Abnormal AI

How Abnormal reads the inbox

Abnormal connects to Microsoft 365 or Google Workspace through the vendors' APIs and inspects messages inside employees' mailboxes. It builds a baseline of how each employee and supplier normally communicates and flags messages that break the pattern, such as a familiar vendor suddenly asking to change bank details.¹ The company describes the same approach for more than a dozen cloud and SaaS applications, including Workday, Salesforce, ServiceNow, Slack and Amazon Web Services.¹

Because it connects by API, a pilot can run beside an existing gateway. For most customers Abnormal is an added layer, and it is most useful where the existing filter already handles bulk spam and malware but misses socially engineered messages with no malicious link or attachment.

What public contracts show about cost

Abnormal does not publish a rate card and sells per mailbox by quote. Two public procurement records show what agencies pay. In March 2026, the Hampton Roads Sanitation District in Virginia approved $75,590 for one year of 1,050 Inbound Email Security licenses bundled with account takeover protection, Abnormal's AI security mailbox and its email productivity module, or about $72 per mailbox for that bundle.⁶ A price proposal on Florida's state contract sets a ceiling of $40.48 per mailbox for Inbound Email Security alone at 150 to 2,999 mailboxes, falling to $26.28 at 3,000 to 9,999, with a $25,000 minimum first order and no charge for initial implementation.⁷

Funding, revenue and customers

Evan Reiser and Sanjay Jeyakumar founded the company in 2018, after building TellApart, which Twitter acquired.² In August 2024 Abnormal raised a $250 million Series D at a $5.1 billion valuation, led by Wellington Management with Greylock, Menlo Ventures, Insight Partners and CrowdStrike's Falcon Fund participating, which brought total funding to $546 million.¹

CNBC's 2025 Disruptor 50 profile reported more than 3,000 customers across 35 countries and headcount above 1,000, and listed the headquarters as Las Vegas.³ In January 2025 the company hired former ServiceNow finance executive Lisa Banks as CFO, and she told CNBC that about a year and a half should be enough to prepare for an IPO.⁴ The homepage now says more than 5,000 organizations use the product.⁵ In a current job posting, Abnormal says it closed its 2026 fiscal year with roughly $380 million in annual recurring revenue, up about 50% from a year earlier, and that more than 30% of the Fortune 500 are customers.⁸ The company has since rebranded from Abnormal Security to Abnormal AI.

Gateways and other API vendors

CNBC frames the competition as the long-standing secure email gateway vendors, Mimecast and Proofpoint.⁴ Abnormal's pitch against them is API deployment and behavior modeling. IRONSCALES, another API-based email security vendor, aims at smaller organizations, publishes a starting price, sells heavily through managed service providers and bundles phishing simulation, while Abnormal reports a larger enterprise customer base and far more revenue.

When another vendor fits better

Very small organizations, and teams that want one product to replace their gateway outright, will find a closer match in tools with published pricing and bundled filtering.