Sublime Email Security Platform

I have been using Sublime Security  for four years. I have used Sublime Security  for phishing detection, malware detection where it detects malicious attachments, scripts, and links delivered through email, threat hunting which enables the security teams to proactively search historical emails for indicators of compromise, and automated response where it automatically quarantines malicious emails from user mailboxes.

I use Sublime Security for better detection of sophisticated phishing and business email compromise attacks and for faster investigation and response workflows.

Sublime Security has had a significant positive impact on my email security operations, improving my ability to detect sophisticated phishing, business email compromise, and malicious email campaigns that would have bypassed traditional email security, helping me respond faster to email-based threats, reducing operational overhead and improving collaboration.

I measure the impact of Sublime Security using a combination of SOC metrics and operational KPIs, and since deploying it, I have seen a reduction in mean time to investigate and respond because the platform automatically analyzes suspicious emails with context.

Based on my observation, Sublime Security has blocked approximately 20 to 30% more malicious emails compared to my previous email security solution, with significant improvements in detecting sophisticated phishing, business email compromises, and credential harvesting attacks that previously required manual investigation.

Sublime Security is primarily used as an email security platform focused on detecting, investigating, and preventing advanced email threats using a combination of artificial intelligence, behavioral analysis, threat intelligence, and a community detection engine to identify attacks that traditional secure email gateways may miss.

The best features Sublime Security offers include artificial intelligence-powered security agents and detection engineering, with its adaptive detection engine being one of the strongest capabilities as it adapts the detection coverage to my organization's email patterns instead of relying on a one-size-fits-all rule set.

I mainly depend on the artificial intelligence-powered security agents which include a security analyst and a detection engineer, and I mostly rely on automated remediation where it automatically quarantines malicious emails and deletes or moves the messages and adds warning banners.

The best features include the adaptive artificial intelligence-powered detection engine, autonomous email triage, advanced threat hunting, content grouping, and automated remediation which helps the security team reduce manual effort, investigate incidents faster, and improve overall email security posture.

The artificial intelligence agents do a good job of analyzing email content, sender behavior, authentication results, and threat intelligence to provide clear context and prioritize the risks, which improves analyst productivity, reduces investigation time, and accelerates the response to phishing and business email compromise attacks.

The Autonomous Detection Engineer has had a positive impact on my detection coverage by helping me identify new and evolving email threats much more quickly through continuously analyzing emerging attack patterns and generating new detection logic to improve coverage.

Sublime Security can be improved by expanding the integrations with additional SIEM , SOAR , and ITSM  platforms, making it easier to fit into diverse enterprise ecosystems, and overall there are enhancements rather than major shortcomings.

I would like to see more dashboard customization so different teams can tailor views and reporting to their needs, and alert tuning could also be more granular to further reduce false positives.

I did not give it a perfect rating because there are areas that can be improved such as dashboard customization and compliance reporting, as these are enhancements rather than major shortcomings. Overall, it is a highly reliable and effective email security solution that has strengthened my organization's security posture.

Overall, I am very satisfied with Sublime Security, but there are a few enhancements that would make it even better including more customizable dashboards and executive-level reporting to help different teams tailor the platform to their specific needs.

I have been working in my current field for five years.

Sublime Security is a very stable and reliable platform that consistently performs well in my production environment with continuous email monitoring and threat detection without any significant performance or availability issues.

Sublime Security is quite scalable. As my organization grows, I have been able to extend protection across additional mailboxes and business units without performance issues or increased operational complexity.

The customer support was quite good and they were very knowledgeable.

Before implementing Sublime Security, I relied primarily on Microsoft Defender for Office 365  as my email security solution, but I wanted stronger detection capabilities for advanced phishing, business email compromises, and targeted email attacks along with better investigation and threat hunting capabilities.

I was not involved in the pricing, setup, and cost and licensing, but the setup process was straightforward due to its API-based integration with Microsoft 365, requiring minimal changes to my existing email infrastructure and enabling quick monitoring and protection of my environment.

I have seen a positive return on the investment from Sublime Security through time savings, improved operational efficiency, and a stronger email security posture, having reduced email investigation and triage time by approximately 40 to 50% as the platform automatically analyzes suspicious emails.

Before selecting Sublime Security, I evaluated several email security solutions including Microsoft Defender for Office 365 , Proofpoint, Mimecast, Abnormal Security , and Ironscales, comparing them based on phishing and business email compromise detection capabilities, investigation workflows, threat hunting, deployment complexity, and overall ease of management.

My advice for others looking into using Sublime Security is to clearly define your email security objectives and involve both your security and IT teams early in the evaluation process to gain the most value when integrating with existing systems.

In order to use Sublime Security for Microsoft Office 365 , I have additional thoughts on how it can enhance email security. I am providing this review with an overall rating of 9.

My main use case for Sublime Security is to test how this product works, so I am using this for that purpose.

For a quick specific example of what I tested with Sublime Security, it detects the emails of the person on this side to check that feature, and there is a feature in Sublime Security that is detection as code, which is an excellent feature that I have noticed in this product. I am talking about eleven hundred, and that detection feature is something where I can explicitly customize mentions of power spam or non-structured email. With our custom permissions, we have it, and getting that notice by word blocking is something very important. It is a great feature that I have been using.

