Fortra Email Security (formerly Agari + PhishLabs)

Name: Fortra Email Security (formerly Agari + PhishLabs)
Brand: Fortra

Fortra Email Security is a portfolio that combines cloud/API-based advanced threat detection and post-delivery remediation, DMARC-based email authentication and anti-spoofing, reported-email triage workflows, threat intelligence services, and an optional on-prem Secure Email Gateway.

Est 1982|Valuation $1.2B|Raised $76.2M|69 Ref Customers

LinkedIn 12K|Website|FTEs 2,000|HQ Eden Prairie, Minnesota, US

MarketsDLP (Data Loss Prevention)Email Security Secure Email Gateway

Published Oct 14, 2026

01Common complaints

Company sizes or stages where this product is overkill or insufficient
- Very small companies without dedicated security operations may find Fortra’s suite and services model heavier than required.
Industries or use cases where competitors may be more suitable
- If built-in email continuity and archiving tightly integrated with the email security stack are primary requirements, consider vendors whose offerings explicitly include continuity/archiving as part of their email security platform; validate Fortra’s SEG and any continuity options.
Technical requirements that this product may not meet without further validation
- If documented, publicly available compliance certifications and data residency guarantees are required before engaging sales, the publicly available product-specific documentation may be insufficient; consider vendors with extensive, publicly documented trust centers.
Budget constraints that make alternatives more appropriate
- If commodity per-user pricing is a strict requirement and MSP-focused packaging is preferred, API-first or MSP-oriented vendors may be more straightforward to procure.
Specific workflows or integrations where the product requires validation
- If the user base primarily uses Outlook on the web and reporting/quarantine workflows rely on an add-in, validate the user experience and compatibility (a TrustRadius review reports Outlook Web usability friction).
Red flags in the buying process
- Quote-only pricing can allow costs to vary via bundles and add-ons; require a firm, line-item quote and renewal caps during procurement.
Current limitations acknowledged by the vendor
- Public pages emphasize capabilities; explicit, product-specific "known limitations" are not prominently documented in the retrieved sources.
Features on the roadmap (not yet available)
- Roadmap details and timelines are not publicly documented in the retrieved sources; buyers should request roadmap briefings under NDA during procurement.
Scale limitations (at what volume/size does it break down?)
- Scale constraints are not publicly documented; request performance and scalability guidance and references for deployments of similar size.
Security or compliance gaps
- Lack of easily accessible, module-specific public documentation for SOC 2/ISO/data residency in the retrieved sources is a potential gap; request attestations and scope statements.
Technical debt or architectural limitations mentioned in reviews
- Usability friction with the Outlook Web add-in is noted in at least one review platform.
API limitations or integration constraints
- Fortra promotes custom APIs and integrations; however, detailed API rate limits, scopes, and supported objects are not available in public sources. Buyers should request developer documentation and test in a sandbox.

- Company sizes or stages where this product is overkill or insufficient - Very small companies without dedicated security operations may find Fortra’s suite and services model heavier than required. - Industries or use cases where competitors may be more suitable - If built-in email continuity and archiving tightly integrated with the email security stack are primary requirements, consider vendors whose offerings explicitly include continuity/archiving as part of their email security platform; validate Fortra’s SEG and any continuity options. - Technical requirements that this product may not meet without further validation - If documented, publicly available compliance certifications and data residency guarantees are required before engaging sales, the publicly available product-specific documentation may be insufficient; consider vendors with extensive, publicly documented trust centers. - Budget constraints that make alternatives more appropriate - If commodity per-user pricing is a strict requirement and MSP-focused packaging is preferred, API-first or MSP-oriented vendors may be more straightforward to procure. - Specific workflows or integrations where the product requires validation - If the user base primarily uses Outlook on the web and reporting/quarantine workflows rely on an add-in, validate the user experience and compatibility (a TrustRadius review reports Outlook Web usability friction). - Red flags in the buying process - Quote-only pricing can allow costs to vary via bundles and add-ons; require a firm, line-item quote and renewal caps during procurement. - Current limitations acknowledged by the vendor - Public pages emphasize capabilities; explicit, product-specific "known limitations" are not prominently documented in the retrieved sources. - Features on the roadmap (not yet available) - Roadmap details and timelines are not publicly documented in the retrieved sources; buyers should request roadmap briefings under NDA during procurement. - Scale limitations (at what volume/size does it break down?) - Scale constraints are not publicly documented; request performance and scalability guidance and references for deployments of similar size. - Security or compliance gaps - Lack of easily accessible, module-specific public documentation for SOC 2/ISO/data residency in the retrieved sources is a potential gap; request attestations and scope statements. - Technical debt or architectural limitations mentioned in reviews - Usability friction with the Outlook Web add-in is noted in at least one review platform. - API limitations or integration constraints - Fortra promotes custom APIs and integrations; however, detailed API rate limits, scopes, and supported objects are not available in public sources. Buyers should request developer documentation and test in a sandbox.

