against phishing, business email compromise and account takeover, bought through a sales process. The vendor's pages offer demos and proof-of-value trials through sales rather than self-service sign-up.

Pros & cons

Strengths

Abnormal says the platform deploys in 60 seconds via API with no MX record changes.
The vendor lists email security (Inbound Email Security, AI Security Mailbox, AI Phishing Coach, Misdirected Email, Email DLP Rules), identity security (Account Takeover Protection, Identity Threat Protection, Posture Management) and AI security (AI Governance, AI Agent Security, AI Employee Guardrails).
The platform page lists integrations with Microsoft Entra, Okta, Ping Identity, Microsoft 365, Google Workspace, Slack, Salesforce, ServiceNow, AWS, Azure, GCP and Splunk, and cites 100+ native API integrations.
Abnormal says Inbound Email Security builds a behavioral profile per identity with its Attune model and explains which signals triggered each detection; it also lists Search & Respond, Quarantine Release, Custom Rules and Custom AI Models.
The service privacy notice says Abnormal does not sell Customer Data, uses subprocessors under written agreements, and issues a deletion certificate on written request.
The vendor says each proof of value generates head-to-head miss data against the incumbent email security tool.

Limitations

No public pricing was found on the vendor's pages; the only call to action is Request a Demo, so cost must be obtained from sales.
The Microsoft Azure Marketplace listing shows a Free Trial label but gives no length or terms, and the vendor's own pages mention only demos and proof of value; no free plan was found.
The privacy notice says Customer Data is used solely to provide and improve the Service but does not say whether it is used to train AI models, and it does not state where data is stored; confirm with the vendor.
Retention figures found are for the Misdirected Email feature only (metadata and signals kept 180 days, email body fetched on demand from Microsoft Graph); other products were not covered.
The homepage cites an internal benchmark against general-purpose language models; its footnotes say the results come from a focused test set and may not reflect production results.

Plans and pricing

Email Security modules: Contact sales. Inbound Email Security, AI Security Mailbox, AI Phishing Coach and others; pricing is not published.
Identity Security modules: Contact sales. Account Takeover Protection, Identity Threat Protection, Posture Management; pricing is not published.
AI Security modules: Contact sales. AI Governance, AI Agent Security, AI Employee Guardrails; pricing is not published.
Demo / proof of value: Request through sales. The vendor offers demos and proof-of-value evaluations; no public free plan was found.

No official pricing page exists on the pages read; the platform, homepage and Inbound Email Security pages show only Request a Demo, and a third-party listing (GetApp) shows no pricing info. The Cloud Terms of Service page redirected to another domain that could not be fetched, so contract and refund terms were not read. Confirm on the live pricing page or with sales.

Details checked October 2026 against the vendor's own pages. Prices and limits change, so confirm before you buy. Official pricing page ↗

Sources

This profile was compiled from these public pages. We have not run hands-on tests.

Summary

Abnormal AI — at a glance

Try Abnormal AI →

We couldn't find that tool

Abnormal AI

At a glance