Regarding my main use case for testing Sublime Security, it is very good, and I fully specify that detection; it is something very extensive with maximum features.

The best features Sublime Security offers include detection as code, which gives a very powerful feature for users to write rules, custom objects, and the language provides some syntax that is definitely a good feature. The second one is why it detects spam emails or justifies why this is considered spam, which is the second most valuable feature.

I use the detection as code feature in my day-to-day life, which usually identifies junk emails and spam emails by default with the conditions and the vast dataset it has. Even if some emails may not get into that machine learning dataset, I can describe if it is from an external source and has rewards; I can remove it since it is considered spam. This feature changes the usual segregation and categorization, helping users not fall for known types of emails that the system may not detect. The explanation of justification, instead of just flagging something as spam, gives the user understanding such as, this is not a Google email; we really cannot click on it. It enhances user security, and even if another user sees this type of content based on gesture events for another email, they think not to use the image correctly.

Sublime Security has positively impacted my organization.

I would say there are very minimal changes needed regarding Sublime Security; for first-time users, it can be difficult knowing how to write the tool. Having some templates available would improve the experience.

My advice for others looking into using Sublime Security is that each edition would be helpful for initial users, and users should set templates in, which can be added; right now, I am not trying anything new, as this is cool.

I have been using Sublime Security for three months.

Sublime Security is stable; I confirm this.

I did switch to Sublime Security; it is part of my style of working.

Before choosing Sublime Security, I evaluated alternatives such as MyCast and Proofpoint, which I refused before finalizing on Sublime Security.

Phishing versus phishing detection is also something I find good, and I have mentioned these things already.

Since I have been using Sublime Security personally, I have noticed specific improvements like fewer spam emails and improved detection, which saves me time. It helps me segregate emails instead of reviewing all things manually, as it detects spam emails. I do not have to go through every email, which makes me very efficient for other tasks. It also shows if some emails are current, and if I am about to register or receive registration links, it tells me why those emails are separated. I understand better instead of reading all the emails, and it summarizes the words or thumbnails of the emails. If an email is considered good, I continue, making my time more efficient.

Regarding the AI capabilities of Sublime Security, I think for detection, using ML to analyze content is already a feature present in Sublime Security, which also identifies phishing attempts.

I think Sublime Security shows false positives. I give this review a rating of nine.

Our main use case is two-fold. Primarily, as a channel partner, our core focus is channel enablement. We actively pitch, demonstrate, and distribute Sublime Security to our partner network, who then deploy it for end-user organizations. Secondarily, we 'drink our own champagne' by running it internally to protect our own business communications.

When we position it to our partners, we frame it as an advanced email security platform. It goes far beyond traditional junk filtering by actively hunting the sophisticated threats that bypass native defenses—specifically Business Email Compromise (BEC), CEO fraud, invoice scams, fake login pages, and malware attachments.

As a distributor, the positive impact for us is measured by how well the product performs for our partners and their end-users. Sublime Security has been a major positive because it perfectly fits our criteria for 'best-in-breed' solutions. Specifically, it delivers strong ROI, saves employee time, and significantly reduces risk exposure by preventing expensive breaches. Because it checks all these boxes, we've been able to successfully enable our partners across all our regions to confidently take it to market.

Another major positive is its deployment model. In today's cybersecurity landscape, 'rip-and-replace' is a massive hurdle for buyers. Sublime works flawlessly with existing tools, enhancing a customer's current stack rather than forcing them to rebuild it.

The standout features of Sublime Security revolve around its ability to catch advanced threats that bypass native defenses. Specifically, it excels at blocking malware attachments and stopping Business Email Compromise (BEC), such as CEO fraud and invoice scams.

A major advantage is its fast time-to-value because it isn't a rip-and-replace solution. Instead, it acts as a 'smarter layer' that enhances existing protections like Microsoft 365 or Google Workspace. While native security catches the obvious junk, Sublime uses flexible, customizable detection logic to catch the highly sophisticated attacks that easily slip through standard filters.

Finally, the platform gives you deep visibility and fast search capabilities across all email activity. Without a tool like this, investigations take far too long, and teams lack visibility into what actually breached the inbox. Sublime solves this by offering rapid detection, automated response actions, and the ability to quickly remove malicious emails in bulk.

Based on the feedback we receive from our partners and their end-users, there are two main areas for improvement: the learning curve and pricing for smaller organizations. First, while the platform is incredibly powerful, it isn't simply 'plug-and-play.' Security teams need to invest time into learning the product to extract its full value.

Second, the cost can feel a bit steep for small-to-medium-sized businesses (SMBs). However, we always caveat this by looking at the ROI: a single breach could put a small company completely out of business. While the upfront cost might seem high to them, preventing just one catastrophic breach means the tool instantly pays for itself.

I have been using the solution for eighteen months.

On a scale of one to ten, I rate Sublime Security  a nine out of ten because I believe there are a couple of negatives regarding scalability for catering to enterprise and small to medium enterprises. Additionally, the product requires a learning phase, and it is not readily usable right away.

Sublime Security  merits this rating because of a couple of changes that need to be addressed. If it catered to both small and enterprise businesses on a pricing scale, it would receive a ten, but it is not far away.