Global Tool Radar

Security & Privacy / Email Security Software

Mimecast Advanced Email Security Review, Pricing, Pros & Cons

Mimecast Advanced Email Security is a cloud-native email threat protection platform with AI, social-graph, URL, attachment, malware, impersonation, account-takeover, policy, and remediation controls, deployable through an MX-based secure email gateway or a Microsoft 365 API connection.

Research by Global Tool Radar Research SystemEvidence checked: Aug 12, 2026AI-assisted · No Global Tool Radar hands-on testView research methodology
Visit product websiteChoose similar tools to compare

Buying snapshot

Quick buying snapshot

A compact view of who this tool fits, what it costs, and what to confirm before choosing it.

Best for
  • The organization needs layered protection against phishing, BEC, impersonation, malicious URLs, QR codes, attachments, malware, and account takeover: Mimecast combines multi-vector analysis, social and identity context, time-of-click URL inspection, sandboxing, and account-takeover detection.
  • The email environment requires a gateway for Google Workspace, on-premises, hybrid, complex routing, or granular inline policy: MX-based protection is a cloud secure email gateway supporting Microsoft 365, Google Workspace, on-premises, hybrid, and other routed environments.
More buying conditions
  • A Microsoft 365 team wants fast API deployment without changing MX records or mail flow: The current API option connects directly to Microsoft 365 and uses the same detection stack as MX-based protection.
  • Security operations need native message investigation, automated remediation, and SIEM, SOAR, XDR, identity, or endpoint integrations: Mimecast publishes Analysis and Response, automated or manual removal, threat-feed export, and integrations across the security stack.
Not for
  • The buyer requires public numeric pricing, a self-service checkout, or a known contract term before vendor engagement: All three current packages require sales contact, and deterministic commercial terms are not public.
  • The organization needs API deployment for Google Workspace or an on-premises mail system: Current Mimecast API deployment is documented for Microsoft 365; Google Workspace and on-premises coverage are documented through MX-based routing.
More buying conditions
  • The purchase must include domain management, archive, awareness training, or 24x7 managed response without separate scope confirmation: Mimecast markets DMARC Analyzer, Cloud Archive, Engage, and Email Incident Response with separate product, add-on, or managed-service boundaries.
  • The team wants a lightweight product with minimal policy design and no ongoing false-positive or message-release operations: The product exposes granular controls, routing, policy, investigation, and remediation workflows, while current review evidence identifies complexity and tuning as recurring concerns.
Pricing
  • Sales-quoted Critical, Advanced, and Premium packages with no public numeric package price or published deterministic billing terms.
  • Critical · Requires quote · custom quote
Free or trial access
  • No permanent free plan is published. The exact-product AWS Marketplace listing advertises a 30-day trial, and Mimecast offers a risk-free proof of value; both are temporary evaluation routes and are not plans.

Product scope

Product functionality and purchase scope

This profile evaluates the current Advanced Email Security product, its Critical, Advanced, and Premium packages, and the threat protection delivered through current MX-based and Microsoft 365 API-based deployment. It includes the protections explicitly listed on each current package card, including Email Continuity for Cloud Gateway deployments, while keeping separately sold archive, DMARC, awareness, and managed services within their documented commercial boundaries.