02Why they buy

—

03Field reports

Review platforms and sentiment snapshots

Gartner Peer Insights
- The Gartner Peer Insights landing page shows Fortra Email Security with a high average rating and a limited number of ratings; portions of the page include placeholder text that may not reflect detailed reviewer quotes.
G2
- “Cloud Email Protection” appears on G2 with a generally favorable average score based on a small number of reviews.
TrustRadius
- “Agari Phishing Defense” shows a moderate score with a limited number of reviews.

- Gartner Peer Insights - The Gartner Peer Insights landing page shows Fortra Email Security with a high average rating and a limited number of ratings; portions of the page include placeholder text that may not reflect detailed reviewer quotes. - G2 - “Cloud Email Protection” appears on G2 with a generally favorable average score based on a small number of reviews. - TrustRadius - “Agari Phishing Defense” shows a moderate score with a limited number of reviews.

Direct quotes (with attribution) — positive

TrustRadius (Agari Phishing Defense reviewer)
- "The application finds almost all the attacks that come my inbox way and pushes them to Junk Email and to the 'Agari-Quarantine' folder…" (SQA/QA role, July 17, 2022).
Vendor-hosted testimonial (marketing context)
- Vendor-selected customer quotes describe improved visibility after deployment; such vendor-hosted testimonials should be validated via reference calls.

- TrustRadius (Agari Phishing Defense reviewer) - "The application finds almost all the attacks that come my inbox way and pushes them to Junk Email and to the 'Agari-Quarantine' folder…" (SQA/QA role, July 17, 2022). - Vendor-hosted testimonial (marketing context) - Vendor-selected customer quotes describe improved visibility after deployment; such vendor-hosted testimonials should be validated via reference calls.

Direct quotes (with attribution) — negative / limitations

TrustRadius (Agari Phishing Defense reviewer)
- "We use the outlook365 plugin I find it's difficult to use on the web-based Outlook interface" (same TrustRadius review; usability friction reported).
Community commentary (not product-specific)
- In a community discussion about 2026 email security vendor selection, a commenter claimed that some vendors outperform native controls; such statements are opinion-based and do not validate Fortra’s effectiveness.

- TrustRadius (Agari Phishing Defense reviewer) - "We use the outlook365 plugin I find it's difficult to use on the web-based Outlook interface" (same TrustRadius review; usability friction reported). - Community commentary (not product-specific) - In a community discussion about 2026 email security vendor selection, a commenter claimed that some vendors outperform native controls; such statements are opinion-based and do not validate Fortra’s effectiveness.

Common themes: why customers choose it (inferred from available reviews and vendor positioning)

Desire for additional detection for BEC/impersonation beyond traditional SEG signatures and URL scanning.
Need for DMARC visibility/enforcement and domain spoofing defense.
Integration into SOC workflows (SIEM/SOAR) and streamlined triage of user-reported email.

Why some customers leave for competitors (evidence is limited)

Direct churn stories specifically naming Fortra Email Security are limited in accessible sources.
Likely churn drivers to validate in diligence:
- Usability friction (Outlook web add-in issues per TrustRadius).
- Preference for API-native tools (e.g., Abnormal, Avanan) versus gateway-style architectures depending on tenant design.
- Parent-vendor support experience concerns sometimes appear in community threads; these may affect procurement risk assessments and should be validated.

- Direct churn stories specifically naming Fortra Email Security are limited in accessible sources. - Likely churn drivers to validate in diligence: - Usability friction (Outlook web add-in issues per TrustRadius). - Preference for API-native tools (e.g., Abnormal, Avanan) versus gateway-style architectures depending on tenant design. - Parent-vendor support experience concerns sometimes appear in community threads; these may affect procurement risk assessments and should be validated.

