Sublime Email Security Platform

I have been using Sublime Security  for four years. I have used Sublime Security  for phishing detection, malware detection where it detects malicious attachments, scripts, and links delivered through email, threat hunting which enables the security teams to proactively search historical emails for indicators of compromise, and automated response where it automatically quarantines malicious emails from user mailboxes.

I use Sublime Security for better detection of sophisticated phishing and business email compromise attacks and for faster investigation and response workflows.

Sublime Security has had a significant positive impact on my email security operations, improving my ability to detect sophisticated phishing, business email compromise, and malicious email campaigns that would have bypassed traditional email security, helping me respond faster to email-based threats, reducing operational overhead and improving collaboration.

I measure the impact of Sublime Security using a combination of SOC metrics and operational KPIs, and since deploying it, I have seen a reduction in mean time to investigate and respond because the platform automatically analyzes suspicious emails with context.

Based on my observation, Sublime Security has blocked approximately 20 to 30% more malicious emails compared to my previous email security solution, with significant improvements in detecting sophisticated phishing, business email compromises, and credential harvesting attacks that previously required manual investigation.

Sublime Security is primarily used as an email security platform focused on detecting, investigating, and preventing advanced email threats using a combination of artificial intelligence, behavioral analysis, threat intelligence, and a community detection engine to identify attacks that traditional secure email gateways may miss.

The best features Sublime Security offers include artificial intelligence-powered security agents and detection engineering, with its adaptive detection engine being one of the strongest capabilities as it adapts the detection coverage to my organization's email patterns instead of relying on a one-size-fits-all rule set.

I mainly depend on the artificial intelligence-powered security agents which include a security analyst and a detection engineer, and I mostly rely on automated remediation where it automatically quarantines malicious emails and deletes or moves the messages and adds warning banners.

The best features include the adaptive artificial intelligence-powered detection engine, autonomous email triage, advanced threat hunting, content grouping, and automated remediation which helps the security team reduce manual effort, investigate incidents faster, and improve overall email security posture.

The artificial intelligence agents do a good job of analyzing email content, sender behavior, authentication results, and threat intelligence to provide clear context and prioritize the risks, which improves analyst productivity, reduces investigation time, and accelerates the response to phishing and business email compromise attacks.

The Autonomous Detection Engineer has had a positive impact on my detection coverage by helping me identify new and evolving email threats much more quickly through continuously analyzing emerging attack patterns and generating new detection logic to improve coverage.

Sublime Security can be improved by expanding the integrations with additional SIEM , SOAR , and ITSM  platforms, making it easier to fit into diverse enterprise ecosystems, and overall there are enhancements rather than major shortcomings.

I would like to see more dashboard customization so different teams can tailor views and reporting to their needs, and alert tuning could also be more granular to further reduce false positives.

I did not give it a perfect rating because there are areas that can be improved such as dashboard customization and compliance reporting, as these are enhancements rather than major shortcomings. Overall, it is a highly reliable and effective email security solution that has strengthened my organization's security posture.

Overall, I am very satisfied with Sublime Security, but there are a few enhancements that would make it even better including more customizable dashboards and executive-level reporting to help different teams tailor the platform to their specific needs.

I have been working in my current field for five years.

Sublime Security is a very stable and reliable platform that consistently performs well in my production environment with continuous email monitoring and threat detection without any significant performance or availability issues.

Sublime Security is quite scalable. As my organization grows, I have been able to extend protection across additional mailboxes and business units without performance issues or increased operational complexity.

The customer support was quite good and they were very knowledgeable.

Before implementing Sublime Security, I relied primarily on Microsoft Defender for Office 365  as my email security solution, but I wanted stronger detection capabilities for advanced phishing, business email compromises, and targeted email attacks along with better investigation and threat hunting capabilities.

I was not involved in the pricing, setup, and cost and licensing, but the setup process was straightforward due to its API-based integration with Microsoft 365, requiring minimal changes to my existing email infrastructure and enabling quick monitoring and protection of my environment.

I have seen a positive return on the investment from Sublime Security through time savings, improved operational efficiency, and a stronger email security posture, having reduced email investigation and triage time by approximately 40 to 50% as the platform automatically analyzes suspicious emails.

Before selecting Sublime Security, I evaluated several email security solutions including Microsoft Defender for Office 365 , Proofpoint, Mimecast, Abnormal Security , and Ironscales, comparing them based on phishing and business email compromise detection capabilities, investigation workflows, threat hunting, deployment complexity, and overall ease of management.

My advice for others looking into using Sublime Security is to clearly define your email security objectives and involve both your security and IT teams early in the evaluation process to gain the most value when integrating with existing systems.

