Strengths
- Public sources support unicorn valuation/status for Abnormal Security.
- Abnormal Security publicly markets an active product platform.
- Abnormal Security has public customer, partner or demand signals.
Diligence report
Abnormal Security
Abnormal Security Startup Diligence Report
Proceed only to confirmatory diligence. A thesis for Abnormal Security depends on proving durable revenue growth, retention, margin, defensible product value, compliance posture, leadership depth and financing terms beyond public-list valuation evidence.
Company profile
Abnormal Security Startup Diligence Report
Abnormal Security appears to be an active uncovered private unicorn based on the fetched CB Insights list, public financing evidence and active company/product pages. Public evidence supports status screening and product/GTM presence, but investment-grade diligence remains unresolved because financials, customer quality, contracts, legal/regulatory posture, cap table and personnel data are private.
- Website
- abnormal.ai
- Sector
- Enterprise cybersecurity / AI-native human behavior and cloud email security
- Geography
- United States headquartered with public expansion references across Europe, Asia, and Australia
- Stage
- Private unicorn / growth-stage enterprise security company
- Known aliases
- Abnormal Security, Abnormal AI, Abnormal Security Corp., Abnormal Security, Inc.
- Report version
- 1.0
- Timezone
- UTC
Executive summary
Risks
- Private financial quality and ARR durability not audited publicly
- Customer-count and concentration diligence gap
- Crowded email and identity security market
Gaps
- Audited financial statements, KPI pack and cash/debt schedule
- Fully diluted cap table, preferences, debt and investor rights
- Top-customer revenue, retention, contracts, renewal and satisfaction data
- Sales productivity, funnel conversion, CAC, payback and budget data
- Roadmap, technical benchmarks, security/quality artifacts, incident history and legal/IP schedules
Risk register
R-001: Private financial quality and ARR durability not audited publicly
Public materials cite ARR and growth, but audited financials, NRR, gross margin, CAC, payback, cash runway and cohort retention remain private.
Diligence request: Request private source documents, customer references, contracts, management interviews and specialist legal/technical review before underwriting this risk.
R-002: Customer-count and concentration diligence gap
Public claims disclose broad customer counts but not top-customer revenue concentration, renewal health, churn, discounting or referenceability.
Diligence request: Request private source documents, customer references, contracts, management interviews and specialist legal/technical review before underwriting this risk.
R-004: Security, privacy and AI governance exposure
The platform processes enterprise communications and behavior signals; SOC/ISO evidence is positive but detailed audits, subprocessors, incidents and data-governance controls need diligence.
Diligence request: Request private source documents, customer references, contracts, management interviews and specialist legal/technical review before underwriting this risk.
R-003: Crowded email and identity security market
Abnormal competes with large incumbents and specialists; differentiation depends on sustained AI efficacy, integrations and channel execution.
Diligence request: Request private source documents, customer references, contracts, management interviews and specialist legal/technical review before underwriting this risk.
R-005: Valuation-to-exit execution risk
The $5.1B private valuation implies continued enterprise growth and potential public-market readiness that cannot be underwritten from public evidence alone.
Diligence request: Request private source documents, customer references, contracts, management interviews and specialist legal/technical review before underwriting this risk.
R-006: Legal, IP and regulatory completeness risk
Public search endpoints are only a starting point; litigation, IP ownership, privacy/regulatory correspondence and material contracts require counsel-led confirmation.
Diligence request: Request counsel letters, full docket searches, IP schedule, assignments, regulator correspondence, insurance and material contracts.
01Financial Information
Abnormal Security has public valuation and financing evidence, but audited financials, cap table, debt, cash runway and unit economics remain private.
I.A Annual and quarterly financial information for the past three years
not publicly verifiable confidence: low
Annual and quarterly financial information for the past three years: public research found evidence relevant to financial information, but company records are required for investment-grade verification.
Evidence gaps
- Private company records, management interviews and specialist diligence are required for a complete answer.
Hidden risks
- R-001 remains open until private diligence closes this section.
- R-005 remains open until private diligence closes this section.
Follow-up questions
- Provide source documents and management explanations for annual and quarterly financial information for the past three years.
| item | public signal | diligence gap | verification status |
|---|---|---|---|
| Revenue/ARR | $200M+ ARR and 100%+ YoY ARR growth cited in financing announcement | Audited statements, ARR bridge, NRR, gross margin and revenue-recognition policy | partially_verified |
| Cap table and preferences | Investor names and valuation anchors are public | Fully diluted cap table, preference stack, option pool, debt, warrants and investor rights | not_publicly_verifiable |
| Cash runway and burn | Financing history is public but current cash/burn is not | Cash balance, burn, debt facilities, working capital and forecast scenarios | not_publicly_verifiable |
I.B Financial Projections
not publicly verifiable confidence: low
Financial Projections: public research found evidence relevant to financial information, but company records are required for investment-grade verification.