Specific outcomes customers achieved (with metrics when available)

Vendor materials provide outcome-oriented claims (e.g., detection rates, mitigation times); independent, customer-verified metrics for Fortra Email Security effectiveness are not consistently available in accessible sources.

Example case study (vendor-published)

"Financial Service Firm Prevents Email Data Leaks with Secure Email Gateway"
- Summary
  - Describes a financial services firm migrating from on-prem email to cloud-hosted email and using Fortra Secure Email Gateway to enforce outbound/egress security policies, including an architectural approach where email routed from Exchange Online back to a central on-prem data center for enforcement.
- Quantified results
  - The accessible excerpt does not present clear quantitative ROI metrics or validated figures (e.g., reduced incidents, time saved, dollar savings).
- Critical evaluation
  - This is vendor-published; the customer name is anonymized and the methodology and baselines are not independently validated.
  - The described architecture (cloud → on-prem enforcement) can introduce complexity and potential costs; organizations seeking a fully cloud-native architecture should evaluate alternatives and alignment with their routing strategy.

- "Financial Service Firm Prevents Email Data Leaks with Secure Email Gateway" - Summary - Describes a financial services firm migrating from on-prem email to cloud-hosted email and using Fortra Secure Email Gateway to enforce outbound/egress security policies, including an architectural approach where email routed from Exchange Online back to a central on-prem data center for enforcement. - Quantified results - The accessible excerpt does not present clear quantitative ROI metrics or validated figures (e.g., reduced incidents, time saved, dollar savings). - Critical evaluation - This is vendor-published; the customer name is anonymized and the methodology and baselines are not independently validated. - The described architecture (cloud → on-prem enforcement) can introduce complexity and potential costs; organizations seeking a fully cloud-native architecture should evaluate alternatives and alignment with their routing strategy.

Vendor-published ROI analysis

Fortra hosts an ROI analysis document related to Cloud Email Protection.
Critical evaluation
- The document appears vendor-produced; unless it provides transparent methodology and independently verified baselines, ROI figures should be treated as directional.

04Best fit

Ideal Customer Profile

Company sizes: specific employee counts and revenue ranges
- Recommended customer size appears to be:
  - Mid-market to enterprise where BEC/impersonation risk and SOC operations justify additional tooling beyond native M365/GWS controls.
  - Organizations with larger mailbox counts are referenced in Fortra’s pricing band examples, suggesting common enterprise deployments.
Industries and verticals where adoption is strongest (with customer examples)
- Fortra marketing highlights large brands and regulated environments.
- Vendor case study focus on financial services suggests regulated industries are a target.
- Third-party review snippets (where accessible) include manufacturing and operations roles on review platforms.
Roles and personas: decision makers AND end users
- Decision makers
  - Chief Information Security Officer (CISO) / VP Security
  - Director of Security Operations / SOC Manager
  - Email/Collaboration Security Lead (M365 / Exchange / Google Workspace)
  - Governance/Risk/Compliance leaders
- End users
  - SOC analysts handling reported email triage
  - IT administrators managing mail flow, quarantines, and authentication
  - General employees participating in reporting and awareness programs
Pain points and challenges the product addresses
- BEC and impersonation attacks that bypass traditional gateways.
- Domain spoofing and brand abuse via unauthorized senders.
- SOC overload from user-reported phishing and lack of contextual triage.
Qualification criteria: what makes a GOOD fit
- Organizations that use Microsoft 365 / Exchange / Google Workspace and seek an additional security layer.
- Organizations with DMARC maturity goals (monitoring → enforcement) that require tooling and services.
- Organizations that want combined pre-delivery/gateway controls, post-delivery remediation, and triage workflows from a single vendor.
Deal disqualifiers: what makes a POOR fit
- Buyers that require fully transparent self-serve pricing and rapid self-service procurement may find a quote-only model less suitable.
- Very small organizations with limited security staffing may prefer a lighter-weight MSP-friendly package.
- Organizations committed to a single-vendor approach entirely within M365 licensing and unwilling to operate third-party tooling.

