Mimecast

Mimecast is email security software for Microsoft 365, Google Workspace and on-premise mail, with insider risk and awareness tools. Quote only.

Mimecast stops phishing, business email compromise and malware before they reach a mailbox, and keeps watching mail after it lands. Email security is where the London company began in 2003, and it remains the flagship of a wider platform. That platform now also protects company data from insider risk and shapes how employees behave around security. Advanced Email Security deploys in two ways. The Cloud Gateway sits in front of any mail server through an MX record, while API-based deployment connects to Microsoft 365 and Google Workspace with no MX change. Its protections include attachment sandboxing, on-click URL analysis, AI-powered QR code protection and social graphing to catch impersonation. Dynamic bannering warns readers inside a suspicious message, and Threat Remediation removes malicious mail after delivery. Mailbox Continuity, Secure Send encryption from Outlook, email DLP and DMARC Analyzer cover outages, sensitive messages and domain authentication. Mimecast fits security and IT teams whose staff work in email and chat all day, on Microsoft 365, Google Workspace or their own servers. Teams that want protection without rerouting mail start with the API deployment, while teams that also need continuity choose the gateway. Security leaders worried about data leaving through employees or AI agents add Incydr, which applies adaptive data protection to insider risk and shadow AI. Organizations building an awareness program use Engage to aim training at the employees most likely to cause an incident. Inbound filtering is only part of the work: outbound and internal mail are scanned too, and unusual logins or impossible-travel sessions flag a mailbox that may be compromised. Protection for Microsoft Teams and Slack carries the same checks into chat, where employees now spend much of their day. Integrations with CrowdStrike, Netskope and Palo Alto Networks XSOAR bring its email alerts into a security team's investigation and response work. Analysts short of time can hand the user-reported queue to Managed Threat Response, a round-the-clock service that triages every report. The daily job is keeping phishing, impersonation and malicious attachments out of employee inboxes, and keeping mail moving when the primary service goes down.