Analyze human behavior to unpack who is accessing Box.

Despite the efficacy of Box Shield, attackers continue to gain access to the sensitive data housed by Box’s 97,000+ customers.
With a countless number of users, Box environments are highly complex and often not owned by security teams.
86% of security teams feel they are not sufficiently equipped to stop threats like account compromise in the cloud, potentially leaving Box wide open.
In order to protect the thousands of files your organization stores in Box, you need visibility. With an API integration with Box, Abnormal ingests and normalizes sign-in event data—analyzing rich telemetry related to Box access patterns and building a behavioral baseline of what “normal” Box sign-in behavior looks like.

When Abnormal detects suspicious deviations in how humans are accessing Box, behavioral AI automatically triggers and builds a Case with a contextual timeline of Box activity for each suspicious user. It then alerts the SOC to threats that may have otherwise gone unnoticed.


Easily integrate and ingest behavioral signals from multiple cloud applications and services, including Box, with cloud-native API architecture.

Explore sign-in activity, permissions, and admin roles for every human in your cloud environment, including Box, through comprehensive behavioral profiles.

Extend uniform protection from account takeovers across dozens of cloud applications and services, including Box.