Attune
The behavioral foundation model behind Abnormal's detection advantage, built at foundation-model scale.
derived behavioral signals used for model training1
of all malicious attack detections are powered by Attune 1.02
more unique attacks discovered compared to prior model generations per-week3
- 1Based on a snapshot of behavioral signals observed in production and used as model training data, with all personally identifiable information removed, captured over a five-month period (August–December 2025).
- 2Based on human-reviewed samples from discordant model analysis and system-wide telemetry, comparing the safe-mail false-positive rate of Attune 1.0 against Abnormal's previous-generation model.
- 3Based on a one-week, head-to-head comparison of Attune 1.0 against Abnormal's previous-generation model, using discordant-set analysis to identify attacks caught by one model but missed by the other.
Detection Built to Understand What's Normal
Attackers aren't breaking in; they're blending in. Attune continuously updates its understanding of normal behavior, so new attack variants don't require new rules to catch.
Built for the Era of Generative AI Attacks
Most security AI evaluates signals independently, missing risk hidden inside normal-looking communication. Attune learns identity, behavior, and content jointly—revealing subtle impersonation, multi-message campaigns, and unfamiliar attack variants that isolated systems overlook.
Efficacy by Default. No Tuning Required.
Attune powers the majority of detections across the Abnormal Platform today. Protection works by default—no custom rules, manual tuning, or prior attack exposure required. As attackers evolve, detection adapts automatically across customers.
Precision You Can Trust
Joint learning across identity, behavior, content, and threat intelligence makes risk clear and consistent. Small deviations in tone, relationships, or workflow become visible—reducing false positives, accelerating investigations, and eliminating guesswork in automated decisions.
From the Blog
Abnormal AI Releases Behavioral Foundation Model for Modern Threat Defense
See how Attune brings foundation-model scale to behavioral threat detection across the Abnormal Platform.
Customer Voice
What Security Leaders Say
“Abnormal's automation gives our analysts time back to work on other projects, and the fact that it's API-based gives us flexibility to tie in other applications and their data.”
John Roeser
Senior Manager, Information Security, Domino's
“Our goals are to get away from being so reliant on human judgment and leverage AI to be proactive. Abnormal helps us with those goals.”
Corey Kaemming
Senior Director, Information Security, Valvoline
Abnormal powers over 4,500 customers, including over 25% of the Fortune 500.
See Attune in Action
Get a personalized demo of the behavioral foundation model behind Abnormal's detection advantage.