Tessian: The AI Email Security Company Now Powering Proofpoint’s Global Defence
Tessian was a cybersecurity company that developed advanced protection for email threats and data loss. Its technology focused on the human mistakes and risky actions that often lead to serious security incidents. The company helped organisations defend against phishing, business email compromise, insider threats, misdirected emails and sensitive data exposure. It is now part of Proofpoint after the acquisition was completed in December 2023.
What Is Tessian?
Tessian was founded in 2013 by Tim Sadler, Edward Bishop and Thomas Adams. The founders focused on a major weakness in business security: people often create risks through everyday email activity. Traditional security tools mainly rely on fixed rules, known threat signatures and blocklists. Tessian used machine learning and behavioural analysis to understand how people normally communicate and identify activity that seemed unusual or dangerous.
The Origins of Tessian
The company developed a people-focused approach called Human Layer Security. This approach recognised that employees can make mistakes, fall for convincing scams or deliberately move company data without approval. Its technology studied email relationships, communication patterns, recipients, attachments and message content. This allowed the system to identify unusual behaviour without creating unnecessary disruption for employees.
Before its acquisition, the company had offices and staff connected with London, Boston, San Francisco and Austin. Its LinkedIn page still contains historical details, including a company size of 201–500 employees and Boston as its main headquarters.
Tessian Quick Info
| Detail | Information |
|---|---|
| Company name | Tessian |
| Founded | 2013 |
| Founders | Tim Sadler, Edward Bishop and Thomas Adams |
| Industry | Cybersecurity and email security |
| Main focus | Phishing protection and data-loss prevention |
| Key products | Guardian, Enforcer and Defender |
| Acquisition | Acquired by Proofpoint |
| Acquisition date | 19 December 2023 |
| Current status | Tessian technology operates within Proofpoint |
| Headquarters | Formerly Boston, with offices in London and the United States |
| Parent company | Proofpoint, Inc. |
How Tessian Human Layer Security Worked
Tessian combined artificial intelligence, machine learning and behavioural data science. Instead of checking an email only against a fixed security rule, the system examined the context surrounding the message. For example, it could identify whether an employee was sending a sensitive file to a new recipient, using an unusual personal address or communicating with a person outside the normal business network.
Protection Against Human Error
A common mistake occurs when an employee selects the wrong recipient from an automatic address suggestion. Another risk arises when a confidential file is attached to the wrong email. The platform could warn the sender before delivery and explain the reason for the warning. This helped employees correct mistakes before sensitive information left the organisation.
The system also recognised risky behaviour involving personal email accounts, unfamiliar domains, unusual attachments and abnormal communication patterns. This approach reduced dependence on manual reviews by security teams.
Protection Against Malicious Behaviour
Not every data-loss incident is accidental. Employees may copy confidential files before leaving a business, send intellectual property to a personal address or share documents with an unauthorised third party. Behavioural analysis helped security teams understand who was involved, what data was being moved, where it was going and whether the activity matched normal work duties.
Tessian Products and Capabilities
The company developed three important products: Guardian, Enforcer and Defender. Each product addressed a different area of email security and data protection.
Tessian Guardian
Guardian focused on accidental data loss. It helped prevent misdirected emails, incorrect recipients and misattached files. The system assessed the relationship between the sender and recipient, the sensitivity of the content and the normal communication history between both people. When risk was detected, the sender could receive a warning before the message was delivered.
Guardian was valuable for law firms, financial institutions, healthcare providers and professional organisations that regularly handle confidential material.
Tessian Enforcer
Enforcer focused on intentional or suspicious data movement. It helped protect intellectual property from unauthorised transfer through email. The product could identify data exfiltration without depending only on predefined deny rules. It examined behaviour and context to detect when an employee might be sending sensitive material to an external or personal account.
This capability supported investigations involving insider risk, departing employees, confidential documents and corporate data theft.
