The system is designed to operate across email, collaboration tools and web browsers, targeting phishing, compromised‑supplier and payment‑fraud attempts that appear to come from trusted contacts or familiar workflows.
Agentic Collaboration Security relies on what Proofpoint calls “intent‑based detection,” a model that evaluates what a message is trying to achieve and whether that objective makes sense in the broader context of business relationships, communication habits and user risk profiles.
The platform draws on the Proofpoint Knowledge Graph, a shared data layer that aggregates threat intelligence, known attack patterns, compromised‑supplier information and organisational data such as access rights and transaction history, feeding the Nexus Intent‑Based Detection Model that can make most decisions in under half a second.
Three core functions are delivered as a single, integrated solution: (1) intent‑based detection at the email gateway and inside the inbox, with dedicated models for high‑risk users such as senior executives and finance approvers; (2) automated threat investigation that reconstructs attacks, maps related messages and assembles evidence for response; and (3) adaptive user protection that adjusts safeguards or provides coaching for users deemed at higher risk.
Proofpoint says the approach addresses a growing problem for security teams as attackers move away from large‑scale, easily spotted campaigns toward highly targeted social‑engineering attacks that blend into ordinary corporate workflows, a trend amplified by AI‑driven automation.
“Attackers increasingly operate inside the relationships and workflows organisations already trust,” said Tom Corn, Executive Vice President and General Manager of Proofpoint’s Threat Protection Group. “Security needs to understand what an interaction is trying to accomplish, reason over the context, and act before the attacker succeeds— not with disparate tools, but as one system that gets smarter with every decision it makes.”
The new capabilities will be rolled out as an update to Proofpoint’s existing collaboration security offering, so current customers will not need to adopt a separate product. Availability may vary in some jurisdictions due to data‑residency regulations. Proofpoint serves more than 80 of the Fortune 100, over 14,000 large enterprises and millions of smaller organisations.