Mimecast is an email security platform, owned by the private equity firm Permira, that filters phishing, malware and spoofed messages before they reach a mailbox. It also offers email continuity, archiving and security awareness training, branded Mimecast Engage, as further modules, with pricing quoted only on request.
Listing updated . Checked by MSP Software .
Mimecast is an email security platform from Mimecast, privately owned by the investment firm Permira, that filters phishing, malware and spoofed messages before they reach a client's mailbox. It also offers email continuity, so mail keeps flowing if the primary mail server is down, along with archiving and a security awareness training module now branded Mimecast Engage (previously sold as Mimecast Awareness Training). It suits MSPs serving clients in regulated industries where email archiving and continuity guarantees matter alongside filtering, and larger client organisations where a dedicated email security layer justifies the added cost over relying on Microsoft's or Google's built-in filtering alone. Smaller, less regulated clients may not need the full breadth of modules Mimecast offers. A 30-day free trial is available with no credit card required.
Pricing is quote only. Mimecast does not publish a list price, and a quote is usually bundled across whichever modules a given client needs rather than sold as separate standalone products with separate prices. Mimecast integrates with Microsoft 365 and Google Workspace as its two supported mail platforms, and with SIEM and SOAR tools for larger security operations that want Mimecast's alerts feeding into a broader security stack; the Engage awareness module also connects to identity and security tools such as CrowdStrike Falcon, Okta and Netskope. An API is available for MSPs building automated provisioning across many client tenants, rather than adding and removing mailboxes by hand in each one. Mimecast is based in London, and has been privately owned by Permira since the deal that took it off Nasdaq closed in May 2022, which is worth knowing since it no longer reports as a public company. Before buying, confirm exactly which modules, filtering, continuity, archiving and Engage awareness training, are included in a given quote, since Mimecast bundles them selectively rather than as one fixed package, and check the archiving retention period matches any regulatory requirement the client actually has. It is also worth confirming whether outbound data loss prevention and end-user self-service release of held messages are included, since Mimecast does not set these out in detail on its current marketing pages.
Microsoft Defender for Office 365 Microsoft 365 email security against phishing and malware, priced per user per month. No reviews yet · from £1.54 vs Microsoft Defender for Office 365| Feature | Supported | Note |
|---|---|---|
| Phishing and malware filtering | yes | AI-powered detection with social graphing and computer-vision-based impersonation checks. |
| Spoofing and impersonation protection | yes | Anomaly detection and computer vision technology target spoofing and impersonation attempts. |
| Email continuity | yes | Built into Advanced Email Security's MX-based deployment; keeps mail flowing if the primary server is down. |
| Archiving | yes | Sold as Email Archive / Cloud Archive, with retention policies and self-service e-discovery tools. |
| Security awareness training bundle | yes | Sold as a separate module, currently branded Mimecast Engage (formerly Mimecast Awareness Training). |
| API-based post-delivery scanning | yes | Offered as an alternative to MX-based (gateway) deployment for Microsoft 365 and Google Workspace. |
| DMARC monitoring | yes | Sold as a standalone DMARC Analyzer product. |
| Attachment sandboxing | yes | Advanced scanning includes attachment sandboxing to catch evasion techniques. |
| Data loss prevention | unknown | No outbound content-scanning or DLP feature could be confirmed on current Mimecast marketing pages. |
| Email encryption | yes | Mimecast Secure Messaging: Send Secure in Outlook, AES-encrypted, recipient access via a secure web portal. |
| Microsoft 365 integration | yes | Supports Microsoft 365 and Google Workspace as mail platforms. |
| Self-service quarantine | unknown | No end-user self-service quarantine/hold-queue page could be confirmed on the current site. |
| Feature | Supported | Note |
|---|---|---|
| Phishing simulation campaigns | yes | Engage AI Generator creates customisable phishing templates by attack type, industry and difficulty. |
| Training content library | yes | 200+ training modules on phishing, malware and AI threats, in Engage. |
| Automated remediation training | yes | Watchlist Manager auto-assigns training and real-time interventions based on risk behaviour. |
| Phish-reporting button | unknown | Not mentioned on the Engage product page. |
| Multi-language content | yes | Training content available in 27 languages. |
| Compliance training modules | yes | Content aligned to ISO, NIST, PCI DSS, GDPR and HIPAA. |
| Client-facing reporting | unknown | A Human Risk Command Center exists but MSP/multi-client-facing reporting is not confirmed. |
| Microsoft 365 and Google user sync | unknown | Not confirmed on the current Engage product page. |
| Smishing and vishing simulation | unknown | Not mentioned on the current Engage product page. |
| Gamification | unknown | Individual risk scorecards exist; leaderboards, badges or points not confirmed. |
| Campaign scheduling automation | unknown | Not mentioned on the current Engage product page. |
| PSA integration for billing | unknown | Not mentioned on the current Engage product page. |
Yes, email continuity is built into Mimecast's Advanced Email Security, designed to keep mail flowing if a client's primary Microsoft 365 or Google Workspace mail service is unavailable, rather than leaving users unable to send or receive email during an outage. Confirm continuity is included in a given quote rather than assuming it, since Mimecast bundles modules selectively.
Mimecast supports both Microsoft 365 and Google Workspace as mail platforms, so an MSP does not need a separate email security product for clients split across the two. Confirm current feature parity between the two platforms for the specific modules being bought, since not every feature is guaranteed to behave identically on both.
Not automatically. Mimecast bundles filtering, continuity, archiving and its Engage security awareness training (formerly sold as Mimecast Awareness Training) selectively depending on what a client needs, rather than as one fixed package with everything included. An MSP should confirm exactly which modules are covered in a specific quote, since Mimecast does not publish a price list to check against.
Yes, Mimecast provides an API that MSPs can use to automate provisioning, such as adding or removing mailboxes, across many client tenants rather than making changes by hand in each one. This matters most to MSPs managing a larger number of Mimecast tenants where manual administration would otherwise be a significant recurring workload.
No. Mimecast was taken private by the private equity firm Permira in a deal that closed in May 2022, and it no longer trades on Nasdaq under its former ticker, MIME. It continues to operate and sell under the Mimecast brand, including its email security, continuity, archiving and Engage security awareness training products.
Reviews are moderated. How reviews work.
Share what it is like to use this product day to day. Your experience helps other MSPs choose with confidence.
Write the first review
