We Protect Organizations From

the Attacks That Matter Most

Modern Email Security for Microsoft 365 and Google Workspace

Abnormal Overview: An Exponential Increase in Modern Email Attacks

Cloud-native email security Modern attacks, including business email compromise, supply chain
platform that stops all modern fraud, and ransomware, are on the rise. According to the FBI, business
email attacks email compromise alone accounted for 44% of all cybercrime losses
in 2020, and that number is only growing as threat actors become
more effective.
Protects Fortune 100 companies;
largest deployment is 600,000
mailboxes
Modern Attacks Evade Secure Email Gateways
Traditional defenses rely on conventional threat intelligence and known
Strategic Microsoft partnership
bad indicators to block email threats. Modern attacks bypass secure
email gateways because they come from trusted sources and do not
contain malicious links or attachments.

You Need a Modern Approach to Email Security

Key Differentiators:
Abnormal provides a fundamentally-different approach that precisely
Precisely blocks all email attacks blocks all email attacks. Our modern, cloud-native API architecture
using behavioral AI
continuously baselines known good behavior by leveraging identity,
behavior, and content to detect and remediate anomalies.
Protects you from internal and
external compromised accounts

Why You Should Care?

Deploys in minutes via API;

10x 3x 2x
no configuration needed

Simplifies email security more effective solution fewer attacks faster threat
for email security get through response time

4.9
for 72 reviews on Gartner Peer
Insights™ as of 25 Nov. 2021
Read all reviews

“Email security is broken. “Say goodbye to underperforming “Securing the email

Abnormal is the fix.” secure email gateways.” channel within seconds.”

2022 Gartner, Inc. The Gartner Peer Insights Logo is a trademark and service mark of Gartner, Inc., and/or its affiliates,
© 2022and is used herein
Abnormal with Corporation.
Security permission. All All
rights reserved.
rights Gartner Peer
reserved. 1
Insights reviews constitute the subjective opinions of individual end users based on their own experiences and do not represent the views of Gartner or its affiliates.
We Protect Organizations From
the Attacks That Matter Most

Supply Chain Compromise Executive Impersonation

There’s an 82% chance of your organization being 29% of all socially-engineered attacks are a result
targeted by a supply chain attack this week. These of impersonation. These emails slip by secure email
attacks evade secure email gateways because they gateways because they are often text-based and
come from trusted senders whose accounts have rarely contain links or attachments.
been compromised.

How Abnormal Stops It: How Abnormal Stops It:

Automatically knows your vendors Inspects email headers to expose impersonations
Abnormal’s VendorBase auto-identifies suppliers, vendors, By analyzing header information, Abnormal can determine
and partners based upon past email communications when an email domain has been spoofed.
and other signals gathered across the entire enterprise
ecosystem.
Detects suspicious language, tone, and style Even when
messages contain no links or attachments, Abnormal
Continuously assesses vendor risk and reputation
recognizes language that is typical of phishing attacks.
We assign a risk score for each vendor based on domains
spoofed, accounts compromised, and suspicious business. Understands communication patterns
Abnormal uses natural language processing to
Inspects content, tone, and attachments
understand people, their behavior, their communication
Abnormal inspects emails and attachments for suspicious patterns, and typical tone and content shared.
information and identifies when a vendor has been
compromised.

Account Takeover Ransomware

26% of companies are targeted by account takeover 76% of ransomware is delivered via email. Secure
attacks each week. When successful, threat actors email gateways often miss these attacks when
receive access to sensitive information and can attackers combine social engineering with their
use these compromised accounts to launch further ransomware schemes.
attacks.

How Abnormal Stops It: How Abnormal Stops It:

Detects compromised accounts Detects suspicious correspondence patterns
By understanding and baselining normal login frequency, and credential phishing attempts
locations, devices, browsers, and IP addresses, Abnormal Abnormal uses identity detection and natural language
can determine when an account has been compromised. processing to detect phishing attempts and other
suspicious emails.
Disarms takeovers automatically
Logs users out of active sessions, requires password resets, Blocks malicious attachments and links
and helps affected users regain access. The platform reviews all attachments and links to ensure
they are safe, even if those links redirect upon click.
Provides incident management and reporting
Allows teams to streamline remediation via integrations Provides explainable insights and malware
forensics to security teams
with IAM, SIEM, and SOAR tools.
Abnormal automatically prepares a detailed analysis of
ransomware attempts, allowing teams to preview the
content of attachments and link targets.

See a Demo Now: abnormalsecurity.com/demo

© 2022 Abnormal Security Corporation. All rights reserved. 2