Sublime Security ASA and ADÉ (Autonomous Security Analyst and Autonomous Detection Engineer)
Vendor: Sublime Security · HQ: United States · Category: Security
Last verified · Added · 5 sources · How we verify
Vendor? Get your “Listed on Agent Index” badge
On this page
What it does
Sublime Security is an email security platform built around customisable detections. Sublime's docs describe ASA (Autonomous Security Analyst) as an AI agent that clears the abuse mailbox and triages messages that the Attack Score model flagged as suspicious, unknown or error. ASA chooses which analysis tools to call for each message: attachment detonation, link analysis and computer vision on landing pages, and sender behaviour profiles. It can run parallel sub-investigations and usually reaches a verdict in about a minute. In passive ('Analyst') mode it investigates and writes a report without touching mail. In active ('Autonomous') mode it applies the auto-remediation you set per verdict (quarantine, trash, move to spam or warning banner) and auto-reviews. Verdicts are malicious, spam, graymail, benign or unknown, and unknown always goes to a human. When ASA confirms a miss it can hand the message to ADÉ (Autonomous Detection Engineer), which writes and backtests new detection rules. Docs say you can approve coverage yourself or let ADÉ auto-activate detections that clear the precision bar you set (the docs describe a 99% preset). ASA sends only parsed message data to the model, never the raw email. It runs in Sublime Cloud and in self-hosted AWS deployments, including AWS GovCloud, and needs Sublime Enterprise. Registry: the Sublime Security Platform is TX-RAMP Level 2 (TX1903681). That is a platform-level certification, and the listing doesn't name ASA. Speed and false-positive figures are vendor claims. Enterprise pricing is not published. A free Core tier and a free EML analyzer exist.
Frameworks (vendor-stated)
No framework tags yet.
Vendor-claimed TX-RAMP
Government authorizations
Registry records checked 2026-10-18. Scope “listing” means the certified product is this listing or the government boundary it already documents; “platform-only” means another product line is certified and the vendor does not state this agent is inside that boundary.
| Program | Product | Status | Scope | Source |
|---|---|---|---|---|
| TX-RAMP | Sublime Security Platform · Level 2 · TX1903681 · expires 2029-07-05 | Level 2 | Vendor platform; agent scope not stated | Registry |
Pricing (as published)
Not published for Sublime Enterprise (required for ASA). Free Sublime Core tier and free EML Analyzer available.
Tasks
phishing triageemail securityalert triageremediationthreat detection
Sources
- docs.sublime.security/docs/asa-autonomous-security-analyst (primary)
- sublime.security/
- docs.sublime.security/docs/ade-autonomous-detection-engineer
- legal.sublime.security/sublime-legal-terms/sublime-privacy-policy-4ace7a48
- dir.texas.gov/resource-library-item/tx-ramp-certified-cloud-products
Last verified 18 Oct 2026. Framework tags indicate relevance, not certification; “vendor-claimed” items are as marketed by the vendor. Spotted an error? Submit a correction or email [email protected]. See our methodology.
Next step: find an auditor
After you pick a tool, the usual next step is an independent audit. These are directory listings (Verified or registry-listed), not rankings or endorsements.
Narrow by region
This listing’s HQ country is United States. That is a starting point only — choose any published country page.
United States (suggested) · India · United Kingdom · Japan · Germany · Australia · Netherlands · Canada · Brazil · Singapore · Ireland · United Arab Emirates
Audit firms in India (131)
Audit firms in Japan (49)
Send a request Get matched with verified auditors All verified audit firms
Request received
Thanks, we've received your request. We'll be in touch before sharing it with any firm.
Reference:
Use-case comparisons
- Email security and phishing-response AI agents — 16 verified listings (Triage of user-reported phishing, autonomous email threat remediation and AI-run phishing simulation)
Compare Sublime Security ASA and ADÉ (Autonomous Security Analyst and Autonomous Detection Engineer) with
-
-
-
-
-
- A
-
-
-
-
Alternatives
-
7AI agentic security platform — Boston-based agentic security platform where swarms of specialised AI agents categorise, investigate and reach a determination on every alert, escalating only what needs a person, with optional managed service (PLAID ELITE). -
Abnormal AI Security Mailbox (Abnormal AI for Government) — Autonomous agent for email security operations that triages user-reported emails, removes related malicious campaign messages across the organisation and replies to reporters; included in Abnormal AI for Government, which is FedRAMP and GovRAMP Moderate authorized. -
Adaptive Security Agentic Email Security and Phish Triage — API-based 'agentic email security' that re-analyses inbound mail after native filtering with ML and LLM reasoning and removes confirmed threats across every inbox automatically (configurable human-in-the-loop thresholds). AI Phish Triage classifies employee-reported emails and acts on them, feeding Adaptive's simulations and awareness training. -
Aikido Attack AI Pentesting — Belgian autonomous AI pentest: many agents map the app, test attack paths and re-exploit each finding to confirm it, with a same-day audit-grade report. -
AIpentix (agentic continuous security testing and agentic red teaming, by Swipergy) — German continuous security-testing platform with an AI agent that signs in to the customer's application on its own, chooses follow-up checks and documents attack paths, with every tool run evidenced. Findings are grouped into remediation actions with owners, deadlines and Jira sync, and retests confirm fixes. Agentic red-team campaigns (recon, access, lateral and report agents led by human red teamers) are also offered for TIBER-EU and DORA TLPT style testing. - A Andesite Human-AI SOC (Azimuth for Government) — Agentic SOC platform with configurable agents for alert triage, enrichment, investigation and remediation under analyst oversight; its government offering is FedRAMP High authorized.
See all Sublime Security ASA and ADÉ alternatives →
FAQ (from this dataset)
What does Sublime Security ASA and ADÉ do?
Email security platform whose AI agents triage user-reported and flagged emails end to end (ASA, with passive or active auto-remediation modes) and write backtested detections for new attacks (ADÉ), which default to one-click human approval and can auto-activate when they clear a precision threshold. Runs as SaaS or self-hosted in AWS, including GovCloud.
How much does Sublime Security ASA and ADÉ cost?
Not published for Sublime Enterprise (required for ASA). Free Sublime Core tier and free EML Analyzer available.
Where is Sublime Security headquartered?
United States
What are alternatives to Sublime Security ASA and ADÉ?
See the Sublime Security ASA and ADÉ alternatives page for category-sharing listings in relevance order, not a ranking. Sublime Security ASA and ADÉ alternatives.
Stay updated
Check your inbox to confirm your email. We’ll only send the weekly brief after you click the link.
We use your email only to send the newsletter. See our privacy policy.