About
Sublime Security analyses email content, senders, links and attachments to detect phishing, business email compromise, malware and policy violations. It connects with Microsoft 365, Google Workspace and compatible IMAP systems. Deployment can use APIs without changing mail flow, or inline protection where that model is required.
Read full overview
Built-in and community detections provide baseline protection. Security teams can add organisation-specific rules in Message Query Language, test them against historical messages and manage feeds through Git repositories. Search, investigation and remediation tools support incident handling, while AI agents assist with message triage and detection engineering.
Core includes the first 100 mailboxes free; Enterprise adds broader controls, automation and support. Standard Core actions include moving mail to spam or trash, while Enterprise provides quarantine and further response options. Managed, dedicated and self-managed deployments are available. The separate EML Analyzer allows examination of individual email files without deploying the complete platform.
Published customer stories include Snowflake, Coronis Health and Elastic.
