Abnormal Security cost: quote-only, priced per mailbox per year

Abnormal Security is quote-only: it publishes no list price. It is sold per mailbox (per employee) per year by private offer, including an AWS Marketplace listing that routes to a custom quote, with larger discounts advertised on 24- and 36-month terms. Your quoted rate is driven by mailbox count, which modules you enable (inbound email security, account-takeover protection, AI security mailbox, email productivity), and contract length, plus a one-off onboarding fee. Third-party buyer-data aggregators report per-mailbox figures in the low tens of dollars per year, but because Abnormal publishes no rate, treat any specific number as unverified until it is in your own quote.

Quote drivers, the illustrative scaling model, and the dual-product (Abnormal plus a gateway) architecture are worked through below.[Abnormal AWS Marketplace listing (private-offer / quote-only), checked August 2026]

Behavioural-AI email security emerged as a distinct product category through 2018-2022 as the limitations of gateway-style scanning became visible against sophisticated phishing attacks. The premise of behavioural-AI is that an attack pattern can be detected not by examining the email content for malicious-indicator patterns but by examining the email metadata (sender-recipient relationship history, communication frequency, language pattern, topic novelty) for behavioural-anomaly patterns that signal something is wrong even when the content passes content-based scanning.

The category leaders in 2026 are Abnormal Security (independent, founded 2018), Tessian (acquired by Proofpoint December 2023, now bundled with TAP), and IRONSCALES (independent, founded 2014). Sublime Security has emerged through 2023-2025 as a newer entrant with detection-as-code positioning. The functional positioning across vendors is similar; the differentiation is in modelling depth, deployment ease, and pricing.

The attack patterns behavioural-AI catches best are sophisticated BEC (where the lure is grammatically perfect and refers to real organisational context), AitM lures from compromised legitimate domains (where reputation-lookup passes because the domain is legitimate), and vendor-impersonation through compromised supplier mailboxes (where the sender is real but the message intent is fraudulent). For organisations facing material exposure to these patterns, behavioural-AI is one of few product categories that meaningfully reduces residual risk. The post-delivery operating model (analysing email after it has arrived in the mailbox) means the product can use full-mailbox context for detection rather than just the inbound-stream view that gateway-style products see.[Gartner Magic Quadrant Email Security 2024 + Forrester Wave Enterprise Email Security 2024]

Abnormal does not publish a list price. It is sold quote-only, per mailbox (per employee) per year, by private offer; its AWS Marketplace listing routes to a custom quote rather than a fixed rate and advertises larger discounts on 24- and 36-month terms. Cost is driven by mailbox count, the modules enabled (inbound email security, account-takeover protection, AI security mailbox, email productivity), and contract length, plus a one-off platform-onboarding fee. Buyer-data aggregators report per-mailbox figures in the low tens of dollars per year, but because no rate is published these are unverified inputs to your own quote, not a benchmark. The pricing sits above gateway-style alternatives (Microsoft Defender for Office 365 Plan 2 at near-zero incremental cost for M365 E5 customers; Proofpoint TAP, itself quote-only) but the value proposition is different.

The premium justification rests on attack-pattern coverage. Gateway-style products are highly effective against bulk and lower-sophistication phishing at low per-mailbox cost. The limit of gateway-style effectiveness is the residual sophisticated-attack category that bypasses reputation-lookup and rule-based scanning because the lure is grammatically perfect, uses a legitimate (or compromised-legitimate) sender domain, and references real organisational context. This residual category produces the highest per-event cost (because sophisticated attacks are typically targeted at high-value identities and high-value transactions) and is exactly what Abnormal's behavioural-AI is designed to catch.

The ROI logic holds even without a published rate. A mid-market organisation running TAP alongside Abnormal on 2,000 mailboxes pays the sum of two per-mailbox quotes; at an illustrative combined $100 per mailbox (substitute your own quoted rates) that is $200,000 per year. Against the modelled $4.20M average mid-market breach cost (see /by-scale/mid-market), the combined program pays back on a single avoided sophisticated-attack event. The dual-product architecture is now the standard for mid-market and enterprise organisations facing meaningful sophisticated-attack exposure.[Abnormal AWS Marketplace listing (private-offer / quote-only), checked August 2026; combined-cost figure is an illustrative model]

Abnormal publishes no per-mailbox rate, so this table is a scaling model, not a price list: it multiplies mailbox count by two illustrative rates to bracket a range. Locate your quoted per-mailbox rate between the columns (or substitute it directly). Spend also depends on which modules you enable and your contract term; the typical dual-product architecture (Abnormal alongside a gateway-style product) adds the gateway product's separate cost.[Illustrative scaling model (mailbox count x illustrative rate); Abnormal does not publish per-mailbox rates]

In December 2023, Proofpoint closed its acquisition of Tessian (announced October 2023), the second-largest independent behavioural-AI email-security vendor at the time. The acquisition consolidated the behavioural-AI category in a way that has reshaped buyer decision-making through 2024-2026. Pre-acquisition, Tessian competed with Abnormal as the independent-vendor alternative; post-acquisition, Tessian operates as the bundled-with-TAP behavioural-AI layer in Proofpoint's stack, with Abnormal as the leading independent option.

The acquisition removed one independent competitor from the category, strengthening Abnormal's position as the leading independent behavioural-AI vendor (Abnormal publishes no rate, so any effect on its pricing is not publicly measurable). The acquisition also created a strategic-decision point for buyers who were previously running Tessian alongside a non-Proofpoint gateway product. The post-acquisition Tessian product is integrated more tightly into the Proofpoint stack, which makes it more attractive for existing Proofpoint customers and less attractive for non-Proofpoint customers who wanted Tessian-independent.

The current independent-vendor competitive landscape includes Abnormal (clear category leader by customer count), IRONSCALES (lower-priced alternative with similar functional positioning), Sublime Security (newer entrant with detection-as-code differentiation), and a handful of smaller players. For most buyers in 2026, the practical decision is between Abnormal and IRONSCALES on price-versus-feature, with Tessian-via-Proofpoint as the bundled alternative for existing Proofpoint customers.[Proofpoint-Tessian acquisition: announced 30 October 2023, closed 19 December 2023 (proofpoint.com newsroom) + post-acquisition product-integration analysis 2025]

• Proofpoint TAP cost
• KnowBe4 cost
• Proofpoint PSAT cost
• BEC cost (Abnormal core use case)
• AitM cost (compromised-legitimate-domain pattern)
• Spear phishing cost
• Phishing cost in manufacturing (vendor-BEC use case)
• Phishing cost in legal services
• databreachcost.com
• mdrcost.com