Sublime Security Launches AI Agent that Autonomously Improves Threat Protection and Cuts Detection Timelines

Sublimeʼs Autonomous Detection Engineer (ADÉ) offers transparent, explainable protection that continuously improves in response to attacker behavior, closing critical gaps

WASHINGTON, Sept. 11, 2025 /PRNewswire/ -- Sublime Security, the adaptive, AI-powered email security platform, today announced the Autonomous Detection Engineer (ADÉ), an industry first, end-to-end AI agent that turns attack telemetry into transparent and auditable protection that security teams can trust.

Email attacks are advancing at unprecedented speed as adversaries weaponize generative AI to create highly targeted and rapidly shifting campaigns. Unlike traditional solutions which rely on vendor-initiated coverage updates, ADÉ analyzes new attack patterns to write, test, and validate new tailored coverage. It analyzes historical data at scale, iterates on detection strategies, and submits high-efficacy protections for human review, cutting detection timelines from weeks to hours.

"A key problem organizations face is the speed at which their defensive solutions can adapt and respond," said Josh Kamdjou, Founder and CEO of Sublime Security. "With ADÉ, we're now offering a team of AI Agents that autonomously generate clear, evolving protections against new attacks within hours, not weeks. Together with ASA, Sublime's Autonomous Security Analyst, ADÉ provides enterprises with defenses that adapt as quickly as attackers, while preserving the visibility and control that matter most."

ADÉ is part of a multi-agent system in Sublime's Platform which is built on four key functionalities to keep human analysts informed, in control, and armed with the insights they need most:

Deep analysis: ASA triages suspicious or user-reported emails and produces a behavioral analysis based on the attack's Tactics, Techniques, and Procedures.

Detection Engineering: Using ASA's findings, ADÉ creates deterministic, behavioral, AI-powered detections using Sublimeʼs proprietary Message Query Language (MQL).

Smart refinement and validation: Before any proposal is deployed, ADÉ backtests it across historical data at scale to validate precision, reduce false positives, and confirm that similar past attacks would have been stopped.

Human approval: Analysts remain in control, with the ability to review and approve ADÉ's recommendations with full visibility into its rationale.

ADÉ is designed to be explainable and transparent, providing learning opportunities for human analysts by generating a summary of detections as new attacker techniques emerge and building processes that explain how it tackled the problem from end-to-end. Protections are environment-specific and developed through a closed-loop system that is constantly learning and improving, avoiding one-size-fits-all updates.

"What's compelling about ADÉ is the shift from static defenses to a system that actively improves our specific coverage," said Roger Allen, Senior Director, Global Head of Detection and Response at Sprinklr. "The promise of an agent continuously tailoring and backtesting new protections for our environment is a force multiplier. It means our defenses don't just work, they evolve—we get the benefit without having to do the work."

The rollout of ADÉ comes during a period of strong momentum for Sublime. The company raised a $60M series B funding round in December 2024, and launched its first AI agent, ASA, in April to fully automate the triage and remediation of user reported emails.

ADÉ is now available to Sublime Enterprise customers across Google Workspace and Microsoft 365. To learn more or request a demo, visit sublime.security/demo.

About Sublime Security

Sublime Security is the adaptive, AI-powered cloud email security platform that combines best-in-class effectiveness with unprecedented visibility and control. The open platform allows security teams to have transparency and flexibility in their email environment to spend less time on email-originated incidents.

Advanced teams can customize detections, threat hunt, extend Sublime into their SIEM or SOAR, and collaborate with other teams. Deploy Sublime Core for free or Sublime Enterprise at https://sublime.security/start

SOURCE Sublime Security