Product checked: Aug 12, 2026

Functionality reviewed
  • Critical, Advanced, and Premium as the current new-customer Email Security package ladder
  • MX-based secure email gateway deployment for Microsoft 365, Google Workspace, on-premises, hybrid, and other routed email platforms
  • API-based deployment through direct Microsoft 365 integration without MX or mail-flow changes
  • AI, machine-learning, social-graph, language, sender-authentication, reputation, URL, attachment, sandbox, malware, QR-code, BEC, impersonation, and account-takeover detection where documented
  • Inbound, outbound, and internal message inspection and policy controls
  • Analysis and Response, automated or manual message remediation, and security-tool integrations
  • Email data-loss controls explicitly published for Advanced Email Security
  • Email Continuity in Critical, Advanced, and Premium when deployed through Cloud Gateway
Non-target functionality excluded from scoring
  • Email Security, Cloud Integrated as a fourth current plan; it is an existing Microsoft 365 gatewayless product and deployment lineage, not one of the current Critical, Advanced, or Premium package names
  • API-based and MX-based deployment as separate plans or duplicate offers
  • Collaboration Threat Protection as a standalone product for Microsoft Teams, OneDrive, and SharePoint beyond any package-level collaboration entitlement
  • DMARC Analyzer domain inventory, reporting, enforcement guidance, and managed DMARC service
  • Cloud Archive retention, e-discovery, legal hold, supervision, and archive search
  • Mimecast Engage awareness training, phishing simulation, adaptive nudges, and behavior management
  • Mimecast Email Incident Response and other analyst-led, advisory, implementation, migration, support, and managed services
  • Human Risk Management platform products such as Incydr and Aware
  • AWS Marketplace as a separate product plan or duplicated plan offer
Purchase paths

Pricing checked: Aug 12, 2026

  • Advanced Email Security on AWS Marketplace: An exact-product AWS Marketplace listing provides a private-offer acquisition route. It does not establish a separate package ladder or a public production price.

Pricing plans

Mimecast Advanced Email Security pricing table

Pricing checked: Aug 12, 2026

Official factConfidence 94%1 linked source

Critical, Advanced, and Premium are the current new-customer Advanced Email Security packages. Each requires sales contact, and public sources do not establish numeric prices, priced units, payment timing, minimum quantities, commitment terms, renewal rules, implementation fees, or support fees. API and MX are deployment choices for the same product rather than extra plans. The AWS Marketplace listing is an alternate acquisition route and is not duplicated as a package offer.

Official pricing page
PlanPriceBest for
CriticalMimecast Advanced Email Security Critical
  • Requires quote · custom quote
Organizations whose primary requirement is the current core AI-powered Email Security package.
AdvancedMimecast Advanced Email Security Advanced
  • Requires quote · custom quote
Organizations that want the current email-security package positioned to add data protection beyond the core threat-protection scope.
PremiumMimecast Advanced Email Security Premium
  • Requires quote · custom quote
Organizations seeking the package positioned for comprehensive protection across collaboration tools as well as email.

Plan upgrade triggers

Verified plan boundaries that can change the required edition.

Advanced Premium

The buyer needs the comprehensive collaboration-tool protection used to position Premium.

Supporting pricing evidence
What is included, connected, or sold separately

Product scope

What is included, connected, or sold separately

Material capabilities are separated by their verified relationship to the target product.

Separate Cloud Archive retention and e-discovery add-onAdd-on

Cloud Archive is listed as an available MX add-on and has its own product scope for retention, search, e-discovery, legal hold, and compliance.

Mimecast Cloud Archive
Official source
Separate DMARC domain monitoring and enforcement productAdd-on

Core email security performs authentication checks, while DMARC Analyzer is the separately named add-on for domain inventory, reporting, monitoring, and enforcement guidance.

Mimecast DMARC Analyzer
Official source
Separate adaptive awareness training and behavior-management productAdd-on

Engage is separately named and listed as an available MX add-on; simulations, training, nudges, and coaching are not assumed in core package pricing.

Mimecast Engage
Official source
AI-powered email threat protection across all current packagesIncluded capability

All three packages are presented as Email Security packages, and current account-takeover protection is explicitly included across all three for MX customers.

Plan: Critical: Included · Advanced: Included · Premium: Included
Official source
Choice of Microsoft 365 API or MX-based gateway deploymentIncluded capability

API and MX are current deployment architectures for the same Email Security product, not separate plans.

Official source
Comprehensive collaboration-tool protection explicitly positioned for PremiumIncluded capability

Premium is explicitly positioned to span collaboration tools. Exact platforms and lower-package states are not safely established by the public text.

Plan: Critical: Included · Advanced: Included · Premium: Included
Official source
Email Continuity included across all current packages for Cloud Gateway deploymentIncluded capability

The current package page explicitly lists Email Continuity under Critical, Advanced, and Premium, qualified to Cloud Gateway deployment. Older add-on material does not override this current new-customer package evidence.

