Abnormal AI earns praise for its behavioural AI-driven approach to combating human-centric threats, winning the Best Behaviour Analytics/Enterprise Threat Detection category.  The product addresses the growing surge in identity-based attacks including business email compromise (BEC), supplier fraud, account takeover and AI-generated impersonation.

Rather than relying on signatures or known indicators of compromise, the platform uses behavioural AI to model normal identity, communication and workflow patterns across email and connected cloud applications, enabling it to detect subtle anomalies and automate remediation in milliseconds.

The company touts both the operational and commercial advantages of its approach, including rapid API-based deployment, reduced manual workloads and measurable customer outcomes. 

In terms of market adoption, Abnormal AI says it now protects more than 3,000 organisations across 35 countries, including 25% of the Fortune 500, with 70% of customers replacing legacy secure email gateways (SEGs). Reported results include a 90% reduction in successful phishing attacks, a 95% decrease in investigation time and a Forrester Total Economic Impact (TEI) study citing a 278% ROI over three years.

Judges described the submission as a winner-level entry, praising its clear and compelling case for behavioural AI as a meaningful advancement in enterprise threat detection. The judges highlighted the strength of the company’s AI-native approach to identifying identity-driven and socially engineered threats, while noting that its differentiation from traditional SEGs was communicated clearly and with strong relevance to the category.

“A winner-level, well-evidenced entry demonstrating that Abnormal AI delivers credible behavioural threat detection with impressive customer impact and strong market validation.”

The judging panel also commended the depth of supporting evidence, including the Forrester-validated ROI figures, the reported 95% reduction in investigation time, strong customer traction and documented customer outcomes. 

Judges further pointed to the platform’s proven market adoption and operational effectiveness in reducing phishing, fraud and analyst workload, describing it as a mature, well-established product with a strong track record and consistently positive industry feedback.

Kelley Damore Chief Content Officer CyberRisk Alliance

Kelley Damore is Chief Content Officer at CyberRisk Alliance, where she leads content strategy across the company’s digital brands, research, communities and live events serving CISOs and security practitioners. At CyberRisk Alliance, she is focused on delivering 365-day engagement, trusted journalism and actionable insights to help security leaders navigate an increasingly complex threat landscape.