Review Summary
Users like Abnormal Behavior Platform for its intuitive interface, highly effective AI-driven detection of sophistic ...
Users like Abnormal Behavior Platform for its intuitive interface, highly effective AI-driven detection of sophistic ...
Abnormal is a company aimed at safeguarding against a variety of cyber threats, covering a broad scope from phishing and malware to ransomware. It also protects from social engineering, executive impersonation, and even supply chain compromise. Abnormal further guards against internal account compromise as well as spam and graymail, ensuring cyber security across multiple fronts.
Do You Manage Peer Insights at Abnormal AI?
Access Vendor Portal to update and manage your profile.
I really like just how simple it is to use the product. My team isn't constantly in the system needing to make changes or tweaks, it's largely autonomous. This has been a huge win for my team as we've had a lot more time to work on more pressing projects. I also like that they seem to be constantly iterating and improving. They're constantly releasing new features or making updates to the platform, and they seem to be very well planned and executed from my perspective. I've found their support team as well as their account managers to be very approachable and responsive, and they've been extremely helpful on the handful of occasions we've run into an issue or had a question.
The user interface is intuitive, unlike previous email security tools I have used, and the feedback for missed detections or false-positives is usually within twenty four hours.
Provides functionality we weren't seeing from Defender. Graymail filter is a huge time saver for all of our company staff. Vendor Fraud is reflected in incidents before or as they are being seen and is used as a confirmation tool. Further to this, Abnormal now includes a Phishing Coach AI tool that we are now using to replace our existing product at a very large savings in making the move. Using AI, the training phish that is now being sent to users is customized and tailored to the specific user and job function. No longer are we sending training phishing that is finance related in nature to mechanics / millwrights or other staff that would never receive an email such as that in the first place therefore never falling for it or learning from the exercise. Now the phishing that is being sent is pertinent to the users role within the company making the training that much more valuable to us.
One thing that I think could be improved upon is the reporting. The built-in reports tend to be pretty high level, which is great when I'm showcasing to senior leadership or just need a quick overview of what's going on. However, I'd like a bit more granular detail when I want to really dig into a threat for an investigation, which I'll admit does not happen nearly as often as it used to. Another thing that is a bit of a challenge is that we're currently in a hybrid deployment so some of the automated remediations that Abnormal is able to perform if an account becomes compromised, we're not able to fully utilize due to the nature of how the product integrates. It would be nice if they deployed an on-prem connector for AD so that the on-prem accounts can be disabled when threats are detected. I think the stuff that they're doing with the AI training is really good, however the platform lacks some of the features that we would need for our business to embrace it as a replacement for our current platform. I'd like to see the ability to run scheduled sims and training.
It's not always clear that any real improvements have been made following false-positives. There are also a significant number of false-positives, but this is common with these kinds of tools. The account takeover solution doesn't seem to offer the best protection but compliments other controls well.
I know I am being asked to provide three weaknesses, but at this time I am unable to provide any as I have yet to encounter an issue that hasn't been resolved through support. There have been a few items of note where support has been asked for such as if we the customer are able to selectively mark a vendor as a higher risk, for which we were informed that a feature request was being made on our behalf. Vendor has been truly amazing to work with. Update a year later and I still have zero complaints nor can I find an issue with either the product or the vendor. I am very pleased with Abnormal thus far.