Sold by
Advanced Email Security
As the top attack vector, email demands the strongest possible protection. We block the most dangerous email-borne attacks, from phishing and ransomware to BEC, social engineering, payment fraud, and impersonation. Mimecast Email security: work protected
Reviews (394)
Warren Dettmann
Email security has reduced IT workload and keeps phishing attacks well under control
Reviewed on Oct 20, 2026
Review from a verified AWS customer
What is our primary use case?
We have been conducting end-user cybersecurity training with our users to identify potential phishing emails. We do not receive many phishing attempts from outside sources, though one or two do occasionally get through. With the training that Mimecast Advanced Email Security offers and our internal cybersecurity training, we educate users on what to look for in emails. We teach them to verify if an email appears to be coming from a legitimate source and what should or should not be included in legitimate communications. We train users not to click on links or download Word documents from unknown senders. Generally, users forward suspicious emails to IT for assessment. We have a fairly effective system in place.
Every now and again, a user will click on something they should not have, and that is when our Microsoft E5 licensing comes into play. The end-user device security that comes with our Microsoft E5 licensing will detect when someone is running something they should not be running, or if a script runs on their computer. The system deletes the executable and notifies us. From a security perspective, the email solution combined with Microsoft is working effectively, and we do not get too many incidents. Mimecast Advanced Email Security and Microsoft are working well together for us.
How has it helped my organization?
Mimecast Advanced Email Security has definitely reduced the amount of work that our IT team has to do, as it automates quite a bit of our processes. Combined with the Microsoft solution, this makes a significant difference. We previously used Barracuda, and I remember spending every day releasing emails and making changes to policies. After we moved to Mimecast Advanced Email Security, I probably receive only one or two email requests a day regarding administrative holds. The other IT team members also receive a few each day. Our users are allowed to release emails that appear borderline legitimate, and we have trained them how to do this themselves. If an email looks suspicious and has an administrative hold, the system notifies us. I probably only receive two or three of those notifications in a week.
Our security is tightened quite well with the combination of Mimecast Advanced Email Security and Microsoft because mail flows through both systems. Mail routes into Mimecast Advanced Email Security first, and then Mimecast Advanced Email Security routes it into Microsoft. Both systems check for spam, but Mimecast Advanced Email Security is the primary filter. Most clean mail comes through to Microsoft, and anything that gets through both systems is generally caught by the endpoint detection engine. We do not have a lot of malware breaking through. There is some phishing every now and again, but our users are trained to identify it. They are generally quite good at recognizing when an email is coming from a weird email address and asking them to click a link or download something they did not request. I receive quite a few requests from users who have received phishing emails or spear phishing attempts. Occasionally someone will click on something if they were not paying attention during training or made a mistake, as people differ from one another. However, we have found a fairly good balance for security on the mail side. The mail side of things is working very well.
What is most valuable?
We are using Mimecast Advanced Email Security mainly for the security side, as all mail routes through it. The anti-spam side is very good. Our users do not receive a lot of unsolicited mail. Using all the policies set according to best practices and most of the default settings in the product, we stop probably hundreds or thousands of emails from reaching users. The users seem quite happy with this. Every now and again, we get a false positive that we as administrators need to release, or the users can even release the email themselves. We are very happy with the product in this regard. Mimecast Advanced Email Security uses DKIM and DNS protocols to bounce mail if it is not from a legitimate domain or does not have a signature. The anti-spam handling is very good, as it picks up a lot of junk, malware, and other threats. We are quite satisfied with the product.
What needs improvement?
Moving forward, there is concern about AI and security. I am hoping that Mimecast Advanced Email Security has a good plan to mitigate threats posed by AI, as those AI engines are increasingly becoming more intelligent and difficult to stop. These engines can execute mass attacks very quickly and in a short space of time. There is a need for some sort of security AI engine that is monitoring for things like that. The better the security and the more aware it is of threats that AI poses, the better it will be for all of us. Mimecast Advanced Email Security, and not just everyone, is going to have to look at this, as all these security companies will face this issue going forward.
For how long have I used the solution?
We have been using Mimecast Advanced Email Security for approximately six or seven years now. We have been quite happy with the product. I heard a story that Mimecast may be stopping some of their security services next year, though I am not certain if this is true since that is what they are currently providing for their mail security.
How are customer service and support?
I would give Mimecast Advanced Email Security's customer service a high score of nine out of ten.
How was the initial setup?