Evidence gaps
- Private company records, management interviews and specialist diligence are required for a complete answer.
Hidden risks
- R-001 remains open until private diligence closes this section.
- R-005 remains open until private diligence closes this section.
Follow-up questions
- Provide source documents and management explanations for financial projections.
I.C Capital Structure
not publicly verifiable confidence: low
Capital Structure: public research found evidence relevant to financial information, but company records are required for investment-grade verification.
Evidence gaps
- Private company records, management interviews and specialist diligence are required for a complete answer.
Hidden risks
- R-001 remains open until private diligence closes this section.
- R-005 remains open until private diligence closes this section.
Follow-up questions
- Provide source documents and management explanations for capital structure.
I.D Other financial information
not publicly verifiable confidence: low
Other financial information: public research found evidence relevant to financial information, but company records are required for investment-grade verification.
Evidence gaps
- Private company records, management interviews and specialist diligence are required for a complete answer.
Hidden risks
- R-001 remains open until private diligence closes this section.
- R-005 remains open until private diligence closes this section.
Follow-up questions
- Provide source documents and management explanations for other financial information.
| date | round or source | amount | valuation | participants | verification status |
|---|---|---|---|---|---|
| 2024-08-06 | Series D public announcement | $250M expected proceeds | $5.1B | Wellington Management, Greylock, Menlo, Insight, CrowdStrike Falcon Fund | verified |
| 2026-06-05 | CB Insights unicorn list | not_publicly_verifiable | $5.1B | CB Insights lists Abnormal Security at $5.1B, date joined 5/10/2022, United States, San Francisco, Enterprise Tech, with investors Greylock Partners, Insight Partners, and Menlo Ventures. | verified |
02Products
Abnormal markets an AI-native human behavior security platform for inbound email security, account takeover protection, SaaS posture management, AI security mailbox, AI phishing coach, and autonomous security-agent workflows.
II.A Description of each product
partially verified confidence: medium
Description of each product: public research found evidence relevant to products, but company records are required for investment-grade verification.
Evidence gaps
- Private company records, management interviews and specialist diligence are required for a complete answer.
Hidden risks
- R-003 remains open until private diligence closes this section.
Follow-up questions
- Provide source documents and management explanations for description of each product.
| product | audience | key features | source id | verification status |
|---|---|---|---|---|
| Cloud Email Security | Enterprise Microsoft 365 and Google Workspace users | API-based detection of inbound email threats and socially engineered attacks | SRC-002 | verified |
| Account takeover and SaaS posture modules | Security teams managing connected cloud apps | Protection for compromised accounts and misconfigurations across SaaS/cloud apps | SRC-003 | partially_verified |
| AI Security Agents and mailbox products | SOC and end users | Autonomous workflow and mailbox-security surfaces are publicly marketed; adoption metrics are private | SRC-003 | partially_verified |
| item | public evidence | private diligence request | verification status |
|---|---|---|---|
| Public pricing | No price sheet or standard terms found in fetched public pages | Provide price book, discounting, contract terms, implementation fees and renewal uplift | not_publicly_verifiable |
| Product margin | No gross margin or cost-to-serve metrics in public pages | Provide product-level gross margin, hosting/hardware/support cost and professional-services mix | not_publicly_verifiable |
| Competitive packaging | Public positioning shows Cloud Email Security, Account takeover and SaaS posture modules, AI Security Agents and mailbox products | Provide win/loss data, competitor pricing comparisons and attach-rate by module | partially_verified |
03Customer Information
Public customer evidence includes 2,400+ organizations in the 2024 financing release, a later homepage claim of 4,500+ customers, and named customer stories including Domino's, ADT, Valvoline, Boohoo and O-I Glass.
III.A Top customers by application
partially verified confidence: medium
Top customers by application: public research found evidence relevant to customer information, but company records are required for investment-grade verification.
Evidence gaps
- Private company records, management interviews and specialist diligence are required for a complete answer.
Hidden risks
- R-002 remains open until private diligence closes this section.