In order to use Sublime Security for Microsoft Office 365 , I have additional thoughts on how it can enhance email security. I am providing this review with an overall rating of 9.

I currently use Sublime Security  to restrict phishing campaigns occurring in my organization, as it detects suspicious indicators such as domain impersonation, automatically flags, and remediates those messages before user interaction. To restrict user interaction, I use Sublime Security  here.

My organization specializes in email-related security, so we exclusively use Sublime Security without using Microsoft Defender.

What I like the most about Sublime Security is that it automatically analyzes and remediates suspicious emails reported by the AI agents, allowing security teams to write custom organization-specific policies according to their needs. It converts threat handles into automatic decisions, uses MQL, and monitors and blocks outbound email containing sensitive information or user data, helping organizations prevent leaks related to email.

One issue I dislike about Sublime Security is that it requires expertise in MQL, which took my organization almost two months to learn. I initially took help from a vendor but later needed customization, meaning I had to learn the MQL language myself, which was challenging since none of my five to six engineers knew how it worked beforehand. Additionally, while Sublime Security mainly focuses on email defense systems, it does not protect other tools like Microsoft Teams , OneDrive, or Zoom. It would be beneficial if it could be used for other tools configured with emails. I also found limitations in its integration with specialized tools, requiring customized API solutions for end-to-end data capture.

I have been using Sublime Security for the last eight months, and it is a one-time configuration, so I do not need to use it again and again. I simply enjoy its automation directly.

Regarding stability, I can say that I have not faced any lagging, crashing, or downtime issues, so I would score it full marks since there have been no problems until now.

Concerning scalability, I am getting a large volume of emails daily, around one thousand to one thousand five hundred per mailbox, indicating that it has good scalability since I have not encountered any issues.

I contacted technical support because there were some emails that could not be identified due to phishing. I contacted the team and learned that I missed some configurations on my end. The technical team helped me greatly, and since then, I have not faced any issues. I need to take care during configuration, refer to their documentation, and ensure everything is set up correctly to avoid future problems.

Since I contacted support only once and it was helpful, I would give them a score of ten out of ten.

I cannot provide specifics about other systems I have used before, but I can say that I have encountered approximately forty to sixty phishing emails so far. These include suspicious messages related to financial matters and promotions which Sublime Security has successfully detected to prevent interactions.

The initial deployment of Sublime Security was moderate; it was neither particularly difficult nor easy. It was configured by my vendor team and required some MQL expertise alongside some custom API configuration.

In terms of maintenance, it requires an annual subscription per mailbox if I want to purchase it at once. If there are no issues, I do not think annual maintenance costs should be necessary since there are no major issues (P1, P2) with Sublime Security.

I have not used any alternatives, but there is Microsoft Defender, which is an inbuilt tool for Microsoft.

In terms of transparency, Sublime Security provides the correct information I require. It also offers usable data and additional solutions for configuration to avoid potential issues, which I appreciate. The transparency is particularly good in terms of knowledge.

It is very important for my organization that Sublime Security offers reduced vendor dependency when deploying new protections, especially to mitigate phishing risks since I am a security organization. I do not want to face any vulnerabilities, security breaches, or risks related to email, given its central role in my daily interactions. I see Sublime Security as a very important tool that allows me to work without fear of breaches.

I have installed only one AI agent, ASA , which stands for Autonomous Security Analyst. This agent analyzes and remediates dangerous or suspicious emails reported from other mails. So far, I have only used ASA , which has been incredibly helpful, but I am not sure about other AI agents since ASA has been my only implementation.

Regarding the impact of the autonomous detection engineer on my environment's detection coverage, I have not faced any issues, so I cannot comment on its impact at this time.

I would give Sublime Security an overall review rating of nine out of ten.

My main use case for Sublime Security  is email security, as it provides an AI-powered email security platform designed to manage all the emails coming to the organization, which is comparable to other email security tools available, allowing us to detect phishing attacks using different rules.

Regarding my main use case for Sublime Security , we mainly use it as an email security tool, which is customizable with detection logics and automation capabilities that help us understand why emails are flagged, enabling organization-specific detections.

The best features of Sublime Security include its seamless integration with Microsoft 365, which can be set up easily within three to four hours, the built-in detection rules that are effective against phishing, and its ability to reduce false positives compared to Microsoft Defender.

The customization and threat hunting features of Sublime Security have helped my team by allowing us to create specific detection rules for quarantined emails and alerting SOC analysts automatically, and one notable instance involved identifying a compromised user through flagged suspicious alerts.

Sublime Security positively impacts my organization with AI-driven detection that reduces false positives and improves alert severity, providing timely notifications to the SOC analyst if any interaction occurs after clicking a potentially malicious link.

