Mimecast Email Security

Mimecast Mailbox Continuity guarantees 100% email processing uptime, providing a backup web interface that allows users to access live and historical email on any device during planned outages, ransomware attacks, or server failures. No other major email security vendor commits to a 100% processing uptime SLA as standard.

Every email is stored in three geographically dispersed immutable copies with configurable retention from 1 day to 99 years. Archive search returns results within 7 seconds across multi-year archives, critical for eDiscovery, regulatory compliance (GDPR, HIPAA, SOX), and litigation holds. Proofpoint requires archiving via partners; Microsoft Defender has no dedicated continuity or archiving.

The Human Risk Command Center (launched April 2025) centralises email, collaboration, endpoint, and identity telemetry to assign an individual risk score to every employee. Users who click suspicious links are automatically enrolled in targeted training and may have access temporarily restricted, reducing human risk without broad policy changes.

Mimecast Targeted Threat Protection rewrites all URLs for click-time analysis and routes suspicious attachments through a multi-engine sandbox. Social graphing detects unusual communication patterns and identity anomalies, catching impersonation and BEC attacks before users interact with them. Computer vision identifies brand impersonation in login page replicas.

Mimecast DMARC Analyzer provides full visibility into all email streams, automatically monitors SPF and DKIM alignment, and guides organisations from initial DMARC policy deployment through to full enforcement. Brand Exploit Protect scans quadrillions of web destinations to identify phishing sites using your brand before they launch live attacks.

Mimecast's security awareness training is built into the same platform as email security, meaning training programmes can be automatically triggered by actual threat events. Users who receive a real phishing attempt can be immediately enrolled in targeted training, closing the gap between threat exposure and security education.

Mimecast offers both traditional MX-redirect Cloud Gateway deployment (for deeper inspection and more granular policy control) and API-based Cloud Integrated deployment (for instant connectivity without DNS changes). Both options use identical detection engines, so organisations can choose the approach that fits their operational constraints.

Mimecast's Integrations Hub provides native connections to over 60 security platforms, including CrowdStrike, Splunk, Microsoft Sentinel, Palo Alto Networks, Rapid7, ServiceNow, Netskope, and Zscaler. REST API 2.0 enables custom integrations, making Mimecast a natural fit within any enterprise security architecture.