Simple and flexible

Choose the version of Sublime that's right for you. Switch between versions at any time.

Core

Deploy and integrate a free Sublime instance in minutes.

Deploy Now

Enterprise

Fully supported, full featured. Try free for 30 days.

Detect, Hunt, Triage, Remediate

Core
Enterprise
Sublime Core Rules Feed
Core
Enterprise
Custom Rule Feeds
Core
Enterprise
Message Attack Scores
Core
Enterprise
Search and Remediate
Core
Enterprise
Manage Rules via Git
Core
Enterprise
Operationalize YARA signatures
Core
Enterprise
Operationalize threat intelligence
Core
Enterprise
Write and run custom Rules
Core
Enterprise
Advanced threat hunting
Core
Enterprise
Auto-remediate via Rules or manually post-delivery
Core
Enterprise
EML Analyzer
Core
Enterprise
Custom Brand Impersonation (logos, login pages, and more) using Computer Vision
Core
Enterprise
Automatically triage flagged messages and user reports with Triage Rules
Core
Enterprise

Supported Platforms

Core
Enterprise
Microsoft 365
Core
Enterprise
Google Workspace Enterprise
Core
Enterprise
IMAP
Core
Enterprise
Custom (via API)
Core
Enterprise

Actions

Core
Enterprise
Auto-Trash
Core
Enterprise
Webhooks
Core
Enterprise
Email alerts
Core
Enterprise
Slack alerts
Core
Enterprise
Move to Spam
Core
Enterprise
Warning Banners
Core
Enterprise
Custom Warning Banners
Core
Enterprise
Auto-Quarantine
Core
Enterprise
Track link clicks - private beta
Core
Enterprise

User Reports

Core
Enterprise
Ingest user reports from any source
Core
Enterprise
Abuse mailbox automation via Triage Rules
Core
Enterprise
Phishing Herd Immunity
Core
Enterprise

Admin, Security, and Integrations

Core
Enterprise
SSO, MFA, RBAC, audit log, and more
Core
Enterprise
SOC 2 Type 2 certified
Core
Enterprise
Microsoft 365, Google Workspace, IMAP, Custom (via API)
Core
Enterprise
SIEM/SOAR integration
Core
Enterprise
Full REST API
Core
Enterprise
Reporting and Metrics
Core
Enterprise
LinkAnalysis and Whois enrichments - no rate limits
Core
Enterprise
Export all messages to S3
Core
Enterprise
Export audit logs & flagged message events to S3
Core
Enterprise
Multi-tenancy support
Core
Enterprise
EDR integrations (Crowdstrike, SentinelOne, and more) - coming soon
Core
Enterprise
EmailRep integration - coming soon
Core
Enterprise

Support

Core
Enterprise
Community Slack support
Core
Enterprise
Phone and Email support
Core
Enterprise
Support SLA
Core
Enterprise
Guided onboarding and training
Core
Enterprise
Infrastructure monitoring for self-managed deployments
Core
Enterprise
Slack Connect w/Sublime team
Core
Enterprise
Private, vetted Slack channel
Core
Enterprise

Active Mailbox Limit

Core
Enterprise
Fully managed (SaaS)
100
Unlimited
Self-managed (Docker):
600
600
Self-managed (AWS Cloud):
Unlimited
Unlimited
Self-managed (AWS GovCloud):
Unlimited
Unlimited

Core

Deploy and integrate a free Sublime instance in minutes.

Deploy Now

Enterprise

Fully supported, full featured. Try free for 30 days.

Trusted by