Introducing Abnormal’s Biggest Product Release Yet
The world has changed. AI is reshaping industries and redefining cybersecurity. Attackers are leveraging AI to execute cybercrime at an unprecedented scale.
Abnormal’s goal is to become the most trusted AI application in cybersecurity. To do that, we’re not just creating the Abnormal Behavior Platform to protect people with AI. We’re also utilizing AI throughout our internal operations to deliver more customer value faster.
Over the last year, we've rebuilt our product development process entirely around AI. The results speak for themselves; this year's spring product release contains twice as many new features as last year's did.
I’m excited to share what we’re launching today. In this post, you'll learn about:
Our new product: AI Phishing Coach
AI Data Analyst, a free data analysis agent available to all customers
Three free upgrades to our Cloud Email Security platform
An update on global expansion, FedRAMP Moderate Authorization
A preview of new products coming soon
Stay tuned throughout the week for deep dives into each new capability.
1. AI Phishing Coach
New Product, Generally Available today

Problem
Traditional security awareness training is one-size-fits-none. It uses generic, synthetic content and is tedious to administer. As a result of this legacy approach, employees remain ill-prepared for real attacks.
Solution
AI Phishing Coach, Generally Available starting today, gives every organization an agentic AI security trainer with superhuman knowledge of the attacks that target your organization.
Where traditional security awareness training is generic, Abnormal’s approach is personalized. To achieve this personalization, AI Phishing Coach leverages Abnormal’s unique behavioral data and the actual attacks we identify and block through Inbound Email Security. We defang these real attacks and turn them into hyper-personalized phishing simulations, so, for example, an employee in your finance department may receive an invoice fraud attack, or an employee in sales may see a DocuSign impersonation. For company-wide training, we use AI to produce personalized annual training videos customized to each organization’s threat landscape, industry, and compliance needs.
Where traditional security awareness training requires extensive manual customization, Abnormal’s approach administers training autonomously. This means administrators no longer need to customize training courses or sort through thousands of templates for each group of users. They install in seconds, prompt the AI Phishing Coach with guidance, and the coaching begins.
Customer Benefits
Increases training effectiveness with hyper-personalized and timely education
Reduces SOC workload by eliminating the need for manual campaign design
Autonomously administers ongoing training with minimal ongoing management
Getting Started
AI Phishing Coach is now available as a new add-on module to Inbound Email Security. Request a demo and learn more here.
2. AI Data Analyst
Free capability, generally available to all Abnormal customers today
Problem
Security leaders are constantly asked to translate technical risk for non-technical audiences and justify technology investments to the business. Manually searching dashboards for insights or waiting for quarterly vendor reviews wastes valuable time.
Solution
Meet your new AI Data Analyst, an always-on AI agent that auto-generates insightful executive reports and answers security questions – just in time for that meeting with your manager.
Now when you want insights about the threat landscape or your Abnormal products, you can email Abby, Abnormal’s AI concierge.
Ask Abby questions, like, “What were our top threats this quarter?” “How many phishing attacks did we stop last month?” and “What ransomware trends should the board be aware of?” You’ll receive tailored executive reports summarizing interesting email attacks, funnel metrics, and benchmarks; interactive decks highlighting your activity and trends; and natural language follow-ups to explore related inquiries.
We do not use your conversations with the AI Data Analyst to train or improve our LLMs.
Customer Benefits
Saves hours each quarter with exec and board-ready reports
Translates complex detection data into clear, consumable insights for the business
Delivers personalized intelligence tailored to your security environment and objectives
Getting Started
AI Data Analyst is free for all Abnormal customers. Get started by emailing Abby or heading to the Reports tab in your Abnormal Portal to view your first report today.
3. More Comprehensive Cloud Email Security
Three free upgrades, generally available to all Abnormal customers today
All of these new AI products are cool. But what about the core email security platform that customers know and trust us for? Our relentless focus on detection efficacy means we're constantly improving our ability to identify and neutralize sophisticated email attacks.
The superior detection efficacy of our platform is a major reason why over 75% of our customers choose not to use a third-party SEG and have consolidated on Abnormal and their Cloud Email provider.
But what about the other 25% who still use a third-party SEG? Some told us they didn’t feel ready to make a transition. They asked for a handful of features that would give them more granular controls and more visibility.
I'm excited to introduce Quarantine Release, Enterprise Remediation Settings, and URL Rewriting, three upgrades to our core Email Security platform delivered at absolutely no cost.
Quarantine Release brings Microsoft-quarantined emails into Abnormal’s SOC platform for review and response.
Enterprise Remediation Settings lets administrators fine-tune remediation actions for different threat types.
URL Rewriting rewrites potentially suspicious links and warns users before they proceed, engaging users to use their best judgment.
Customer Benefits
Provides greater email remediation flexibility to align with company risk tolerance
Reduces response times by unifying Microsoft and Abnormal quarantines
Engages users to check before they click with optional URL rewriting and click tracking
Getting Started
URL Rewriting, Quarantine Release, and Enterprise Remediation Settings are now available to all customers on an opt-in basis. Visit the Abnormal Portal or contact your customer representative to enable them.
4. But wait… there’s more.
More places
We've also recently expanded our operations into Germany, with Japan and France coming later this fiscal year. As we expand, our platform is being tuned for the nuances and language needs of each market. Earlier this month, Abnormal announced that we achieved FedRAMP Moderate Authorization in just 256 days, putting us among the fastest security companies to earn this prestigious certification. Federal agencies can now deploy Abnormal with confidence, and we're already working to extend this protection to state and local governments through GovRAMP.
More trust
We've made significant investments in our security and compliance program to meet the highest standards in the industry.
We're proud to announce that we've achieved ISO 27701 certification for privacy, demonstrating our commitment to protecting sensitive data. We are currently working toward ISO 42001 certifications for AI governance by the end of this year, positioning us at the forefront of responsible AI deployment in security.
More products (coming soon)
Misdirected Email Prevention: That sinking feeling when you realize you've sent sensitive information to the wrong person. Our behavioral AI will flag these outbound risks before delivery, giving end users a crucial second chance to review.
Email Security Posture Management, Enhanced: We've completely overhauled our solution to give customers an instant posture score and continuously hunt for Microsoft 365 misconfigurations—like forgotten forwarding rules and dormant admin accounts—while providing step-by-step remediation guidance.
See Abnormal in Action
As I hope you can see from this blog, Abnormal is just getting started on our mission to protect people with Behavioral AI.
It’s exciting to see how quickly our engineering teams are working to improve our platform. But the most rewarding part isn't just building quickly. It's using AI to protect what matters most: the humans targeted by increasingly sophisticated attacks.
That mission has never been more urgent, and we've never been better equipped to deliver on it.
To learn more, request a demo or visit us at Hotel Zelos this week at RSA.