Mimecast Email Security

Mimecast has built its market position on bundling three services that most enterprises buy separately: email security filtering, email archiving for compliance, and email continuity during outages. The integrated platform approach means administrators manage all three from a single console with unified policy controls rather than stitching together point solutions.

On the security side, Mimecast uses a multi-layered inspection pipeline — reputation filtering, sandboxing (Mimecast Threat Intelligence), URL protection with click-time scanning, and an impersonation protection engine that flags display-name spoofing and lookalike domains. The platform also offers internal email protect, scanning email sent between users within the same Microsoft 365 tenant to catch compromised account activity.

The archiving module captures a tamper-proof copy of every email in Mimecast's cloud infrastructure, with legal hold and e-discovery search built in. For regulated industries (financial services, healthcare, legal), this eliminates the need for a separate archiving solution.

Continuity is Mimecast's differentiator against pure-play email security vendors. If Microsoft 365 goes down, Mimecast routes email through its own infrastructure and provides a lightweight webmail interface so users can continue sending and receiving. The company guarantees 100% availability for inbound email delivery.

Pricing starts at approximately $4.50/user/month for Protect (security only) and scales to $9–$12/user/month for bundles that include archiving and continuity. Mimecast is best evaluated alongside Proofpoint and Barracuda for mid-market organizations with 100–5,000 mailboxes.