We deployed Mimecast Advanced Email Security quite straightforwardly. We were using Microsoft System Center Configuration Manager at the time, so we deployed the Mimecast Advanced Email Security client to all machines through that system. Everyone's machine received the client, and then we sent out an email explaining that they had this new system and showing them how to access the queue and release emails. We conduct two cybersecurity training events internally on a biannual basis, during which we show users how to use the product and what to look for. Every now and again, we test the users by sending out an internal phishing email to see who clicks on it. The system records who clicks on the email or opens it, and whether they forward it through to IT. We try to trick users into opening a phishing email, and they are generally quite good at not clicking on it. The deployment involved a combination of training and technical setup. We deployed the client, sent out an email to let people know who to contact and what to look out for. We have been using Mimecast Advanced Email Security for a long time now, so everyone has become quite accustomed to it. The deployment was very easy.
We have not changed too many policies along the way and have kept most settings at their defaults. The security side of things is tightened down quite nicely as it is. We have not had to modify the product much. We have created a few policies in different subsections, but for each subsection of policies available, we typically have a default policy and one or two extra policies for something specific. The product as it comes has been good for our needs.
What's my experience with pricing, setup cost, and licensing?
For what we get, I would say the pricing is fair. Mimecast Advanced Email Security does quite a lot. We focus on the security side of it, but we do not have a massive IT team, and the product really reduces any issues where IT has to step in and handle something. It has worked well in our situation. Price-wise, it is quite competitive, and it offers a lot.
I cannot remember exactly, but I believe we purchased it from a third party. I do not think we deal directly with Mimecast Advanced Email Security on the fiscal side. I cannot even remember who we originally bought it from, but it was an IT company, either a local one or a national one, that sold us the product. I do not think we deal directly with Mimecast Advanced Email Security financially.
What other advice do I have?
AI is quite pervasive and can flood you with attacks. It can work out what products you are using and then send sophisticated attacks all in the blink of an eye. It does its own reconnaissance, which is obviously a concern. AI, in terms of malware or malicious intent, is going to be an ever-increasing security risk because it is not a hacker sitting there doing reconnaissance and then running scripts to figure out what they can or cannot do. This is going to happen at lightning speed, and it has access to such a massive database that allows it to know what it can and cannot do. As a result, it is going to be far more sophisticated and worse for end users or companies than any human or team of hackers could be because it has all that information. As AI becomes more intelligent and is increasingly used in the wrong way, there will probably be a need for some sort of AI to combat it. There will need to be an AI engine running on our side to monitor for AI attacks because a human or a small IT team trying to stop an AI engine running a thousand agents and attacking from a thousand different angles might not win that battle. Security software is going to have to evolve alongside the AI threat.
Otherwise, I am quite happy with the product. We have been using it for a number of years. A lot of people that I know in the IT industry use Mimecast Advanced Email Security for their security and as their anti-spam engine. It has been a good experience from my side and from other people I have spoken to. The consensus is that it is very good. I would give Mimecast Advanced Email Security a high score of nine out of ten overall.
Gautham-Vakapalli
Email protection has blocked threats effectively and supports strong dlp with sufficient retention
Reviewed on Oct 07, 2026
Review provided by PeerSpot
What is our primary use case?
I have been working with Mimecast Advanced Email Security for almost two years. I started working with Trend Micro before but not currently. Mimecast has been a product I have worked with extensively.
What is most valuable?
In terms of Mimecast Advanced Email Security, I think it is top in the market because of an MX record exchange. Mimecast also introduced cloud email security, which is a good feature. Another valuable feature that Mimecast developed is a product similar to Safetica, which can be described as a DLP feature. This DLP feature has been helping my clients significantly. Mimecast DLP solution is really effective these days. Additionally, Mimecast Advanced Email Security has a 14-day retention period. I know there are other products with longer retention, but 14 days of retention is more than enough for most of my customers. The retention period is one of the best features in Mimecast Advanced Email Security in terms of email security.
Mimecast Advanced Email Security blocks everything effectively. However, there is a delay when receiving an email. All emails have to go to Mimecast's cloud, and then after processing, they land in our Microsoft email box. There might be some delay, but it blocks a lot of emails and provides an update indicating whether you want to release or delete it. These features are really good. However, I personally believe that API email integration would be better compared to just an MX record change. This would eliminate email delays. Although it is a millisecond delay, API integration would be preferable rather than having a cloud gateway. Check Point has an API integration where it can directly integrate with Outlook, making it much easier and requiring less time to deploy.
What needs improvement?
The only workload issue with Mimecast Advanced Email Security is that it causes a delay when receiving an email. Although it is a millisecond delay, I do not believe this is ideal. When a PDF is attached to an email, Mimecast scans the entire PDF inside that email, which is a good feature. However, I wish Mimecast Advanced Email Security could extend its scanning capabilities to Microsoft Teams. Even for internal teams where we communicate within the corporation and send PDF files through Teams, I wish there were a feature to scan those PDFs as well. Unfortunately, this feature is not currently available.
