Abnormal Security
Behavioural AI email security via API integration.
Scorecard from 0 structured reviews
Exposure signal
LowAn objective, third-party reading of this vendor's own credential hygiene. It is not part of the community scorecard and does not affect any rating on DBSE.
Credentials belonging to 1 of this vendor's own staff appear in infostealer logs, and the most recent staff credential appeared 5 months ago. Their staff hold credentials for 0 distinct external services, which is the surface a successful attack on this vendor could reach. At least one of those credentials opens an identity or administrative system rather than an ordinary business one, which is the part that matters most. This says nothing about how well the product works.
Customer-side infections: 1 (not counted in the band)
These are infections on the machines of people who log in to this vendor's service. They reflect those users' own endpoint hygiene, and a vendor with a large consumer or partner login footprint will always show more of them. Counting that against the vendor would penalise popularity, so this platform does not.
Which of their own systems the exposed credentials open
| System | Times seen |
|---|---|
| https://sso.abnormalsecurity.com | 1 |
Classified by the source as: sso.
This is the part a count cannot tell you. A stolen credential for a login page that fronts single sign-on or an administrative console reaches further than the same credential for a marketing site, so it carries the smallest of the three weights in the band above. These are the vendor's own published login pages, nothing private.
Context that is recorded but never scored
Stealer families seen against this domain: Acreed, RedLine. Which malware took a credential says more about what is circulating than about the vendor, so it is not scored.
Two independent sources agree on 1 exposed staff credential.
Source: FireIntel (xti.fireintel.net), public domain summary. Source: Hudson Rock (hudsonrock.com), free infostealer intelligence API. About this data. Read 1 month ago, and due a refresh. DBSE does not collect, hold, or sell this data.
Discussions about Abnormal Security
- No threads yet. Start one.