- Company sizes: specific employee counts and revenue ranges - Recommended customer size appears to be: - Mid-market to enterprise where BEC/impersonation risk and SOC operations justify additional tooling beyond native M365/GWS controls. - Organizations with larger mailbox counts are referenced in Fortra’s pricing band examples, suggesting common enterprise deployments. - Industries and verticals where adoption is strongest (with customer examples) - Fortra marketing highlights large brands and regulated environments. - Vendor case study focus on financial services suggests regulated industries are a target. - Third-party review snippets (where accessible) include manufacturing and operations roles on review platforms. - Roles and personas: decision makers AND end users - Decision makers - Chief Information Security Officer (CISO) / VP Security - Director of Security Operations / SOC Manager - Email/Collaboration Security Lead (M365 / Exchange / Google Workspace) - Governance/Risk/Compliance leaders - End users - SOC analysts handling reported email triage - IT administrators managing mail flow, quarantines, and authentication - General employees participating in reporting and awareness programs - Pain points and challenges the product addresses - BEC and impersonation attacks that bypass traditional gateways. - Domain spoofing and brand abuse via unauthorized senders. - SOC overload from user-reported phishing and lack of contextual triage. - Qualification criteria: what makes a GOOD fit - Organizations that use Microsoft 365 / Exchange / Google Workspace and seek an additional security layer. - Organizations with DMARC maturity goals (monitoring → enforcement) that require tooling and services. - Organizations that want combined pre-delivery/gateway controls, post-delivery remediation, and triage workflows from a single vendor. - Deal disqualifiers: what makes a POOR fit - Buyers that require fully transparent self-serve pricing and rapid self-service procurement may find a quote-only model less suitable. - Very small organizations with limited security staffing may prefer a lighter-weight MSP-friendly package. - Organizations committed to a single-vendor approach entirely within M365 licensing and unwilling to operate third-party tooling.

05The pitch

What the product does (core value proposition in objective terms)

Fortra Email Security is a portfolio of email security capabilities assembled primarily from Agari (advanced phishing/BEC and DMARC) plus Fortra’s broader email stack (including Secure Email Gateway heritage from Clearswift) and adjacent brand/digital-risk services (PhishLabs). The portfolio spans:
- Cloud/API-based advanced threat detection and post-delivery remediation (Fortra Cloud Email Protection, aligned with Agari Phishing Defense capabilities).
- Email authentication and anti-spoofing (Agari DMARC Protection).
- Reported-email triage/analysis workflows (Suspicious Email Analysis).
- Threat intelligence services (Threat Intel Service).
- Optional on-prem Secure Email Gateway (SEG) for inline inspection/policy controls.
Vendor materials describe the portfolio as intended to address impersonation and social-engineering attacks that can bypass traditional Secure Email Gateways (SEGs), and note workflow integrations with SIEM/SOAR.

- Fortra Email Security is a portfolio of email security capabilities assembled primarily from Agari (advanced phishing/BEC and DMARC) plus Fortra’s broader email stack (including Secure Email Gateway heritage from Clearswift) and adjacent brand/digital-risk services (PhishLabs). The portfolio spans: - Cloud/API-based advanced threat detection and post-delivery remediation (Fortra Cloud Email Protection, aligned with Agari Phishing Defense capabilities). - Email authentication and anti-spoofing (Agari DMARC Protection). - Reported-email triage/analysis workflows (Suspicious Email Analysis). - Threat intelligence services (Threat Intel Service). - Optional on-prem Secure Email Gateway (SEG) for inline inspection/policy controls. - Vendor materials describe the portfolio as intended to address impersonation and social-engineering attacks that can bypass traditional Secure Email Gateways (SEGs), and note workflow integrations with SIEM/SOAR.

Target market and market positioning

Positioned for mid-market to enterprise organizations that:
- Run Microsoft 365, Microsoft Exchange (including hybrid), and/or Google Workspace.
- Seek additional detection for BEC/spear phishing/impersonation that can evade legacy SEGs.
- Need DMARC enforcement and visibility into domain spoofing/brand abuse.
Fortra’s broader marketing references the vendor’s use of artificial intelligence capabilities as part of a wider data security platform; Email Security is one of several platform pillars.

- Positioned for mid-market to enterprise organizations that: - Run Microsoft 365, Microsoft Exchange (including hybrid), and/or Google Workspace. - Seek additional detection for BEC/spear phishing/impersonation that can evade legacy SEGs. - Need DMARC enforcement and visibility into domain spoofing/brand abuse. - Fortra’s broader marketing references the vendor’s use of artificial intelligence capabilities as part of a wider data security platform; Email Security is one of several platform pillars.

Get a comprehensive analysis of Fortra Email Security (formerly Agari + PhishLabs) including market position, competitive landscape, adoption trends, and peer benchmarks.

Download full report →