Mimecast Advanced Email Security is a good product overall. There has been a lot of improvement compared to the previous year. However, it has remained the same since the last two years. There has not been much improvement other than Agentic AI and DLP. I wish Mimecast would invest more in research and development, particularly for Teams and all Microsoft Office products.
In Teams, the need to scan Teams communications is essential. Although they added DLP, I also wish they could have API integration for Teams and Microsoft Office products, not just Outlook. In Outlook, we can download the PDF and send it through Teams. If there could be integration across the entire Microsoft product suite, that would be much better.
Mimecast Advanced Email Security is adequate, but it has remained the same since the last two years with not much research and development. Most of my customers are happy with it. Mimecast introduced Agentic AI and Insider solutions, but I still wish they would invest more in research and development compared to Check Point. Check Point has an email security solution that is really effective when compared to Mimecast. If Mimecast could conduct more research and development compared to Check Point, that would be much better.
I would love to have API integration rather than having a cloud gateway for Mimecast Advanced Email Security. There is an email security gateway, which is actually the gateway component. Rather than having a cloud gateway, API integration would be preferable. Additionally, I would love to have deep security not just for Outlook, but also for other Microsoft M365 products. These days, traditional email security does not work as effectively. With AI emerging, traditional email security is less effective. Mimecast already introduced Insider, which is acceptable. A unified dashboard would be beneficial. I believe Mimecast has a unified dashboard, but I am not entirely certain. Check Point has a unified dashboard as well. I need to look into this further.
How are customer service and support?
My company has technical capabilities with pre-sales staff who handle technical support. I do not rely heavily on Mimecast Advanced Email Security support. I solve most issues internally approximately 99 percent of the time.
Which solution did I use previously and why did I switch?
Previously, I used Sophos, but no longer. I do not currently use Trend Micro. The other products I work with include Check Point.
What's my experience with pricing, setup cost, and licensing?
Mimecast Advanced Email Security pricing is competitive in the market these days.
What other advice do I have?
Mimecast Advanced Email Security recently introduced Agentic AI security. I am not certain about the specific features of this Agentic AI security. I believe they introduced it because everyone is adding AI to every product, and not every AI implementation is the same or works the same way. I am not very familiar with the features of Agentic AI. Mimecast Advanced Email Security must go through system integrators to reach customers. Mimecast Advanced Email Security cannot provide email security directly to customers without going through system integrators. I rate Mimecast Advanced Email Security with a rating of eight out of ten.
Information Services
Robust Email Security with Comprehensive Filtering
Reviewed on Sep 19, 2026
Review provided by G2
What do you like best about the product?
I like how Mimecast Advanced Email Security effectively filters suspicious emails without needing much manual work. The threat detection and visibility are really useful for quickly checking and addressing potentially risky situations. I also appreciate the email filtering and threat detection because it catches a lot of suspicious messages and provides full visibility into what is being blocked. Additionally, attachment protection adds another layer of security, helping us handle suspicious links or files before they reach our users.
What do you dislike about the product?
The platform works well overall, but the admin interface can take time to become familiar with. Reporting could also be a little more flexible, especially when creating custom reports. I'd like to see a simpler admin interface with easier navigation. More customizable filters and report templates would make it easier to get the specific information we need.
What problems is the product solving and how is that benefiting you?
I use Mimecast Advanced Email Security to protect against phishing and malware. It simplifies managing email security from one place and enhances threat detection without much manual effort. Email filtering and attachment protection add security, making it easier to handle suspicious messages.
Sanjeev S.
Comprehensive Email Security with Robust Controls
Reviewed on Sep 19, 2026
Review provided by G2
What do you like best about the product?
I really appreciate the overall depth of email protection that Mimecast Advanced Email Security provides, particularly in handling phishing, malicious URLs, attachments, and impersonation threats. The level of control available for security teams is impressive, and the policy controls are useful in configuring different customer requirements. I find the reporting and visibility features very helpful during deployment, as they allow us to understand what is being blocked and fine-tune policies. The administration is relatively straightforward once the initial configuration is set up properly, which I find quite beneficial.
What do you dislike about the product?
The initial setup can take some time, especially in complex email environments or when replacing an existing email security solution. Some policy tuning is also needed after deployment to reduce false positives. The reporting interface could be a little simpler and more intuitive for quick analysis.
What problems is the product solving and how is that benefiting you?
Mimecast Advanced Email Security strengthens email security and reduces risks like phishing, spam, and malicious links. It offers better visibility and control over email threats, providing an additional protection layer, especially helpful for Microsoft 365 environments.
Anonymous
Robust Data Protection with Easy Access to Emails
Reviewed on Sep 18, 2026
Review provided by G2
What do you like best about the product?
