Sublime Security

Sublime sits on Microsoft 365 and Google Workspace via API and lets detection engineers inspect, fork, and publish rules instead of trusting a black box.

Two agents now do the parts vendors used to sit on: one triages inbound mail, the other authors new detections when a novel lure shows up.

The bet is that email defense has to ship like a detection shop, not a quarterly content pack.