Sublime Security Launches Email DLP, Becoming the First Platform to Deliver Agentic Email Security for Both Inbound Threat Detection and Outbound Data Protection

Transparent detection logic and agentic AI that reviews every flagged message help teams stop data loss without disrupting legitimate email.

WASHINGTON, Sept. 30, 2026 /PRNewswire/ -- Sublime Security, the agentic email security platform, today announced the general availability of Sublime Email Data Loss Prevention (DLP). Sublime Email DLP uses message context and agentic AI to stop sensitive data loss over email. With the launch, Sublime becomes the first platform to deliver agentic security across inbound and outbound email, bringing threat protection and data loss prevention into one system.

Email is one of the easiest ways for sensitive data to leave an organization, whether by accident or on purpose. An employee sends a customer spreadsheet to a personal address. A departing engineer emails source code on the way out. An attacker uses a compromised account to quietly exfiltrate sensitive files.

Traditional DLP tools often rely on rigid rules that miss the context behind a message while generating false positives that hold back a successful DLP program. Each false positive can stall a deal, interrupt work, frustrate an employee, or create a support ticket. Teams respond by loosening policies or leaving them in monitor mode, where alerts get triaged after the data is already out the door.

Sublime Email DLP takes a modern, AI-native approach, with two layers of analysis before delivery. Transparent detection logic flags potential violations based on message content, attachments, sender, recipients, and other conditions. ASA, Sublime's Autonomous Security Analyst, then investigates each flagged message in context and returns a verdict with its reasoning. That verdict drives the configured response, whether that means blocking a violation or sending a benign message on its way. Together, these layers help teams stop real violations, keep legitimate email moving, and enforce DLP without adding operational burden.

Email DLP runs on the same transparent detection engine and in the same console that Sublime customers already use for inbound protection. Teams can see which detection flagged a message, inspect and adjust its logic, and review ASA's reasoning. The result is one platform for stopping inbound threats and outbound data loss.

"Every outbound message that gets blocked by mistake impacts a deal, a deadline, or a customer," said Josh Kamdjou, CEO and co-founder of Sublime Security. "That risk is why so many email DLP programs stay in alert-only mode. Security teams will turn on blocking when they can read exactly what a policy looks for and trust that flagged messages get a second look before they're stopped. Sublime Email DLP gives them both without adding another alert queue."

Key outcomes:

• Prevent sensitive data loss. Sublime analyzes outbound messages and attachments to help stop accidental disclosure, intentional exfiltration, and intellectual property loss. Its DLP feed covers common sensitive data types from day one, including personal data, payment data, health information, credentials, and more. Teams can extend those detections to risks specific to their business, such as product roadmaps or customer contracts.
• Avoid business disruption. ASA investigates each flagged message before delivery, validating that the message is a real violation, like a human analyst. Sublime then blocks confirmed violations or releases legitimate messages based on the team's configured policy. When a message is blocked, the sender can be notified and request release.
• Simplify email security operations. Teams manage inbound and outbound email protection using the same detection engine, console, and workflows. DLP-specific reporting and audit logs record manual actions and detection changes, helping compliance teams support requirements such as HIPAA, PCI DSS, and GDPR.

"Our buyers needed assurance that proprietary data like pricing structures, designs, and style codes wouldn't leak to personal email or competitors. Sublime Email DLP lets us deploy outbound protection in days, with policies tailored to our specific data types, all on the same platform we already use for threat detection," said Anand Prem, Cyber Security Engineer at Classic Fashion.

Email DLP is available now as an add-on for Sublime Enterprise customers using Microsoft 365 and Google Workspace. It runs in Sublime-hosted and supported self-hosted environments and deploys through native mail-flow rules, with no MX record change. Learn more at https://sublime.security/product/dlp or request a demo at https://sublime.security/demo.

About Sublime Security

Sublime stops more email attacks with less work. Our autonomous platform protects inbound, internal, and outbound email while continuously expanding organization-specific detection coverage without vendor bottlenecks. AI agents triage messages and generate new detections, with full transparency and control when needed. Learn more at https://sublime.security.

SOURCE Sublime Security