Tessian Defender
Defender provided protection against advanced email attacks. It focused on spear phishing, business email compromise, impersonation and other threats that can bypass older email gateways. The system analysed the context of incoming messages and looked for warning signs linked to account takeover, unusual sender behaviour and social engineering.
It also provided in-the-moment guidance. Users could receive a warning that helped them understand why a message might be unsafe before opening a link or responding to the sender.
In-Moment Security Coaching
One important feature was its ability to educate users during real situations. Instead of relying only on annual security training, the system delivered guidance when an employee faced a genuine risk. This method made security awareness more practical. It helped employees recognise suspicious behaviour while they were working rather than during a separate training session.
Tessian Funding and Investors
Tessian attracted support from major technology investors. Its backers included March Capital, Sequoia Capital, Accel, Balderton Capital, Latitude and other investment groups. The company completed a $65 million Series C funding round in 2021. The round brought its total funding above $120 million and valued the business at approximately $500 million.
This investment reflected strong interest in machine-learning security products. At the time, organisations were facing increasing phishing attacks, remote-working risks, insider threats and data-protection obligations.
Tessian and Proofpoint
Proofpoint announced an agreement to acquire Tessian on 30 October 2023. The purchase price was not disclosed. The acquisition was completed on 19 December 2023. Proofpoint welcomed the technology and team into its wider cybersecurity business.
The purpose of the deal was to combine Proofpoint’s threat intelligence and enterprise security platform with Tessian’s behavioural AI capabilities. This combination created stronger protection against both external attacks and internal data-loss events. It also extended protection across email, cloud services and endpoint environments.
Tessian Technology After the Acquisition
After the acquisition, the brand stopped operating as a fully independent security provider. Proofpoint began using the technology within its own product range. In 2024, Proofpoint introduced Adaptive Email Data Loss Prevention. This product combined Proofpoint’s email-security technology with behavioural and dynamic detection developed by Tessian.
The solution can identify misdirected emails, incorrect attachments, unusual recipient behaviour and possible data exfiltration. It also provides security teams with stronger investigation and response capabilities. The old Guardian, Enforcer and Defender names may still appear in technical documents or older customer systems. Current buyers should deal directly with Proofpoint to confirm product names, support arrangements and availability.
Proofpoint’s Current Business
Proofpoint is headquartered in Sunnyvale, California, and is owned by private-equity firm Thoma Bravo. Proofpoint became private after Thoma Bravo completed a $12.3 billion acquisition in 2021. The company now protects email, cloud services, endpoints, collaboration tools, social communications and artificial-intelligence workflows. Its products address phishing, malware, ransomware, account takeover, business email compromise, insider threats, data loss and compliance requirements.
Proofpoint’s current chief executive is Sumit Dhawan. The company has more than 4,500 employees and serves enterprises, governments, banks, universities, healthcare organisations and small businesses through managed service providers.
Who Used Tessian Technology?
The platform was especially useful for organisations that manage confidential information. This included law firms, banks, investment companies, healthcare groups, pharmaceutical businesses, technology companies and universities.
Businesses handling client records, financial data, intellectual property or regulated information could use behavioural email protection to reduce human error. The technology also supported compliance teams, security operations centres, legal departments and human-resources teams investigating insider-risk incidents.
Strengths and Limitations
The main strength was its focus on context. The system did not treat every employee or message in the same way. It used communication patterns and behaviour to identify unusual activity. Another benefit was the ability to warn users immediately. This could prevent mistakes before they became costly security incidents. However, enterprise security tools require careful configuration, staff training and regular policy reviews. Product availability, pricing and support now depend on Proofpoint’s current packages and customer agreements.
Final Assessment
Tessian was a respected AI-powered email-security company founded to protect the human side of cybersecurity. Its products addressed accidental data loss, malicious insiders, phishing and advanced email attacks. The acquisition by Proofpoint was completed in December 2023, and the technology now supports Proofpoint’s Adaptive Email DLP and wider data-security portfolio.
Also Read