Plan: Critical: Included · Advanced: Included · Premium: Included
Official source
Existing Microsoft 365 Cloud Integrated gatewayless deployment lineageIncluded capability

Cloud Integrated remains a current public and supported Microsoft 365 label, while 2026 material introduces full-stack API deployment under Email Security. It is not treated as a fourth package.

Mimecast Email Security, Cloud Integrated
Official source
Added data protection explicitly positioned for AdvancedPlan-dependent capability

Advanced is explicitly positioned to add data protection. Public text does not safely enumerate the additional controls or establish lower and higher package inheritance.

Plan: Critical: Not verified · Advanced: Included · Premium: Not verified
Official source
Separate 24x7 analyst-led response for user-reported emailSeparate product

This is a separately quoted managed service that investigates, classifies, and remediates user-reported messages.

Mimecast Email Incident Response
Official source
Separate Collaboration Threat Protection product for Microsoft collaboration toolsSeparate product

Mimecast separately markets protection for Microsoft Teams, OneDrive, and SharePoint; Premium also has package-level collaboration positioning whose exact entitlement requires confirmation.

Mimecast Collaboration Threat Protection
Official source
Native connections to security, identity, endpoint, and response toolsThird-party integration

Mimecast publishes more than 350 connections across endpoint, XDR, SIEM, SOAR, data protection, threat intelligence, and identity.

Mimecast Integrations
Official source
How the score is calculated

Scoring method

How the score is calculated

The score uses the category-specific buying dimensions below and their displayed weights.

This page is based on public product information, official sources, structured feature data, and multi-model AI evaluation. It is not a hands-on lab test unless explicitly stated. Confidence percentages describe our research indicators, not the probability that a claim is true or a measured accuracy rate.

Evidence confidence
84%
AI claim confidence
96%
Required-field evidence status
100%
Evidence freshness
54%
Field traceability
100%
Model agreement
91%
Why this confidence level
  • Evidence confidence uses source level and claim-to-source support; AI claim confidence is shown separately.
  • Required-field evidence status measures whether weighted required claims have evidence links; it does not mean every product behavior was independently verified.
  • 8 of 8 weighted claims have evidence links.
  • 2 A1 documentary official sources and 12 A2 official product sources are linked.
  • 2 independent review sources are retained, including 0 professional sources with an explicit hands-on method.
  • 4 weighted claims are past the review window.
  • No blocking evidence conflict was identified.
Threat protection efficacy20%
84

The platform combines sender authentication, reputation, URL, content, identity, behavior, attachment, and malware controls, which indicates broad threat coverage, while the supplied facts still leave some outcome measures unverified.

Detection accuracy17%
75

The platform uses AI, social-graph, computer vision, sandboxing, and multi-vector analysis, which supports detection quality, but the supplied facts do not provide measured accuracy rates or validation results.

BEC and identity protection15%
88

AI-powered impersonation, social-engineering, and account-takeover detection make this a direct fit for buyers prioritizing BEC and identity-abuse defense.

Response operations14%
83

Search, investigation, message removal, and automated remediation support operational response in the email environment, although the supplied facts do not establish every SOC integration or playbook detail.

Platform coverage and deployment13%
81

The product supports MX-based secure email gateway deployment and Microsoft 365 API deployment, which gives practical deployment choice, but current direct API deployment is documented for Microsoft 365 rather than every environment.

Governance and integrations11%
78

Threat intelligence and integrations with SIEM, SOAR, XDR, identity, endpoint, and data-protection tools support governance and ecosystem fit, but the supplied facts do not establish integration depth or synchronization guarantees.

Support and total cost10%
45

The product is sales quoted with no public numeric price, payment schedule, minimum quantity, or commitment term, which makes support and total-cost planning harder to estimate before a quote.

Public review signals

Broad, configurable protection with a meaningful administration curve

Exact-product Gartner Peer Insights and G2 aggregates are favorable. Review material commonly values phishing, malware, URL, attachment, impersonation, and spam protection together with policy flexibility and central administration. Complexity, learning curve, false positives, reporting clarity, and occasional manual tuning recur as cautions.

