Sublime Security Announces Integration with CrowdStrike Falcon Next-Gen SIEM

Integration brings Sublime email security signals into Falcon Next-Gen SIEM to accelerate investigations and response

WASHINGTON and LAS VEGAS, Aug. 31, 2026 /PRNewswire/ -- Fal.Con 2026 – Sublime Security, the agentic email security platform, today at Fal.Con 2026 announced a new integration that enables Sublime email security signals to flow into CrowdStrike Falcon® Next-Gen SIEM. The integration enables security teams to correlate Sublime's email security data with endpoint, identity, cloud, threat intelligence, and other security telemetry during investigations, providing additional context into attacker activity.

Adversarial AI has fundamentally changed the pace and composition of email threats. Attacks with AI-generated content grew roughly 5x in the last year, and 90% of malicious emails are customized to each targeted organization. As attackers increasingly adapt their techniques, security teams need to connect email activity with security data from across the environment to investigate and respond to threats quickly.

Sublime utilizes a team of agents to counter the pace of AI threats. Its ADÉ (Autonomous Detection Engineer) agent writes, tests, and deploys organization-specific detection coverage tailored to each environment, while ASA (Autonomous Security Analyst) handles threat triage. By making Sublime email security signals available within Falcon Next-Gen SIEM, security teams can incorporate email context into broader investigations and security operations workflows.

Falcon Next-Gen SIEM unifies first- and third-party data, native threat intelligence, AI, and workflow automation to transform security operations. Delivering more capabilities with up to 150x faster search performance than legacy SIEMs and solutions positioned as SIEM alternatives, at up to 80% lower total cost of ownership, Falcon Next-Gen SIEM helps organizations detect, investigate, and respond to threats more efficiently.

The integration enables organizations to:

• Ingest Sublime email security signals into Falcon Next-Gen SIEM.
• Correlate email activity with endpoint, identity, cloud, threat intelligence, and other security telemetry during investigations.
• Incorporate Sublime data and response actions into existing security operations workflows through Falcon Next-Gen SIEM.

"Finding a novel attack is only half the job. Security teams need the ability to act on it immediately," said Josh Kamdjou, CEO and co-founder of Sublime Security. "By making Sublime's email security signals available within CrowdStrike Falcon Next-Gen SIEM, analysts can connect email activity with broader security telemetry while quickly adapting email detection coverage as new threats emerge."

"Email has always been a top threat vector and that has never been more true as attackers leverage Al. Email threats move faster than any one model can keep up with," said Dustin Hillard, Chief Product and Technology Officer at eSentire. "Having Sublime's detection alongside the rest of our security telemetry where our team already lives means we have a single investigation workflow, and the agility to immediately start blocking and responding to new email attacks when we find them."

To learn more about the Sublime Security and CrowdStrike partnership, visit https://sublime.security/integrations/crowdstrike/ or visit Sublime at Fal.Con 2026, booth #1121.

About Sublime Security
Sublime's agentic platform stops more email attacks with less work. Our AI agents work like a digital SOC team, automating threat triage in seconds and deploying new defenses in hours. The platform provides full transparency and automatically adapts to stop the unique attacks targeting your organization while eliminating the vendor bottlenecks and one-size-fits-all limits of legacy tools.

Sublime empowers security teams with tailored detections, explainable alerts, and automation to prevent, detect, and respond to threats in real time. Learn more at https://sublime.security.

SOURCE Sublime Security