To improve Sublime Security, I would appreciate better reporting capabilities, as the current reports are too high-level for regular SOC operations.

Apart from reporting, everything else about Sublime Security is impressive.

I have been using Sublime Security for more than around 1.5 years.

Sublime Security is stable, with minimal maintenance times and high reliability, experiencing very few downtimes.

Sublime Security's scalability is impressive, accommodating organizations of various sizes and capable of handling growth effortlessly.

I raised multiple support cases regarding report availability, and they have been very responsive, showing a commitment to resolving issues.

I would rate the customer support a 9.5.

I have exclusively used Sublime Security for this customer, but I have used Avanan  and Microsoft Defender for others, and I find Sublime Security to be one of the best tools for email security.

The best features of Sublime Security include its seamless integration with Microsoft 365, which can be set up easily within three to four hours.

We are customers of Sublime Security, without any other business relationship.

While quantifying return on investment is challenging, Sublime Security has helped my team by avoiding multiple false positives and facilitating better investigations.

My experience with pricing, setup cost, and licensing is limited, but I noticed that Sublime Security was slightly more expensive than Avanan  or Defender, as Defender comes included with other Microsoft products, but I believe Sublime Security is value for money.

Before choosing Sublime Security, we evaluated Avanan and Defender 365, but clients opted for Sublime Security due to its superior detection rules and customer support.

If pricing is not an issue, I advise others to go for Sublime Security.

Reduced vendor dependency in deploying new protections with Sublime Security matters to us as it enhances email classification and security alerts, aiding in the detection of subtle threats.

The impact of Autonomous Detection Engineer (ADA) on our detection coverage has been significant, blocking over 1,500 to 1,800 emails classified mostly as spear-phishing targeting VIP users.

As for the AI agents, we have not fully utilized their capabilities yet, relying more on improving detection rules and email classification.

I rate this product a 9 overall.

My main use case for Sublime Security is to test how this product works, so I am using this for that purpose.

For a quick specific example of what I tested with Sublime Security, it detects the emails of the person on this side to check that feature, and there is a feature in Sublime Security that is detection as code, which is an excellent feature that I have noticed in this product. I am talking about eleven hundred, and that detection feature is something where I can explicitly customize mentions of power spam or non-structured email. With our custom permissions, we have it, and getting that notice by word blocking is something very important. It is a great feature that I have been using.

Regarding my main use case for testing Sublime Security, it is very good, and I fully specify that detection; it is something very extensive with maximum features.

The best features Sublime Security offers include detection as code, which gives a very powerful feature for users to write rules, custom objects, and the language provides some syntax that is definitely a good feature. The second one is why it detects spam emails or justifies why this is considered spam, which is the second most valuable feature.

I use the detection as code feature in my day-to-day life, which usually identifies junk emails and spam emails by default with the conditions and the vast dataset it has. Even if some emails may not get into that machine learning dataset, I can describe if it is from an external source and has rewards; I can remove it since it is considered spam. This feature changes the usual segregation and categorization, helping users not fall for known types of emails that the system may not detect. The explanation of justification, instead of just flagging something as spam, gives the user understanding such as, this is not a Google email; we really cannot click on it. It enhances user security, and even if another user sees this type of content based on gesture events for another email, they think not to use the image correctly.

Sublime Security has positively impacted my organization.

I would say there are very minimal changes needed regarding Sublime Security; for first-time users, it can be difficult knowing how to write the tool. Having some templates available would improve the experience.

My advice for others looking into using Sublime Security is that each edition would be helpful for initial users, and users should set templates in, which can be added; right now, I am not trying anything new, as this is cool.

I have been using Sublime Security for three months.

Sublime Security is stable; I confirm this.

I did switch to Sublime Security; it is part of my style of working.

Before choosing Sublime Security, I evaluated alternatives such as MyCast and Proofpoint, which I refused before finalizing on Sublime Security.

Phishing versus phishing detection is also something I find good, and I have mentioned these things already.

Since I have been using Sublime Security personally, I have noticed specific improvements like fewer spam emails and improved detection, which saves me time. It helps me segregate emails instead of reviewing all things manually, as it detects spam emails. I do not have to go through every email, which makes me very efficient for other tasks. It also shows if some emails are current, and if I am about to register or receive registration links, it tells me why those emails are separated. I understand better instead of reading all the emails, and it summarizes the words or thumbnails of the emails. If an email is considered good, I continue, making my time more efficient.

Regarding the AI capabilities of Sublime Security, I think for detection, using ML to analyze content is already a feature present in Sublime Security, which also identifies phishing attempts.

I think Sublime Security shows false positives. I give this review a rating of nine.