Sublime Email Security Platform

Sublime Security  serves as our primary solution for advanced mail threat detection and response. We use it to identify phishing attempts, business email compromise, malicious attachments, credential harvesting campaigns, and other email-based threats before they reach our end users.

One recent example involved a phishing campaign targeting our finance team members with fake invoices. Using Sublime Security , we detected suspicious indicators such as domain impersonations, link behavior, and email content patterns, which flagged and isolated the messages before users interacted with them, preventing a potential credential compromise.

We use Sublime Security daily for monitoring inbound email threats and also for investigating suspicious emails, tuning detection rules, and improving our overall email security posture.

Sublime Security's best features include advanced phishing detection, custom detection rules, real-time threat analysis, and email behavior analysis.

The detection engine has made the biggest difference because it catches sophisticated phishing attempts that traditional email security sometimes misses.

In terms of Sublime Security's impact, it has strengthened our email security posture, reduced the phishing risk, improved response time, and increased confidence in our security controls. It has reduced phishing-related incidents by approximately 60% and makes the investigation and response process faster by around 30 to 40%.

The Autonomous Detection Engineer has made a noticeable difference because it works far better than normal detection rules, thanks to its AI capabilities and the context it has regarding email threats.

I find the controllable and transparent AI in Sublime Security regarding its decision-making process and auditability to be excellent, allowing us to control all the security workflows effectively.

Sublime Security is a great tool, but improvements are needed in areas such as better executive-level summaries, a more advanced reporting dashboard, and more automated remediation workflows. Additionally, integration with security platforms could be more useful.

The product is already strong from a detection perspective, and most improvements should focus on reporting, automation, and broader integration.

I have been using Sublime Security for about 11 months.

Sublime Security has proven to be stable and dependable in our daily operations.

Sublime Security's scalability is very good, and it scales well with growing email volume and evolving threat patterns.

Our customer support has been responsive and technically knowledgeable, leading to a great experience with their team.

We previously relied on default email security controls and a combination of security monitoring tools because we needed stronger protection against increasingly sophisticated phishing attacks and better visibility into email threats.

The setup is relatively straightforward, and the pricing feels reasonable considering the value it provides in preventing phishing and email-based threats.

We directly purchased Sublime Security from the vendors.

The ROI comes from reduced phishing risk, faster incident response, and lower operational overhead, making it a very good investment.

On average, Sublime Security has prevented about 200 to 300 malicious emails daily for all users, which equals around 6,000 to 7,000 per month, totaling approximately 60 to 70,000 over the 10 to 11 months we have used it.

We evaluated Abnormal Security  and Microsoft Defender before choosing Sublime Security.

Sublime Security is performing well with its SaaS platform, but for enterprise levels, they might need to consider adjustments such as license pricing and setup for on-premises clients.

My advice to others looking into using Sublime Security is to integrate it fully with your email environment and security workflows and to spend time tuning detection policies early to maximize value and reduce noise, as it is a great tool that provides enterprise-level security.

I find that the threat detection is accurate and very reliable, with strong detection performance and relatively low false positives, which is vital for operational efficiency.

I would rate this review a 9 out of 10.

Public Cloud

Amazon Web Services (AWS)

What do you like best about the product?

I like that the Sublime Email Security Platform is highly automated, which saves us time. We've significantly cut down the hours we used to spend reviewing emails and reported emails, reducing our annual effort by 400 hours. The initial setup was extremely easy.

What do you dislike about the product?

I have no complaints at this time.

What problems is the product solving and how is that benefiting you?

I use Sublime Email Security Platform to prevent malicious emails, solving the problem of phishing emails reaching users. It's highly automated, saving us time and reducing our email review effort by 400 hours annually.

What do you like best about the product?

I appreciate the Sublime Email Security Platform for its detection and automation features, especially behavior and content-based detection. The initial setup was great and seamless, making the transition from Minecast very smooth.

What do you dislike about the product?

Na

What problems is the product solving and how is that benefiting you?

I use Sublime Email Security Platform for malware protection, benefiting from its detection and automation features like behavior and content-based detection.

What do you like best about the product?

I appreciate how user-friendly both the UI and API of the Sublime Email Security Platform are, which allows me to create in-depth detections and automations easily. I like that Sublime MQL facilitates deep customization when creating detection rules, capturing specific scenarios with various email attributes. The platform provides complex detection rule creation that would be challenging with other solutions, and it's impressive how the functions in MQL allow for intricate rule construction, down to prevalence within the configured tenant. The powerful language of Sublime provides extensive coverage with its rules, which is another aspect I find valuable.

What do you dislike about the product?

Availability of ASA via the Sentinel integration? Allowing the summary to be forwarded to Sentinel.

What problems is the product solving and how is that benefiting you?

I use Sublime Email Security Platform for creating complex detection rules efficiently with MQL. The user-friendly UI and API enable seamless detection and automation, and the platform's powerful customization allows specific email scenarios to be captured.