Abnormal AI

Darktrace / Email is a security platform that utilizes self-learning AI to establish a baseline of "normal" behavior for every user and correspondent within an organization. By analyzing the unique context and intent of communications, the system identifies and blocks anomalous activity such as spear-phishing, account takeovers, and social engineering. The software monitors inbound, outbound, and lateral internal mail to detect sensitive data loss and insider threats without relying on traditional threat intelligence feeds or static rules. It also provides autonomous response capabilities, such as quarantining suspicious messages or providing real-time contextual warnings to end users.

Sophos Email is a cloud-native security solution that utilizes over 20 AI and machine learning models, including natural language processing, to block phishing and business email compromise attacks. The platform provides multi-layered protection through sandboxing, URL analysis, and sender authentication protocols like SPF, DKIM, and DMARC. It also features integrated data loss prevention and encryption to secure sensitive information and ensure compliance across inbound and outbound messages. Additionally, the software integrates with the Sophos MDR and XDR ecosystem, allowing security teams to manage email threats alongside endpoint and network data from a single management console.

Proofpoint Core Email Protection is a security platform that filters inbound and outbound email to identify and block threats such as phishing, malware, and business email compromise. The system utilizes machine learning and behavioral analysis to inspect message headers, content, and attachments for anomalies and malicious intent. It provides flexible deployment options through either an API-based integration or a secure email gateway to monitor internal and external communications. Additionally, the software includes automated quarantine and remediation features to remove harmful messages from user inboxes after delivery.