Follow-up questions
- Provide source documents and management explanations for top customers by application.
| customer or signal | use case | public evidence | verification status |
|---|---|---|---|
| Domino's | Enterprise behavior/email security | Public customer evidence includes 2,400+ organizations in the 2024 financing release, a later homepage claim of 4,500+ customers, and named customer stories including Domino's, ADT, Valvoline, Boohoo and O-I Glass. | partially_verified |
| ADT | Enterprise behavior/email security | Public customer evidence includes 2,400+ organizations in the 2024 financing release, a later homepage claim of 4,500+ customers, and named customer stories including Domino's, ADT, Valvoline, Boohoo and O-I Glass. | partially_verified |
| Boohoo | Enterprise behavior/email security | Public customer evidence includes 2,400+ organizations in the 2024 financing release, a later homepage claim of 4,500+ customers, and named customer stories including Domino's, ADT, Valvoline, Boohoo and O-I Glass. | partially_verified |
| Valvoline | Enterprise behavior/email security | Public customer evidence includes 2,400+ organizations in the 2024 financing release, a later homepage claim of 4,500+ customers, and named customer stories including Domino's, ADT, Valvoline, Boohoo and O-I Glass. | partially_verified |
| O-I Glass | Enterprise behavior/email security | Public customer evidence includes 2,400+ organizations in the 2024 financing release, a later homepage claim of 4,500+ customers, and named customer stories including Domino's, ADT, Valvoline, Boohoo and O-I Glass. | partially_verified |
III.B Strategic relationships
partially verified confidence: medium
Strategic relationships: public research found evidence relevant to customer information, but company records are required for investment-grade verification.
Evidence gaps
- Private company records, management interviews and specialist diligence are required for a complete answer.
Hidden risks
- R-002 remains open until private diligence closes this section.
Follow-up questions
- Provide source documents and management explanations for strategic relationships.
| relationship | nature | public evidence | diligence gap |
|---|---|---|---|
| Microsoft 365 | Integration/platform dependency | Public customer evidence includes 2,400+ organizations in the 2024 financing release, a later homepage claim of 4,500+ customers, and named customer stories including Domino's, ADT, Valvoline, Boohoo and O-I Glass. | Contract terms, revenue contribution, exclusivity, termination rights and supplier dependency are private |
| Google Workspace | Integration/platform dependency | Public customer evidence includes 2,400+ organizations in the 2024 financing release, a later homepage claim of 4,500+ customers, and named customer stories including Domino's, ADT, Valvoline, Boohoo and O-I Glass. | Contract terms, revenue contribution, exclusivity, termination rights and supplier dependency are private |
| Slack | Integration/platform dependency | Public customer evidence includes 2,400+ organizations in the 2024 financing release, a later homepage claim of 4,500+ customers, and named customer stories including Domino's, ADT, Valvoline, Boohoo and O-I Glass. | Contract terms, revenue contribution, exclusivity, termination rights and supplier dependency are private |
| Workday | Integration/platform dependency | Public customer evidence includes 2,400+ organizations in the 2024 financing release, a later homepage claim of 4,500+ customers, and named customer stories including Domino's, ADT, Valvoline, Boohoo and O-I Glass. | Contract terms, revenue contribution, exclusivity, termination rights and supplier dependency are private |
| Salesforce | Integration/platform dependency | Public customer evidence includes 2,400+ organizations in the 2024 financing release, a later homepage claim of 4,500+ customers, and named customer stories including Domino's, ADT, Valvoline, Boohoo and O-I Glass. | Contract terms, revenue contribution, exclusivity, termination rights and supplier dependency are private |
| ServiceNow | Integration/platform dependency | Public customer evidence includes 2,400+ organizations in the 2024 financing release, a later homepage claim of 4,500+ customers, and named customer stories including Domino's, ADT, Valvoline, Boohoo and O-I Glass. | Contract terms, revenue contribution, exclusivity, termination rights and supplier dependency are private |
| Zoom | Integration/platform dependency | Public customer evidence includes 2,400+ organizations in the 2024 financing release, a later homepage claim of 4,500+ customers, and named customer stories including Domino's, ADT, Valvoline, Boohoo and O-I Glass. | Contract terms, revenue contribution, exclusivity, termination rights and supplier dependency are private |
| AWS | Integration/platform dependency | Public customer evidence includes 2,400+ organizations in the 2024 financing release, a later homepage claim of 4,500+ customers, and named customer stories including Domino's, ADT, Valvoline, Boohoo and O-I Glass. | Contract terms, revenue contribution, exclusivity, termination rights and supplier dependency are private |
III.C Revenue by customer
not publicly verifiable confidence: low
Revenue by customer: public research found evidence relevant to customer information, but company records are required for investment-grade verification.
Evidence gaps
- Private company records, management interviews and specialist diligence are required for a complete answer.
Hidden risks
- R-002 remains open until private diligence closes this section.
Follow-up questions
- Provide source documents and management explanations for revenue by customer.
