February 24, 2026

Attack Insights and User Reports Overview enhancements
Security teams shouldn't have to dig through UIs or take screenshots to answer basic questions about their email environment. With this release, we've made Sublime's reporting and analytics sharper and more actionable. Attack Insights now features interactive drill-downs, top attacker domains and sender addresses, and a visual breakdown of how threats flow from detection to remediation. User Reports Overview surfaces your top reporters and highest-risk employees. And with full API access, you can pull all of this data into your own tools and workflows. For a full breakdown of the updates, watch this feature walkthrough:
The Overview dashboard has been redesigned and renamed to Attack Insights. It still covers attack volume, attack types, TTPs, detections, and more, but we’ve added top attacker domains and sender addresses, so you can quickly answer, “Where are these attacks coming from?" Every data point can be drilled into, launching a filtered view of the attacks behind it for deeper analysis.
We also added spam, graymail, and email bomb analytics, as well as an interactive Remediation Pipeline visualization that lets you quickly see how unwanted messages were remediated and how much remediation happened automatically.

We initially launched User Reports Overview with our Autonomous Security Analyst (ASA). That first version included user report volume, classification, and remediation analytics. With this update, we’ve improved all of those visualizations, as well as stats for top reporters and the top automations that handled them. Just like with Attack Insights, all of these tables are clickable, letting you launch into a filtered view of attacks for deeper analysis.
With these updates, it’s easier than ever to answer the questions that matter most: who's at risk, what's getting caught, how much remediation is handled automatically, and where to optimize. Full API access lets you pull the data into your own tools and workflows. See how Sublime gives you visibility and control right out of the box. Get a live demo.
Sublime releases, detections, blogs, events, and more directly to your inbox.
See how Sublime delivers autonomous protection by default, with control on demand.