by Sublime Security

A free and open platform for detecting and preventing email attacks like BEC, malware, and credential phishing. Gain visibility and control, hunt for advanced threats, and collaborate with the community.

Sublime uses Message Query Language (MQL), a domain-specific language purpose-built for describing behavior in email. MQL is email provider agnostic, enabling defenders to write, run, and share Detections-as-Code.

Learn more about MQL: Introduction to Message Query Language

curl -sL https://raw.githubusercontent.com/sublime-security/sublime-platform/main/install-and-launch.sh | sh

View Docker Quickstart

View other deployment methods

Open-source detection rules and links to community Feeds are maintained in the sublime-rules repo.

• Docs
• API
• Release log
• Message Query Language (MQL)