III.D Significant relationships severed within the last two years
not publicly verifiable confidence: low
Significant relationships severed within the last two years: public research found evidence relevant to customer information, but company records are required for investment-grade verification.
Evidence gaps
- Private company records, management interviews and specialist diligence are required for a complete answer.
Hidden risks
- R-002 remains open until private diligence closes this section.
Follow-up questions
- Provide source documents and management explanations for significant relationships severed within the last two years.
III.E Top suppliers
not publicly verifiable confidence: low
Top suppliers: public research found evidence relevant to customer information, but company records are required for investment-grade verification.
Evidence gaps
- Private company records, management interviews and specialist diligence are required for a complete answer.
Hidden risks
- R-002 remains open until private diligence closes this section.
Follow-up questions
- Provide source documents and management explanations for top suppliers.
04Competition
Abnormal Security competes in AI-native human behavior security, cloud email security, and SaaS account protection; competitor positioning must be validated with win/loss, pricing and customer proof.
IV.A Competitive landscape by market segment
partially verified confidence: medium
Competitive landscape by market segment: public research found evidence relevant to competition, but company records are required for investment-grade verification.
Evidence gaps
- Private company records, management interviews and specialist diligence are required for a complete answer.
Hidden risks
- R-003 remains open until private diligence closes this section.
Follow-up questions
- Provide source documents and management explanations for competitive landscape by market segment.
| competitor | segment | overlap | differentiation to verify |
|---|---|---|---|
| Proofpoint | AI-native human behavior security, cloud email security, and SaaS account protection | Product, platform or budget competition inferred from public positioning | Win/loss, pricing, product benchmarks, integration depth and customer ROI |
| Mimecast | AI-native human behavior security, cloud email security, and SaaS account protection | Product, platform or budget competition inferred from public positioning | Win/loss, pricing, product benchmarks, integration depth and customer ROI |
| Microsoft Defender for Office 365 | AI-native human behavior security, cloud email security, and SaaS account protection | Product, platform or budget competition inferred from public positioning | Win/loss, pricing, product benchmarks, integration depth and customer ROI |
| Google Workspace security | AI-native human behavior security, cloud email security, and SaaS account protection | Product, platform or budget competition inferred from public positioning | Win/loss, pricing, product benchmarks, integration depth and customer ROI |
| Material Security | AI-native human behavior security, cloud email security, and SaaS account protection | Product, platform or budget competition inferred from public positioning | Win/loss, pricing, product benchmarks, integration depth and customer ROI |
| axis | diligence need | risk if unproven |
|---|---|---|
| Technology efficacy | Independent benchmarks, false positive/negative rates, uptime, deployment success and roadmap proof | Product differentiation compresses against incumbents |
| Enterprise trust and compliance | Security audits, certifications, data processing terms, incident history and insurance | Procurement friction or regulated-market exclusion |
| Distribution and switching cost | Sales cycle, CAC/payback, implementation burden and renewal cohorts | Growth slows or discounting rises |
05Marketing, Sales, and Distribution
Enterprise direct sales, demos, resource marketing, customer stories, partner/integration motion around Microsoft 365 and Google Workspace, and security conference/webinar content.
V.A Strategy and implementation
partially verified confidence: medium
Strategy and implementation: public research found evidence relevant to marketing, sales, and distribution, but company records are required for investment-grade verification.
Evidence gaps
- Private company records, management interviews and specialist diligence are required for a complete answer.
Hidden risks
- R-002 remains open until private diligence closes this section.
Follow-up questions
- Provide source documents and management explanations for strategy and implementation.
| channel | public evidence | private metric needed | verification status |
|---|---|---|---|
| Enterprise direct sales / demo motion | Enterprise direct sales, demos, resource marketing, customer stories, partner/integration motion around Microsoft 365 and Google Workspace, and security conference/webinar content. | Pipeline, conversion, ASP, cycle length, quota attainment and CAC/payback | partially_verified |
| Customer stories and proof marketing | Public customer evidence includes 2,400+ organizations in the 2024 financing release, a later homepage claim of 4,500+ customers, and named customer stories including Domino's, ADT, Valvoline, Boohoo and O-I Glass. | Referenceability, logo permission, case-study revenue and renewal status | partially_verified |
| Partner / ecosystem motion | Microsoft 365, Google Workspace, Slack, Workday, Salesforce, ServiceNow, Zoom, AWS | Partner-sourced pipeline, margin sharing, channel conflict and contract terms | partially_verified |
| signal | evidence status | diligence request |
|---|---|---|
| High-level product category and value proposition | verified from company-owned public pages | Validate with win/loss and customer references |
| Customer logos or named demand examples | partially_verified; revenue contribution not public | Provide customer contracts, renewal cohorts and concentration table |
| Analyst, award or media signal where public | partially_verified; methodology and commercial effect not public | Provide influenced pipeline and competitive conversion data |
V.B Major Customers
partially verified confidence: medium
Major Customers: public research found evidence relevant to marketing, sales, and distribution, but company records are required for investment-grade verification.