I appreciate how Mimecast Advanced Email Security protects sensitive client and customer data, including personal and financial information. Living in Germany, privacy is crucial, and this tool creates a safety bubble that relieves worries about identity theft and data breaches. It's highly effective at managing and separating personal data from company data, which is super helpful in preventing crimes. I am impressed by its protection from phishing attempts and its notifications that allow me to still read emails, so I don't miss important ones.
What do you dislike about the product?
Just the interface colors, I find boring.
What problems is the product solving and how is that benefiting you?
Mimecast Advanced Email Security protects sensitive personal and financial data from data leaks, breaches, and identity theft. It's an essential tool for maintaining privacy and cybersecurity, providing peace of mind with phishing protection and important email notifications.
Insurance
Protection against the enterprise email security
Reviewed on Sep 18, 2026
Review provided by G2
What do you like best about the product?
Strong AI-driven threat intelligence for blocking emails, effectively stopping phishing, malware, and ransomware before they reach users’ inboxes. User management is straightforward, and the integration with M365 is smooth.
What do you dislike about the product?
Some of the things I dislike are that, at times, even genuine emails get blocked, and this needs to be reviewed and cleared by the admin. There is also a learning curve for admins when it comes to managing the policies.
What problems is the product solving and how is that benefiting you?
Its advanced AI features for phishing, malware, and ransomware protection are helping the organization reduce the risk of data exposure or loss, while also blocking user-impersonation attacks. This, in turn, helps the organization lower overall risk, strengthen brand protection, and support better compliance.
Alex M.
Good Security Features, Needs More Enthusiasm
Reviewed on Sep 18, 2026
Review provided by G2
What do you like best about the product?
I find Mimecast Advanced Email Security easy to navigate, which is refreshing. The centralized controls and straightforward threat filtering are especially effective, making potentially harmful content easier to identify and manage. The initial setup was also pretty easy, which I appreciate in any software.
What do you dislike about the product?
I dont dislike any of it
What problems is the product solving and how is that benefiting you?
I find Mimecast Advanced Email Security provides an extra layer of protection, making harmful emails easier to identify and manage with its centralized controls and effective threat filtering.
Education Management
AI reliably detects dangerous emails – flexible, simple, and fairly priced
Reviewed on Sep 15, 2026
Review provided by G2
What do you like best about the product?
The AI-powered detection of dangerous emails, and the simple and straightforward operation. Everything is adjustable and flexible. And the costs remain reasonable, it could be much more expensive.
What do you dislike about the product?
Initially, it wasn't easy to discern from the plans and the platform what the best solution for our company was. However, after applying our compliance requirements, it became feasible to choose the right product.
What problems is the product solving and how is that benefiting you?
We have a distributed team that relies on SAS solutions for all processes, which we also offer in other areas. Therefore, we need a solution that can operate without a dedicated server or own infrastructure.
Nezar S.
Solid protection, dated interface
Reviewed on Sep 14, 2026
Review provided by G2
What do you like best about the product?
Honestly, it's how much it stops before I ever see it. Phishing and spoofed emails just don't make it through, and the link and attachment scanning has caught stuff that would've slipped past us otherwise. The admin side is simple too, easy to pull logs or release something from quarantine without digging around.
What do you dislike about the product?
The false positives are the main annoyance. Legit emails end up in quarantine more often than I'd like, so there's a bit of babysitting involved. The interface also feels dated in spots, and finding the right setting sometimes takes longer than it should. Nothing dealbreaking, just friction.
What problems is the product solving and how is that benefiting you?
Mostly it's keeping phishing and business email compromise attempts away from our people. We were relying on staff to spot sketchy emails on their own, which isn't a great plan. Now most of it gets stopped before it lands, and the stuff that does get through is flagged clearly enough that nobody has to guess. Less cleanup work for us, fewer 'is this real?' messages from users.
Nikolay N.
Strong Phishing Protection
Reviewed on Sep 13, 2026
Review provided by G2
What do you like best about the product?
I was working in one project in my current company it does a good job of detecting and blocking phishing attempts, malicious links, and suspicious emails before they reach the inbox. The setup and onboarding were fairly straightforward, and there are plenty of resources available if you need help understanding a feature or configuring a policy.
What do you dislike about the product?
The main thing I would improve is the user interface. There are quite a few settings and options, and it can take some time to find exactly what you need or understand how certain policies work. Some parts of the administration could be more intuitive and easier to navigate. Performance has generally been good, but the overall experience could be simpler for administrators.
What problems is the product solving and how is that benefiting you?
As I already mentioned Mimecast helps protect us from phishing, spam, malicious links, and other email-based threats. It reduces the amount of potentially dangerous email reaching users and gives the IT team better visibility into suspicious messages. This saves time when investigating threats and gives more confidence that users are protected from common email attacks.