KOKI Group Secures Global Workforce with Abnormal AI

KOKI Group is a global leader in power tools and accessories, headquartered in Tokyo, Japan. With a legacy of more than 100 years, they design and manufacture a comprehensive range of tools for metalworking, woodworking, construction, and specialized applications. KOKI’s portfolio of trusted brands — Metabo, HiKOKI, Metabo HPT, CARAT, and Sankyo Diamond Tools — is available in over 126 countries, delivering proven, reliable, and safe solutions that meet the toughest demands of today’s worksites.

The KOKI Group Email Security Challenge

When Sun Robin Flamm took charge of email security for KOKI Group's five global brands, the stack was fragmented: Metabo used a secure email gateway, all brands relied on Microsoft Defender, and KOKI Group operated with several Microsoft 365 tenants, which Sun needed to secure with a small team. Business email compromise (BEC) attempts were rising across the group. Phishing simulations created a recurring flood of user-reported false positives that Sun triaged manually, at the cost of real hours he couldn't spare. As the group moved to consolidate its tenants into one Microsoft 365 environment, Sun went looking for a platform that could protect all five brands without multiplying his workload. That's when he turned to Abnormal AI.

Customer Key Challenges:

• Company relied on fragmented email tools across five brands and several M365 tenants.
• BEC attacks increased across the global company.
• Phishing simulations triggered a flood of manual user-report triage.

Abnormal Solution:

• Inbound Email Security stops advanced BEC and phishing across all five brands, replacing gateway and Microsoft-only coverage.
• AI Security Mailbox automates user-report triage globally, giving employees instant responses and saving the team nearly 34 hours a month.
• Email Productivity, AI Phishing Coach, and Account Takeover Protection extend coverage to graymail, phishing simulations, and identity threats.

"We know we have something great with Abnormal, which protects us from 99% [of threats]."

— Sun Robin Flamm, Group Information Security Officer & Senior Director Enterprise Technology

The Abnormal AI Solution

KOKI Group deployed Abnormal AI across its unified Microsoft 365 environment, replacing an existing secure email gateway and Microsoft-only protection that had spanned several separate tenants and five brands. Rather than using rule-based filters, the Abnormal Behavioral Security Platform builds a per-identity behavioral model for every employee and every vendor connected to the organization that allows it to detect every anomaly in real time. Inbound Email Security and Account Takeover Protection secure all mail flow and protect against identity compromises, while AI Security Mailbox and Email Productivity automate both triaging user-reported emails and managing graymail at scale, respectively. AI Phishing Coach turns real-world attack patterns into targeted phishing simulations across the global workforce.

Why KOKI Group Replaced Its SEG with Abnormal

Word of mouth at CrowdStrike Fal.Con led Sun to Abnormal. A proof of concept against a competitor and Microsoft Defender sealed the decision, and Inbound Email Security now stops 5.7K advanced attacks every month. AI Security Mailbox has been the biggest operational shift. Running phishing simulations for thousands of employees globally now generates almost no manual triage, saving the team an average of 34 hours every month. Email Productivity remediates an average of 174K graymail messages monthly, adapting to each user's preferences. With AI Phishing Coach, Abnormal rapidly delivered a feature request to match the group's Exchange Online external-banner rules, confirming the team's development pace.

"[AI Security Mailbox] is almost perfect and it's a big game changer in terms of reducing our workload, fatigue around it and also for the users because they will get an instant reply."

— Sun Robin Flamm, Group Information Security Officer & Senior Director Enterprise Technology

A Trusted Foundation for Global Email Security

With email security handled across all five brands, Sun has redirected his team's attention elsewhere, freeing up bandwidth to focus on other strategic security priorities. Abnormal gives him the confidence to make that shift. He's already referred two German security partners to Abnormal and takes reference calls on its behalf regularly. He says Abnormal and CrowdStrike are the only two products he recommends that way, a distinction that reflects how fully the platform has embedded itself in KOKI Group's security strategy.

Abnormal Products in Use:

• Inbound Email Security
• Account Takeover Protection
• AI Security Mailbox
• Email Productivity
• AI Phishing Coach