Evidence gaps
- Private company records, management interviews and specialist diligence are required for a complete answer.
Hidden risks
- R-002 remains open until private diligence closes this section.
Follow-up questions
- Provide source documents and management explanations for major customers.
V.C Principal avenues for generating new business
not publicly verifiable confidence: low
Principal avenues for generating new business: public research found evidence relevant to marketing, sales, and distribution, but company records are required for investment-grade verification.
Evidence gaps
- Private company records, management interviews and specialist diligence are required for a complete answer.
Hidden risks
- R-002 remains open until private diligence closes this section.
Follow-up questions
- Provide source documents and management explanations for principal avenues for generating new business.
V.D Sales force productivity model
not publicly verifiable confidence: low
Sales force productivity model: public research found evidence relevant to marketing, sales, and distribution, but company records are required for investment-grade verification.
Evidence gaps
- Private company records, management interviews and specialist diligence are required for a complete answer.
Hidden risks
- R-002 remains open until private diligence closes this section.
Follow-up questions
- Provide source documents and management explanations for sales force productivity model.
V.E Ability to implement marketing plan with current and projected budgets
not publicly verifiable confidence: low
Ability to implement marketing plan with current and projected budgets: public research found evidence relevant to marketing, sales, and distribution, but company records are required for investment-grade verification.
Evidence gaps
- Private company records, management interviews and specialist diligence are required for a complete answer.
Hidden risks
- R-002 remains open until private diligence closes this section.
Follow-up questions
- Provide source documents and management explanations for ability to implement marketing plan with current and projected budgets.
06Research and Development
Behavioral AI, anomaly detection, API integrations across email and SaaS systems, and autonomous AI security agents are the core public technology themes.
VI.A Description of R&D organization
partially verified confidence: medium
Description of R&D organization: public research found evidence relevant to research and development, but company records are required for investment-grade verification.
Evidence gaps
- Private company records, management interviews and specialist diligence are required for a complete answer.
Hidden risks
- R-003 remains open until private diligence closes this section.
- R-004 remains open until private diligence closes this section.
Follow-up questions
- Provide source documents and management explanations for description of r&d organization.
| signal | public evidence | verification status | diligence request |
|---|---|---|---|
| Core technology theme | Behavioral AI, anomaly detection, API integrations across email and SaaS systems, and autonomous AI security agents are the core public technology themes. | partially_verified | Architecture, roadmap, technical debt and benchmark review |
| Named leadership / investor technical view | Evan Reiser - CEO and cofounder; Saam Motamedi - Greylock board/investor signal; Rob Mazzoni - Wellington Management lead investor signal | partially_verified | Full R&D org chart, attrition, key-person dependencies and invention assignments |
| Product reliability and security | Public materials describe product capabilities; detailed QA, incident and reliability metrics are private | not_publicly_verifiable | SLOs, uptime, incident history, penetration tests and defect backlog |
VI.B New Product Pipeline
partially verified confidence: medium
New Product Pipeline: public research found evidence relevant to research and development, but company records are required for investment-grade verification.
Evidence gaps
- Private company records, management interviews and specialist diligence are required for a complete answer.
Hidden risks
- R-003 remains open until private diligence closes this section.
- R-004 remains open until private diligence closes this section.
Follow-up questions
- Provide source documents and management explanations for new product pipeline.
| project or theme | status | source | diligence request |
|---|---|---|---|
| Cloud Email Security | Publicly marketed to Enterprise Microsoft 365 and Google Workspace users | SRC-002 | Roadmap, roadmap cost, adoption, reliability and margin detail for Cloud Email Security |
| Account takeover and SaaS posture modules | Publicly marketed to Security teams managing connected cloud apps | SRC-003 | Roadmap, roadmap cost, adoption, reliability and margin detail for Account takeover and SaaS posture modules |
| AI Security Agents and mailbox products | Publicly marketed to SOC and end users | SRC-003 | Roadmap, roadmap cost, adoption, reliability and margin detail for AI Security Agents and mailbox products |
07Management and Personnel
Public materials identify selected leaders or investor signals, but complete organization, compensation and turnover data are private.
