Sublime Security, the agentic email security platform, today at Fal.Con 2026 announced a new integration that enables Sublime email security signals to flow into CrowdStrike Falcon Next-Gen SIEM. The integration enables security teams to correlate Sublime's email security data with endpoint, identity, cloud, threat intelligence, and other security telemetry during investigations, providing additional context into attacker activity.
Sublime Security integrates with CrowdStrike Falcon Next-Gen SIEM
Brings email security signals into investigations for broader telemetry correlation
Attacks with AI-generated content grew roughly 5x in the last year
90% of malicious emails customized to each targeted organization
Sublime's ADÉ agent writes and deploys organization-specific detection coverage
ASA agent handles autonomous threat triage
Adversarial AI has fundamentally changed the pace and composition of email threats. Attacks with AI-generated content grew roughly 5x in the last year, and 90% of malicious emails are customized to each targeted organization. As attackers increasingly adapt their techniques, security teams need to connect email activity with security data from across the environment to investigate and respond to threats quickly.
Sublime utilizes a team of agents to counter the pace of AI threats. Its ADÉ (Autonomous Detection Engineer) agent writes, tests, and deploys organization-specific detection coverage tailored to each environment, while ASA (Autonomous Security Analyst) handles threat triage. By making Sublime email security signals available within Falcon Next-Gen SIEM, security teams can incorporate email context into broader investigations and security operations workflows.
Falcon Next-Gen SIEM unifies first- and third-party data, native threat intelligence, AI, and workflow automation to transform security operations. Delivering more capabilities with up to 150x faster search performance than legacy SIEMs and solutions positioned as SIEM alternatives, at up to 80% lower total cost of ownership, Falcon Next-Gen SIEM helps organizations detect, investigate, and respond to threats more efficiently.
The integration enables organizations to:
Ingest Sublime email security signals into Falcon Next-Gen SIEM.
Correlate email activity with endpoint, identity, cloud, threat intelligence, and other security telemetry during investigations.
Incorporate Sublime data and response actions into existing security operations workflows through Falcon Next-Gen SIEM.
"Finding a novel attack is only half the job. Security teams need the ability to act on it immediately," said Josh Kamdjou, CEO and co-founder of Sublime Security. "By making Sublime's email security signals available within CrowdStrike Falcon Next-Gen SIEM, analysts can connect email activity with broader security telemetry while quickly adapting email detection coverage as new threats emerge."
"Email has always been a top threat vector and that has never been more true as attackers leverage AI. Email threats move faster than any one model can keep up with," said Dustin Hillard, Chief Product and Technology Officer at eSentire. "Having Sublime's detection alongside the rest of our security telemetry where our team already lives means we have a single investigation workflow, and the agility to immediately start blocking and responding to new email attacks when we find them."
About Sublime Security
Sublime's agentic platform stops more email attacks with less work. Our AI agents work like a digital SOC team, automating threat triage in seconds and deploying new defenses in hours. The platform provides full transparency and automatically adapts to stop the unique attacks targeting your organization while eliminating the vendor bottlenecks and one-size-fits-all limits of legacy tools.
TechIntelPro empowers B2B technology decision-makers with the latest industry trends, deep insights, leadership perspectives and actionable intelligence to drive both organizational and professional milestones, and thrive on the tech pulse.
