Material Security AI agents (user-reported phishing agent and OAuth Remediation Agent)

What it does

Material Security connects directly to Google Workspace and Microsoft 365. It covers inbound email threats, account takeover containment, sensitive data in mail and files, and connected-app (OAuth) security. Its 'Automate User Report Response' page says it deploys 'an AI agent' to triage reported emails. Each report is classified as malicious, spam or safe using machine learning, organisational context and semantic analysis, and uncertain verdicts are flagged for manual review. Similar messages are grouped into one case, and policy-based remediation runs across the organisation, from deletion to link speedbumps. Each verdict comes with a plain-language explanation, and teams can start with suggested classifications before moving to full automation. Material's OAuth Remediation Agent watches third-party apps and AI agents connected to Google Workspace. It classifies each grant by scopes, runtime behaviour, vendor reputation and blast radius, and can revoke OAuth tokens on its own. It can also ask users in Slack to confirm an authorisation, or require analyst approval for business-critical apps. Figures such as 'cut phishing triage by up to 91 percent' are vendor claims. Pricing is published per user.

Frameworks

No framework tags verified yet.

Pricing (as published)

Published: Essentials $4 per user/month and Advanced $6 per user/month (billed annually, plus a fee based on Shared Drive size). Essentials includes the automated agent for user-reported phishing. Advanced adds the agent that investigates, classifies and remediates OAuth grants. ATO Resilience is +$3 per user/month as an add-on or $5 stand-alone. Enterprise is by quote.

Tasks

phishing triageemail securityremediationincident responsecloud security

Sources

1. material.security/use-cases/automate-user-report-response (primary)
2. material.security/
3. material.security/product/email
4. material.security/product/oauth-agent
5. material.security/pricing
6. material.security/privacy

Last verified 18 Oct 2026. Framework tags indicate relevance, not certification; “vendor-claimed” items are as marketed by the vendor. Spotted an error? Submit a correction or email sales@heritageservices.online. See our methodology.

Use-case comparisons

• Email security and phishing-response AI agents — 13 verified listings (Triage of user-reported phishing, autonomous email threat remediation and AI-run phishing simulation)

Compare Material Security AI agents (user-reported phishing agent and OAuth Remediation Agent) with

• 
  7AI agentic security platform vs Material Security AI agents (user-reported phishing agent and OAuth Remediation Agent)
• 
  Abnormal AI Security Mailbox (Abnormal AI for Government) vs Material Security AI agents (user-reported phishing agent and OAuth Remediation Agent)
• 
  Adaptive Security Agentic Email Security and Phish Triage vs Material Security AI agents (user-reported phishing agent and OAuth Remediation Agent)
• 
  Aikido Attack AI Pentesting vs Material Security AI agents (user-reported phishing agent and OAuth Remediation Agent)
• A
  Andesite Human-AI SOC (Azimuth for Government) vs Material Security AI agents (user-reported phishing agent and OAuth Remediation Agent)
• 
  Attic IVON (Agentic MDR for Microsoft 365) vs Material Security AI agents (user-reported phishing agent and OAuth Remediation Agent)
• 
  AWS Continuum for penetration testing (formerly AWS Security Agent) vs Material Security AI agents (user-reported phishing agent and OAuth Remediation Agent)
• 
  Check Point Email Security AI agents (Harmony Email & Collaboration, formerly Avanan) vs Material Security AI agents (user-reported phishing agent and OAuth Remediation Agent)
• 
  CloudSEK AI Agents vs Material Security AI agents (user-reported phishing agent and OAuth Remediation Agent)
• 
  Conveyor vs Material Security AI agents (user-reported phishing agent and OAuth Remediation Agent)

Alternatives

• 
  7AI agentic security platform — Boston-based agentic security platform where swarms of specialised AI agents categorise, investigate and reach a determination on every alert, escalating only what needs a person, with optional managed service (PLAID ELITE).
• 
  Abnormal AI Security Mailbox (Abnormal AI for Government) — Autonomous agent for email security operations that triages user-reported emails, removes related malicious campaign messages across the organisation and replies to reporters; included in Abnormal AI for Government, which is FedRAMP and GovRAMP Moderate authorized.
• 
  Adaptive Security Agentic Email Security and Phish Triage — API-based 'agentic email security' that re-analyses inbound mail after native filtering with ML and LLM reasoning and removes confirmed threats across every inbox automatically (configurable human-in-the-loop thresholds). AI Phish Triage classifies employee-reported emails and acts on them, feeding Adaptive's simulations and awareness training.
• 
  Aikido Attack AI Pentesting — Belgian autonomous AI pentest: many agents map the app, test attack paths and re-exploit each finding to confirm it, with a same-day audit-grade report.
• A
  Andesite Human-AI SOC (Azimuth for Government) — Agentic SOC platform with configurable agents for alert triage, enrichment, investigation and remediation under analyst oversight; its government offering is FedRAMP High authorized.
• 
  Attic IVON (Agentic MDR for Microsoft 365) — Dutch AI SOC agent for Microsoft 365 SMBs that triages, investigates and contains identity alerts across Defender, Sentinel and Entra ID with human sign-off.

See all Material Security AI agents (user-reported phishing agent and OAuth Remediation Agent) alternatives →

Stay updated