Business email compromise costs companies billions a year, and the built-in filters in Microsoft 365 and Gmail let plenty of it through. Abnormal built an AI that learns how every person in your company communicates, who they email, how they write, when they work, and flags anything that looks off. It crossed $200 million in recurring revenue about six years after it was founded. Valued at $5.1 billion in 2024 and now calling itself Abnormal AI, it is one of the most obvious cybersecurity IPO candidates around.
Founded
2018
HQ
San Francisco, California
Total Raised
$546 million
Founder
Evan Reiser, Sanjay Jeyakumar
Status
Private (rebranded Abnormal AI, 2025)
Verified Oct 2026
Website
abnormal.aiTHE ORIGIN STORY
Evan Reiser and Sanjay Jeyakumar both worked on machine learning for Twitter's ad products, where the job was catching fake ad clicks and abuse. They realized the same behavioral modeling could catch fake emails.
Business email compromise, where a crook impersonates a boss or a supplier to get money wired, is the most financially damaging cybercrime the FBI tracks, yet most email security tools just look for malicious links and attachments. They founded Abnormal in 2018 to apply behavioral AI to the problem.
In 2025 the company renamed itself Abnormal AI to signal it is more than an email filter.
WHAT THEY ACTUALLY DO
Abnormal Security uses AI to stop email attacks that traditional security misses — business email compromise (BEC), social engineering, vendor fraud, and account takeover. Instead of scanning for malware or known phishing links, Abnormal builds a behavioral model of every person in the organization: who they email, what they talk about, how they write, when they work.
When an email deviates from that pattern — like the CEO suddenly asking for a wire transfer at 2 AM from a weird IP — Abnormal flags it. Subscription-based, priced per mailbox per month.
Integrates directly with Microsoft 365 and Google Workspace via API.
THE PRODUCTS
Abnormal Inbound Email Security, Abnormal Email Account Takeover Protection, Abnormal Security Posture Management, Abnormal AI Security Mailbox
HOW THEY GREW
Land with email, expand into platform. Abnormal started with inbound email security and has built out into account takeover protection, security posture management and AI-powered security operations.
It crossed $200 million in annual recurring revenue around its August 2024 Series D, which valued it at $5.1 billion, and says it serves thousands of customers including a big slice of the Fortune 500. In 2025 it rebranded as Abnormal AI and hired a public-company CFO, which is the usual signal that an IPO is being prepared.
THE HARD PART
Competing for budget against Microsoft's built-in email security (Defender for Office 365) and established players like Proofpoint and Mimecast. Many security chiefs wonder why they need a third-party email tool when Microsoft keeps improving its own.
Abnormal has to keep proving that behavioral AI catches attacks Microsoft misses. The other challenge is expanding beyond email into identity and AI security without losing focus, at a valuation that assumes it will.
MONEY TRAIL
Series A
2019 · Led by Greylock Partners
$24M raised
Series B
2020 · Led by Menlo Ventures
$50M raised
Series C
2022 · Led by Insight Partners
$210M raised
$4.0B valuation
Series D
2024 · Led by Wellington Management
$250M raised
$5.1B valuation
WHO BACKED THEM
Greylock Partners led the $24 million Series A in November 2019. Menlo Ventures led the $50 million Series B in 2020.
Insight Partners led the $210 million Series C in May 2022 at a $4 billion valuation. Wellington Management led the $250 million Series D in August 2024 at $5.1 billion, with Greylock, Menlo, Insight and CrowdStrike's Falcon Fund joining.
Total raised is about $546 million.
Related Profiles
Companies
Cloudflare
Both sit in front of a company's traffic to stop attacks, Cloudflare for websites and networks, Abnormal for email.
CrowdStrike
CrowdStrike protects laptops and servers, Abnormal protects inboxes. CrowdStrike's Falcon Fund invested in Abnormal's Series D.
SentinelOne
Both sell AI-driven security that spots attackers by behavior rather than known signatures, SentinelOne on devices and Abnormal on email.
Tessian
both use behavioral AI to stop email threats
Head-to-Head
Compare Abnormal Security vs another company.