VII.A Organization Chart
partially verified confidence: medium
Organization Chart: public research found evidence relevant to management and personnel, but company records are required for investment-grade verification.
Evidence gaps
- Private company records, management interviews and specialist diligence are required for a complete answer.
Hidden risks
- Personnel, contract or operational details may be hidden because public sources are incomplete.
Follow-up questions
- Provide source documents and management explanations for organization chart.
VII.B Historical and projected headcount by function and location
not publicly verifiable confidence: low
Historical and projected headcount by function and location: public research found evidence relevant to management and personnel, but company records are required for investment-grade verification.
Evidence gaps
- Private company records, management interviews and specialist diligence are required for a complete answer.
Hidden risks
- Personnel, contract or operational details may be hidden because public sources are incomplete.
Follow-up questions
- Provide source documents and management explanations for historical and projected headcount by function and location.
| category | verification status | diligence request |
|---|---|---|
| Headcount | not_publicly_verifiable | Current HRIS export by function, location, tenure and hiring plan |
| Hiring | partially_verified | Approved hiring plan, offer acceptance, recruiter pipeline and budget |
| Turnover/employee relations | not_publicly_verifiable | Voluntary/involuntary attrition, litigation, investigations and retention risk |
VII.C Senior management biographies
not publicly verifiable confidence: low
Senior management biographies: public research found evidence relevant to management and personnel, but company records are required for investment-grade verification.
Evidence gaps
- Private company records, management interviews and specialist diligence are required for a complete answer.
Hidden risks
- Personnel, contract or operational details may be hidden because public sources are incomplete.
Follow-up questions
- Provide source documents and management explanations for senior management biographies.
| name | role | public evidence | diligence request |
|---|---|---|---|
| Evan Reiser | CEO and cofounder | Quoted in financing announcement | Confirm tenure, reporting lines, compensation, retention, background checks and equity incentives |
| Saam Motamedi | Greylock board/investor signal | Quoted investor in financing announcement | Confirm tenure, reporting lines, compensation, retention, background checks and equity incentives |
| Rob Mazzoni | Wellington Management lead investor signal | Quoted in financing announcement | Confirm tenure, reporting lines, compensation, retention, background checks and equity incentives |
VII.D Compensation arrangements
not publicly verifiable confidence: low
Compensation arrangements: public research found evidence relevant to management and personnel, but company records are required for investment-grade verification.
Evidence gaps
- Private company records, management interviews and specialist diligence are required for a complete answer.
Hidden risks
- Personnel, contract or operational details may be hidden because public sources are incomplete.
Follow-up questions
- Provide source documents and management explanations for compensation arrangements.
VII.E Incentive stock plans
not publicly verifiable confidence: low
Incentive stock plans: public research found evidence relevant to management and personnel, but company records are required for investment-grade verification.
Evidence gaps
- Private company records, management interviews and specialist diligence are required for a complete answer.
Hidden risks
- Personnel, contract or operational details may be hidden because public sources are incomplete.
Follow-up questions
- Provide source documents and management explanations for incentive stock plans.
VII.F Significant employee relations problems, past or present
not publicly verifiable confidence: low
Significant employee relations problems, past or present: public research found evidence relevant to management and personnel, but company records are required for investment-grade verification.
Evidence gaps
- Private company records, management interviews and specialist diligence are required for a complete answer.
Hidden risks
- Personnel, contract or operational details may be hidden because public sources are incomplete.
Follow-up questions
- Provide source documents and management explanations for significant employee relations problems, past or present.
VII.G Personnel Turnover
not publicly verifiable confidence: low
Personnel Turnover: public research found evidence relevant to management and personnel, but company records are required for investment-grade verification.
Evidence gaps
- Private company records, management interviews and specialist diligence are required for a complete answer.
Hidden risks
- Personnel, contract or operational details may be hidden because public sources are incomplete.
Follow-up questions
- Provide source documents and management explanations for personnel turnover.
08Legal and Related Matters
No public search evidence collected in this run established material pending litigation, regulatory actions or IP disputes; counsel should verify litigation, data-protection matters, AI governance, FedRAMP status, subprocessors, insurance and IP assignment records.
VIII.A Pending lawsuits against the Company
not publicly verifiable confidence: low
Pending lawsuits against the Company: public research found evidence relevant to legal and related matters, but company records are required for investment-grade verification.
Evidence gaps
- Private company records, management interviews and specialist diligence are required for a complete answer.
Hidden risks
- R-004 remains open until private diligence closes this section.