Public review signals updated: Aug 12, 2026

Commonly reported strengths

  • Broad phishing, malware, URL, attachment, impersonation, and spam protection
  • Granular policies and configuration options for complex email environments
  • Central administration, investigation detail, and remediation controls

Commonly reported concerns

  • The administration model and policy system can take time to learn
  • False positives and legitimate-message release can require ongoing attention
  • Reporting and interface clarity receive mixed feedback
G24.4/5
Review count
320 reviews
Source context
Mimecast Advanced Email Security Reviews on G2Exact product
View sourceHistory baseline established: Aug 12, 2026
Gartner Peer Insights4.5/5
Rating count
767 ratings
Source context
Mimecast Advanced Email Security in Email Security on Gartner Peer InsightsExact product
View sourceHistory baseline established: Aug 12, 2026

Marketplace app signals

Marketplace app signals

These source-reported ratings describe a specific marketplace listing, integration, mobile app, or add-on. They do not automatically represent the complete software product.

AWS Marketplace4.4/5
Rating count
343 ratings
Evaluated scope
Full product listing
Storefront
AWS Marketplace
View source
Score78
Pricing modelSales-quoted Critical, Advanced, and Premium packages with no public numeric package price or published deterministic billing terms.
Use caseprotect inbound, outbound, and internal email from phishing, business email compromise, impersonation, malicious links, malware, account takeover, and data loss
Company sizeEnterprise, Mid-market, Small business
Structured tags

Mimecast Advanced Email Security tag profile

Company size
  • Enterprise
  • Mid-market
  • Small business
Key features

Mimecast Advanced Email Security core capabilities

  • Critical, Advanced, and Premium package ladder
  • MX-based cloud secure email gateway and Microsoft 365 API-based deployment
  • Multi-vector threat protection across sender authentication, reputation, URLs, content, identity, and behavior
  • AI-powered BEC, impersonation, social-engineering, and account-takeover detection
  • Time-of-click URL analysis, credential protection, computer vision, and QR-code inspection
  • Static attachment analysis, active sandboxing, malware scanning, and safe-file conversion
Detailed strengths and purchase cautions
Pros

Why it is worth considering

  • The product supports layered protection across sender authentication, URLs, attachments, malware, identity, and behavior, which matches buyers trying to cover multiple email attack paths in one platform.
  • The platform includes Analysis and Response with search, investigation, message removal, and automated remediation, which supports security operations teams that need incident handling inside the same email-security stack.
  • The platform supports MX-based secure email gateway deployment and Microsoft 365 API-based deployment, which gives different deployment paths for routed mail environments and Microsoft 365 teams.
Cons

What to confirm before buying

  • The product is sales quoted, and the supplied facts do not publish numeric package prices, priced units, payment timing, minimum quantities, or commitment terms.
  • The package ladder lists Critical, Advanced, and Premium, but the supplied facts do not establish exact functional differences beyond package positioning, so buyers need written quote confirmation for edition selection.
  • The product uses granular policies, routing, quarantine, and remediation workflows, which may require more administration than buyers want in a small-team email tool.
Cross-model buying perspectives

Multi-AI review

Cross-model buying perspectives

Multiple AI models assess this tool against the same buying criteria, so you can compare scores, confidence, fit, cautions, and final views.

AI assessment updated: Sep 23, 2026

Score comparisonGPTxAIRange
Threat protection efficacy88799
Detection accuracy826814
BEC and identity protection91856
Response operations85814
Platform coverage and deployment877413
Governance and integrations79772
Support and total cost385214
email phishing bec detection90846
email malware url protection89872
email policy quarantine control84768
email incident response workflow86833
email delivery user experience63621
Where models differ
  • Detection accuracy: 68–82 (14-point range)
  • Support and total cost: 38–52 (14-point range)
  • Platform coverage and deployment: 74–87 (13-point range)
GPTAI-assisted buyer perspective80

A fit for mid-market and enterprise buyers that want layered email threat protection with MX-based deployment or Microsoft 365 API deployment, plus investigation and remediation workflows; it is less suitable for teams that need public pricing, a permanent free edition, or minimal policy administration.

