Sublime Security

We’re excited to announce that Sublime has raised $150M in a Series C led by @Georgian_io, joined by new investors @Avenir_Growth, @01Advisors, @jonoberheide, and @nicoleperlroth, and existing investors @IndexVentures, @IVP, @slow, and @CitiVentures. This year we launched ASA and ADÉ, our AI agents that autonomously triage threats and auto-adapt coverage, freeing security teams from repetitive work and delivering rapid, tailored defenses. We’ve grown our customer base 4x since the beginning of the year while maintaining zero enterprise customer churn since company inception. This funding accelerates our vision to deliver autonomous email security that adapts to each organization's unique needs, stopping sophisticated attacks while eliminating the manual work and vendor bottlenecks of legacy solutions. Thank you to our customers, partners, and investors for being on this journey with us. 🔗 Read more: sublime.security/blog/sublime-r…

AI has changed the economics of cyberattacks. In this new series, Sublime founders @jkamdjou and @ianthiel lay out their thesis for why an architecture shift is necessary for detection and prevention in the post-Mythos world. Part 1 discusses the challenges with the most common architecture today: The Centralized Detection Model (CDM). Read here: sublime.security/blog/centraliz…

Attackers are hiding callback phishing payloads in calendar invites from Teams, Calendly, Demio, and more. Email security catches the message, but the invite still lands. See five real attacks in our latest Attack Spotlight: sublime.security/blog/calendar-…

AI safety in security = artifacts, gates, and numbers. Not principles. Take a look at our security AI model maturity checklist and see how we audit ourselves – four pillars, real evals, and the gaps we're still closing. sublime.security/blog/ai-safety…

Attackers are now hiding prompt injection payloads inside phishing emails to manipulate AI security scanners. We found one in the wild. Here's how it works – and how we stopped it: sublime.security/blog/adversari…

87% of suspicious emails resolved without an analyst touching them. One analyst covering the work of four. That's what happens when email becomes a first-class signal in MDR – not an afterthought. Full story on how @BHinfoSecurity closes the gap: sublime.security/customers/blac…

Attackers are hiding callback phishing inside real emails from Amazon, Grammarly, and Costco. A real email, a hidden phone number, and a target who calls it. Full breakdown: sublime.security/blog/surge-in-…

We found a phishing attack where the obfuscation was far more interesting than the social engineering. The payload was hidden in an SVG using "business term steganography" – financial jargon as a cipher. To a scanner, metadata. To the attacker, one piece of a multi-layer obfuscation chain. Breakdown: sublime.security/blog/kratos-ph… #cybersecurity #emailsecurity #phishing

Attackers are targeting booking.com hosts with fake reviews – and the payloads behind those links are getting creative. Latest Attack Spotlight on the blog: sublime.security/blog/reviews-u… #cybersecurity #emailsecurity #phishing

The security industry has raced to claim "autonomous AI." The evaluation frameworks haven't kept up. Join us on June 24 to cut through the noise – and build a real framework for evaluating agentic AI in security. 🔗 sublime.security/events/trust-t… #cybersecurity #agenticAI #infosec

🏆 Sublime has won Best Security Solution for Email / Communication Systems at the 2026 Security Awards! Honored to be recognized alongside the world's leading security innovators. See all winners 👉 cloud-awards.com/cloud-security… #CyberSecurity #EmailSecurity #SecurityAwards

Attackers run agentic AI workflows that phish at scale, 24/7. One-size-fits-all email security wasn't built for this. See how Sublime gets ahead of novel AI attacks → June 23, 1:00 p.m. ET / 10:00 a.m. PT event.on24.com/wcc/r/5353748/… #cybersecurity #emailsecurity

Honored to be included in @Redpoint’s 2026 InfraRed 100 alongside so many innovative infrastructure and AI companies building the future of software. See full list here: redpoint.com/infrared/repor…

Most conversations about “autonomous AI” focus on capability. The harder question is trust. We put together a new framework for evaluating security AI autonomy, including the 5 levels of autonomy and what it actually takes for security teams to hand over control safely. 🔗 sublime.security/resources/trus…

Excited to share that Valimail is now an official Sublime Security alliance partner! 📷 Valimail locks down outbound authentication to block spoofing and impersonation at the source. Combined with Sublime's tailored inbound detection that's purpose-built to catch BEC, targeted phishing, and vendor compromise with full transparency and control — it's a stronger defense across the full email attack surface. Check out Valimail's announcement to learn more: valimail.com/blog/introduci…

🚨 Threat actors are now using JavaScript virtual machines to hide phishing payloads inside HTML attachments. Sublime Threat Intelligence and Research (STIR) observed FlowerStorm operators adopting KrakVM just weeks after its release. The campaign included: • VM-based obfuscation • Credential harvesting • Real-time MFA interception A key takeaway: advanced obfuscation is becoming easier to operationalize. Our latest research breaks down the attack chain and what defenders should watch for next. sublime.security/blog/flowersto… #Cybersecurity #Phishing

“Autonomous” is everywhere in security AI right now. But most products are still in the assisted or guided stage, not true autonomy. One thing we’ve learned: Autonomy is not a feature. It’s earned trust. We built a framework for evaluating trustworthy AI: - The 5 levels of AI autonomy - How to evaluate vendors beyond demos - Why evidence matters more than claims sublime.security/blog/introduci… #Cybersecurity #SecurityAI

🏆 Excited to share we are finalists in the 2026 Security Awards by The Cloud Awards! We're honored to be recognized for our work in email security alongside some incredible companies. 👉 cloud-awards.com #CloudAwards #SecurityAwards #Cybersecurity

Excited to announce: Sublime has been named a Rising in Cyber 2026 honoree! 🏆 Selected by 150 active CISOs, this list recognizes the 30 most promising cybersecurity startups shaping enterprise security, and we're proud to be recognized for our work in email security. 🔗 notablecap.com/risingincyber #RisingInCyber #AISecurity #Cybersecurity

🚨 Quarantine Digests are now generally available for all Sublime Enterprise customers. Security teams shouldn’t have to choose between: ❌ one-click user releases ❌ endless “where’s my email?” tickets With Quarantine Digests: ✅ Users see what was quarantined ✅ Users can request releases directly ✅ SOC teams approve every restore ✅ Every action is fully audited The result: Fewer help desk tickets. Faster workflows. No loss of control. Read more: sublime.security/blog/quarantin…

Most prompt injection examples online are attention-grabbing, but not what we’re seeing in email security. <1% are direct “ignore previous instructions.” Instead: indirect prompt injection influencing AI-driven classification. Attackers: • embed benign-looking HTML • dilute malicious signals • push toward a benign verdict Not overrides. Influence within design. Breakdown + real examples: sublime.security/blog/prompt-in… #CyberSecurity #AISecurity #EmailSecurity #PromptInjection