Follow-up questions
- Provide source documents and management explanations for pending lawsuits against the company.
| matter type | public evidence | verification status | diligence request |
|---|---|---|---|
| Pending lawsuits against company | No material pending lawsuit established from fetched sources in this run | unverified | Counsel litigation search, claims schedule, settlement history and reserves |
| Company-initiated lawsuits | No company-initiated litigation established from fetched sources in this run | unverified | Counsel docket search and IP/enforcement matter schedule |
| Regulatory / agency actions | No public search evidence collected in this run established material pending litigation, regulatory actions or IP disputes; counsel should verify litigation, data-protection matters, AI governance, FedRAMP status, subprocessors, insurance and IP assignment records. | not_publicly_verifiable | Regulatory correspondence, agency matters, privacy/security inquiries and compliance audits |
| search or case | source | public result | verification status | diligence request |
|---|---|---|---|---|
| Abnormal Security as defendant | CourtListener search endpoint | No material defendant matter verified in this public-source screen. | inconclusive | Run PACER, state-court and arbitration searches under all legal names. |
| Regulatory/privacy enforcement references | FTC and SEC search endpoints | No material enforcement matter verified here. | inconclusive | Have counsel search FTC/state AG/international data-protection authority records and regulator correspondence. |
Negative public-search findings are inconclusive.
VIII.B Pending lawsuits initiated by Company
not publicly verifiable confidence: low
Pending lawsuits initiated by Company: public research found evidence relevant to legal and related matters, but company records are required for investment-grade verification.
Evidence gaps
- Private company records, management interviews and specialist diligence are required for a complete answer.
Hidden risks
- R-004 remains open until private diligence closes this section.
Follow-up questions
- Provide source documents and management explanations for pending lawsuits initiated by company.
| search or case | source | public result | verification status | diligence request |
|---|---|---|---|---|
| Abnormal Security as plaintiff | CourtListener search endpoint | No material plaintiff-side matter verified in this public-source screen. | inconclusive | Run PACER/state searches and request company litigation schedule. |
| Trade secret/IP enforcement | USPTO/Google Patents/CourtListener endpoints | No complete enforcement schedule verified publicly. | inconclusive | Request cease-and-desist letters, IP disputes and settlement agreements. |
VIII.C Environmental and employee safety issues and liabilities
not publicly verifiable confidence: low
Environmental and employee safety issues and liabilities: public research found evidence relevant to legal and related matters, but company records are required for investment-grade verification.
Evidence gaps
- Private company records, management interviews and specialist diligence are required for a complete answer.
Hidden risks
- R-004 remains open until private diligence closes this section.
Follow-up questions
- Provide source documents and management explanations for environmental and employee safety issues and liabilities.
VIII.D Material patents, copyrights, licenses, and trademarks
not publicly verifiable confidence: low
Material patents, copyrights, licenses, and trademarks: public research found evidence relevant to legal and related matters, but company records are required for investment-grade verification.
Evidence gaps
- Private company records, management interviews and specialist diligence are required for a complete answer.
Hidden risks
- R-004 remains open until private diligence closes this section.
Follow-up questions
- Provide source documents and management explanations for material patents, copyrights, licenses, and trademarks.
| area | risk | diligence request |
|---|---|---|
| IP / patents / trademarks | Ownership, infringement, open-source and assignment issues may be hidden | Patent/trademark schedule, prosecution files, invention assignments and open-source SBOM |
| Material contracts | Termination, exclusivity, MFN, indemnity or data rights may constrain economics | Top customer, partner, supplier and reseller contracts |
| Insurance | Coverage exclusions may matter for cyber, product, professional liability, defense or data claims | Insurance policies, claims history and broker coverage memo |
| asset or search | jurisdiction | public status | verification status | diligence request |
|---|---|---|---|---|
| ABNORMAL / Abnormal Security marks | USPTO Trademark Search | Search endpoint identified; serial/registration details require live pull. | inconclusive | Provide trademark schedule with owner, serials, registrations, renewals and disputes. |
| Patents/applications assigned to Abnormal Security | Google Patents / USPTO | Search endpoint identified; legal status not verified in this report. | inconclusive | Provide patent schedule, assignments, prosecution status and invention agreements. |
| Software copyrights/open-source/model-data rights | Company records | Not public. | not_publicly_verifiable | Provide OSS SBOM, license scan, data/model rights memo and code assignment evidence. |
VIII.E Insurance coverage and material exposures
not publicly verifiable confidence: low
Insurance coverage and material exposures: public research found evidence relevant to legal and related matters, but company records are required for investment-grade verification.
Evidence gaps
- Private company records, management interviews and specialist diligence are required for a complete answer.
Hidden risks
- R-004 remains open until private diligence closes this section.
Follow-up questions
- Provide source documents and management explanations for insurance coverage and material exposures.