Review confidence
80/100
Model details
Strengths
  • The product supports layered protection across sender authentication, URLs, attachments, malware, identity, and behavior, which matches buyers trying to cover multiple email attack paths in one platform.
  • The platform includes Analysis and Response with search, investigation, message removal, and automated remediation, which supports security operations teams that need incident handling inside the same email-security stack.
  • The platform supports MX-based secure email gateway deployment and Microsoft 365 API-based deployment, which gives different deployment paths for routed mail environments and Microsoft 365 teams.
Cautions
  • The product is sales quoted, and the supplied facts do not publish numeric package prices, priced units, payment timing, minimum quantities, or commitment terms.
  • The package ladder lists Critical, Advanced, and Premium, but the supplied facts do not establish exact functional differences beyond package positioning, so buyers need written quote confirmation for edition selection.
  • The product uses granular policies, routing, quarantine, and remediation workflows, which may require more administration than buyers want in a small-team email tool.
xAIAI-assisted buyer perspective76

Fits mid-market and enterprise buyers that need layered AI-assisted email threat protection with MX gateway breadth or Microsoft 365 API deployment, provided they accept quote-only commercial terms and confirm package versus add-on boundaries before purchase.

Review confidence
76/100
Model details
Strengths
  • AI-powered BEC, impersonation, social-engineering, and account-takeover detection supports layered defense against identity-driven email attacks.
  • Time-of-click URL analysis, QR-code inspection, attachment sandboxing, malware scanning, and safe-file conversion cover multiple malware and link delivery paths.
  • Analysis and Response provides search, investigation, message removal, and automated remediation that security operations teams can use for containment.
  • MX-based deployment spans Microsoft 365, Google Workspace, on-premises, hybrid, and other routed environments, while Microsoft 365 also has a direct API deployment option without MX changes.
Cautions
  • Critical, Advanced, and Premium all require sales quotes, with no public numeric package price, unit, payment timing, minimum quantity, or commitment term to compare offline.
  • Package positioning differs, but exact capability deltas beyond core threat protection, data protection, and collaboration-scope framing need written quote confirmation.
  • Current direct API deployment is documented for Microsoft 365 only, so Google Workspace, on-premises, and hybrid estates rely on MX-based protection.
  • Collaboration Threat Protection, DMARC Analyzer, Cloud Archive, Engage, and managed Email Incident Response sit outside the base Advanced Email Security package and need separate scope confirmation.

Research transparency

How this page was researched

A compact record of the evidence used, what was not tested, and which conclusions still need verification.

Official sources
14
Broad product review sources
2
Marketplace and app-store sources
1
Editorial sources
0
Latest evidence check
Aug 12, 2026
Research basis

Global Tool Radar generated this assessment from structured facts linked to public sources. No Global Tool Radar hands-on test is recorded in this page's research data. Any external hands-on assessment is identified separately and does not affect the Global Tool Radar score.

Conflict handling

No unresolved evidence conflict is currently recorded.

View research methodology
Verified findingsNo permanent free plan is published. The exact-product AWS Marketplace listing advertises a 30-day trial, and Mimecast offers a risk-free proof of value; both are temporary evaluation routes and are not plans.
  • Sales-quoted Critical, Advanced, and Premium packages with no public numeric package price or published deterministic billing terms.
  • Critical, Advanced, and Premium package ladder MX-based cloud secure email gateway and Microsoft 365 API-based deployment Multi-vector threat protection across sender authentication, reputation, URLs, content, identity, and behavior AI-powered BEC, impersonation, social-engineering, and account-takeover detection Time-of-click URL analysis, credential protection, computer vision, and QR-code inspection Static attachment analysis, active sandboxing, malware scanning, and safe-file conversion Inbound, outbound, and internal email scanning with granular policies and user segmentation Analysis and Response with search, investigation, message removal, and automated remediation Threat intelligence and integrations with SIEM, SOAR, XDR, identity, endpoint, and data-protection tools Advanced and federated account administration for complex email environments
  • Requires quote
  • Critical, Advanced, and Premium are the current new-customer Advanced Email Security packages. Each requires sales contact, and public sources do not establish numeric prices, priced units, payment timing, minimum quantities, commitment terms, renewal rules, implementation fees, or support fees. API and MX are deployment choices for the same product rather than extra plans. The AWS Marketplace listing is an alternate acquisition route and is not duplicated as a package offer.
Verification notes and unresolved itemsResearch was reverified against current public sources on 2026-08-12.
  • The package page establishes Critical, Advanced, and Premium, their quote state, and the protections explicitly listed under each card.
  • Email Continuity is included under all three with a Cloud Gateway condition.
  • Exact differentiation beyond the shared listed protections and package positioning remains unverified.
  • No public numeric package price, unit, minimum, payment timing, commitment, or renewal term was accepted.
Sources checked

