Abnormal AI Extends Its Email Security Platform Across Inbound, Outbound, and Human Layers of Email Risk
New capabilities add customizable detection controls, outbound data-loss prevention, and adaptive phishing-simulation training to Abnormal's email security platform.
LAS VEGAS, August 26, 2026--Abnormal AI, the AI-native behavior security company trusted by more than 25% of the Fortune 5001, today announced an expansion of its email security platform with three new capabilities: Control Center, Email DLP Rules, and AI Phishing Coach upgrades. Together, the launch extends Abnormal's behavioral AI across all three surfaces of email risk: what comes into the inbox, what leaves the organization, and how people are trained to recognize an attack.
Attackers have changed the economics of cybercrime. Generative AI now lets them research targets, write convincing messages, and shift tactics faster than signature-based defenses can track. The most effective attacks no longer carry obvious malware or suspicious domains; they look like normal business activity until the behavior gives them away. Abnormal learns how organizations normally communicate, then identifies the moment that pattern breaks.
"The role of email security is expanding," said Evan Reiser, CEO and Co-founder of Abnormal AI. "Organizations still need to stop sophisticated inbound attacks, but they're increasingly looking to the same platform to address outbound data loss, employee phishing risk, and greater control over automated detection. Securing email now means addressing risk from multiple directions: the threats coming in, the sensitive information going out, and the people attackers continue to target. These new capabilities expand how Abnormal helps organizations manage that risk."
Control Center layers optional control on top of Abnormal's detection engine without introducing code or complexity. It also lets teams create custom detection models and rules tailored to their organization, without writing code. Control Center shows which layer (the core behavioral AI, a custom model, or a custom rule) made each decision, so security teams can investigate faster and explain automated decisions in the context of their own policies.
Email DLP Rules combine explicit outbound policy controls (built with regex, phrase matching, metadata conditions, Boolean logic, and exclusions) with contextual review from an AI Triage Agent. The agent evaluates a rule's intent, the sender, and the surrounding message context, then auto-releases benign messages and quarantines likely violations while recording every verdict in an outbound log for audit visibility. It is designed to give organizations a practical way to enforce outbound policy without taking on the manual review burden that many DLP deployments create at scale.