VIII.F Material contracts
not publicly verifiable confidence: low
Material contracts: public research found evidence relevant to legal and related matters, but company records are required for investment-grade verification.
Evidence gaps
- Private company records, management interviews and specialist diligence are required for a complete answer.
Hidden risks
- R-004 remains open until private diligence closes this section.
Follow-up questions
- Provide source documents and management explanations for material contracts.
VIII.G Regulatory agency problems
not publicly verifiable confidence: low
Regulatory agency problems: public research found evidence relevant to legal and related matters, but company records are required for investment-grade verification.
Evidence gaps
- Private company records, management interviews and specialist diligence are required for a complete answer.
Hidden risks
- R-004 remains open until private diligence closes this section.
Follow-up questions
- Provide source documents and management explanations for regulatory agency problems.
| agency or area | public search | public result | verification status | diligence request |
|---|---|---|---|---|
| FTC / consumer privacy-security | FTC search endpoint for Abnormal Security | No material action verified here. | inconclusive | Search FTC/state AG/international privacy regulators and request correspondence. |
| SEC/public-company references | SEC EDGAR full-text search endpoint | No material private-company regulatory matter verified here. | inconclusive | Search public filings for contracts, litigation references and investor disclosures. |
| AI/security compliance | Trust center plus privacy/security materials | Trust posture is public, but audit reports and regulator correspondence are private. | partially_verified | Request SOC/ISO reports, AI governance records, incident history and privacy impact assessments. |
Evidence
| ID | Claim | Status | Sources |
|---|---|---|---|
| EC-001 | Abnormal Security is listed as a private unicorn with latest public-list valuation $5.1B. | verified high | SRC-001 |
| EC-002 | Abnormal Security has public financing evidence supporting unicorn status. | verified high | SRC-002 |
| EC-003 | Abnormal Security publicly markets active products in AI-native human behavior security, cloud email security, and SaaS account protection. | verified medium | SRC-003 |
| EC-004 | Abnormal Security has public customer, partner or demand signals. | partially verified medium | SRC-004 |
| EC-005 | Abnormal Security has public compliance, trust, IP, or governance signals but full legal posture is not public. | partially verified low | SRC-005 |
| EC-006 | Detailed financial statements, revenue quality, cash runway, debt and cap table are not publicly verifiable for Abnormal Security. | not publicly verifiable low | SRC-001SRC-002 |
| EC-007 | Abnormal Security public product evidence does not disclose pricing, margin, roadmap cost or technical debt. | not publicly verifiable low | SRC-003 |
| EC-008 | Abnormal Security customer revenue concentration, churn, renewal health and pipeline are not publicly verifiable. | not publicly verifiable low | SRC-004 |
| EC-009 | Abnormal Security operates in competitive markets with large incumbents and specialists. | partially verified medium | SRC-003SRC-004 |
| EC-010 | Abnormal Security GTM motion is visible publicly, but channel economics are private. | partially verified medium | SRC-003SRC-004 |
| EC-011 | Abnormal Security public R&D signals indicate active technology development, but roadmap and IP ownership are private. | partially verified medium | SRC-003 |
| EC-012 | Abnormal Security public management and investor signals identify some leaders, but full organization, compensation and turnover data are private. | partially verified medium | SRC-002 |
| EC-013 | Abnormal Security legal, regulatory, contract, insurance and IP diligence remains open. | not publicly verifiable low | SRC-005 |
| EC-014 | Abnormal product pages verify a broader Cloud Email Security and AI platform SKU set, including inbound email security, account takeover, posture management, AI mailbox/automation and integrations. | verified high | SRC-008 |
| EC-015 | Abnormal faces significant competitive and pricing pressure from Microsoft-native security, incumbent email-security suites and API-native challengers. | verified high | SRC-010SRC-011SRC-012SRC-013SRC-014SRC-015SRC-016 |
| EC-016 | Legal, litigation, regulatory and IP searches remain incomplete and require counsel-led verification. | inconclusive medium | SRC-017SRC-018SRC-019SRC-020SRC-021 |
| EC-017 | Abnormal has public channel and marketplace signals, but channel economics are private. | partially verified medium | SRC-009SRC-022 |
| EC-018 | The 2024 financing release reports $200M ARR, more than 2,400 customers, 17% Fortune 500 penetration and total expected proceeds of $546M, but these are company-reported public metrics. | partially verified medium | SRC-002SRC-006 |
Disclaimer
This report is a public-evidence diligence snapshot, not investment advice. Important financial, legal, technical, and contractual facts remain non-public and should be verified directly with management and primary documents before any investment decision.