Sources checked

Mimecast Advanced Email Security source links

Advanced Email SecurityAWS Marketplace and MimecastLevel A2Linked to 0 scored claimsChecked Aug 12, 2026
Email Security MX - Account Takeover - Oct 2025MimecastLevel A1Linked to 1 scored claimChecked Aug 12, 2026
Mimecast Product SuiteMimecastLevel A2Linked to 1 scored claimChecked Aug 12, 2026
Email Incident Response ServiceMimecastLevel A2Linked to 1 scored claimChecked Aug 12, 2026
Security Awareness TrainingMimecastLevel A2Linked to 1 scored claimChecked Aug 12, 2026
Cloud ArchiveMimecastLevel A2Linked to 1 scored claimChecked Aug 12, 2026
DMARC ManagementMimecastLevel A2Linked to 1 scored claimChecked Aug 12, 2026
Secure Email GatewayMimecastLevel A2Linked to 0 scored claimsChecked Aug 12, 2026

FAQ

Mimecast Advanced Email Security FAQ

What are the current Mimecast Advanced Email Security packages?

Critical, Advanced, and Premium are the current packages for new customers. Existing legacy services remain supported, but new customers have been directed to the new plans since August 15, 2025.

How much does Mimecast Advanced Email Security cost?

Mimecast requires sales contact for all three packages. No public numeric package price, unit rate, minimum quantity, payment schedule, or commitment term is published.

Are API-based and MX-based protection separate plans?

No. They are deployment architectures for Mimecast Email Security. Current official material says API and MX use the same detection stack, and the API option uses the same SKU and pricing rather than forming a duplicate plan.

How does Cloud Integrated differ from current API-based deployment?

Cloud Integrated is the established gatewayless Microsoft 365 product and deployment lineage. Mimecast introduced a fuller API-based deployment in 2026 under the current Email Security product; Cloud Integrated is not treated as a fourth Critical, Advanced, or Premium package.

Which platforms does Mimecast support?

MX-based protection supports Microsoft 365, Google Workspace, on-premises, hybrid, and other routed email environments. Current direct API deployment is documented for Microsoft 365.

Is collaboration security included?

Premium is positioned for protection spanning collaboration tools, but exact platform entitlements should be confirmed in the quote. Mimecast also markets Collaboration Threat Protection as a separate product for Microsoft Teams, OneDrive, and SharePoint.

Is DMARC Analyzer part of Advanced Email Security?

Core email security performs sender-authentication and impersonation checks, but DMARC Analyzer is a separately named product for domain inventory, reporting, monitoring, and enforcement guidance.

Are Cloud Archive and Continuity included?

Cloud Archive is documented as an add-on. Email Continuity is explicitly listed in Critical, Advanced, and Premium for Cloud Gateway deployments.

Popular comparisons

Common Mimecast Advanced Email Security comparisons

Only high-scoring and nearby tools from the same subcategory are shown, avoiding comparisons between unrelated use cases.

VS #1
Mimecast Advanced Email SecurityvsCheck Point Harmony Email & Collaboration
78Gap 078

Enterprise / Mid-market / Small business

VS #2
Mimecast Advanced Email SecurityvsMicrosoft Defender for Office 365
78Gap 179

Enterprise / Mid-market / Small business

VS #3
Mimecast Advanced Email SecurityvsBarracuda Email Protection
78Gap 482

Mid-market / Enterprise / Small business