Abnormal Security vs Palo Alto Networks

Discovers shadow AI tool/agent/chat usage via email, OAuth, identity and browser signals and enforces policy automatically.

Answers security teams' questions about threats, attack patterns and risk across email and SaaS on demand, without writing queries.

Phishing simulation and training that generates its exercises from the real attacks aimed at that organisation rather than from static templates.

Automates phishing triage: answers every employee report in seconds and remediates campaign-wide threats without an analyst in the loop.

Combines a custom outbound DLP policy engine with an AI triage agent that evaluates matches in context, releasing benign messages and quarantining likely violations.

Behavioral AI that automatically moves low-priority promotional email (graymail) out of the inbox without manual rules.

Behavioral AI that catches hijacked sessions, abused OAuth grants and privilege misuse across email, IdP and SaaS.

Behavioral-AI email threat detection that builds per-employee/vendor baselines to catch BEC, phishing and payload-free social engineering before delivery.

Analyzes identity signals pre-provisioning (HR systems, IdP, email) to detect synthetic personas and coordinated nation-state infiltration campaigns.

Inspects Microsoft Teams and Slack for malicious URLs and weaponized attachments, auto-remediating high-risk messages.

Uses behavioral AI to detect outbound email sent to unintended recipients and quarantines it before delivery.

Checks a Microsoft 365 environment against CIS Benchmarks, detects configuration drift in real time and provides prioritized remediation.

Behavioural AI platform, powered by Abnormal's own Attune model, that baselines normal behaviour for every employee and vendor to detect phishing, business email compromise and account takeover that signature-based filters miss.

Abnormal's behavioural AI foundation model: builds a baseline for every identity from billions of signals so the products above it can flag anomalies in real time.

A cloud-delivered service within Prisma SASE that discovers shadow AI usage and applies access controls and data loss prevention to generative AI applications.

Endpoint detection and response platform marketed as "the foundation of the AI-driven SOC," with an AI agent assistant (Cortex AgentiX) for investigation and response.

An AI-driven security operations platform that unifies SIEM, SOAR and detection-and-response data with automation and AI agents to run a security operations centre.

Palo Alto Networks' proprietary AI system combining machine learning, deep learning and generative AI to automate threat detection, prevention and remediation across its Strata, Prisma Cloud and Cortex security platforms.

An AI security platform that discovers, scans and protects AI models, agents, applications and data against runtime and posture threats.

Runtime gateway component of Prisma AIRS that inspects and governs traffic to and from AI models and agents.

"The first AI-powered, unified solution for network security management and operations," with an AI assistant (Strata Copilot) and purpose-built AI agents for policy optimization, threat detection and remediation.