For AI agents: visit https://docs.sublime.security/llms.txt for an index of all pages formatted in Markdown and endpoints in OpenAPI.

Jump to Content

Documentation API Reference Product Releases

Documentation

Documentation API Reference Product Releases

Getting Started

Overview

Install Sublime

Installation Options
Sublime Cloud
Docker
Amazon AWS
Microsoft Azure
- Microsoft Azure ARM Install

Manage Sublime

Add Email/Message Sources
Configure "Report Phishing"
Configure "Quarantine Digests"
Access & Authentication
Export to S3
- Export Message MDMs
- Export Audit Logs and Message Events
Email Data Loss Prevention (DLP) Public Beta
Inline Protection for Inbound Messages
IP Authentication Override

Use Sublime

Message types
Message groups
MQL Detection Rules
Automations
- Auto-respond to User Reports
Actions
Lists
Exclusions
Blocklisting
Attack Score
ASA: Autonomous Security Analyst
ADÉ: Autonomous Detection Engineer
Email Bomb Protection
Multi-Tenancy Management
[Beta] Advanced Graymail Protection

Tutorials

MQL Guides

Reference

Message Data Model (MDM)
Message Query Language (MQL)
Metrics Collection in Self-Hosted Deployments

How-to Guides

Mimecast Migration Guide
Proofpoint Migration Guide

Integrations

OpenCTI
CrowdStrike Falcon Sandbox

Message Data Model (MDM)

A standardized JSON schema for representing an email message.

Updated 30 days ago

How to detect keywords or phrases in the body content of messages

Message Query Language (MQL)