Mimecast

Name: Mimecast
Brand: Mimecast
Rating: 4.4 (1555 reviews)

Mimecast is a cloud-hosted email security and resilience platform that protects organizations from email-borne threats (phishing, malware, impersonation) and provides continuity plus archiving and retention capabilities for governance.

Est 2003|Valuation $5.3B|Raised $15.1M|86 Ref Customers

LinkedIn 123K|Web traffic 4.6M|FTEs 2,000|HQ London, England, GB

MarketsCloud-Native Application Protection Platform (CNAPP)Security Service Edge (SSE)Security Information and Event Management (SIEM)Productivity & Collaboration Suite Secure Email Gateway

Platform CoversSecurity Awareness & Training Email Security

Published Oct 23, 2026

01Common complaints

- If transparent, self-serve pricing and a low-friction procurement process are primary requirements - The vendor typically provides quote-based pricing and many buyers report limited public price transparency. - If your team cannot allocate ongoing admin time for tuning and maintenance - Community feedback indicates that some deployments require substantive tuning to balance protection and false positives. - If you have a mature Microsoft security operations environment and prioritize consolidation on Microsoft-native tooling - In some deployments, customers have preferred consolidating incident response and visibility within Microsoft Defender rather than maintaining a separate gateway. - If high-quality vendor support responsiveness is a primary selection criterion and you lack internal expertise - Public community posts include complaints about inconsistent support experiences; verify SLAs and reference customers before purchase. - If your secure messaging requirements mandate a portal-based workflow rather than message-based secure delivery - Verify secure messaging behavior against your specific workflow requirements during a proof-of-concept (PoC). - Pricing transparency and renewal variability - Recurring community reports indicate that pricing is not consistently posted publicly and that renewal pricing can change materially; verify contractual protections. - Support experience inconsistency - Multiple public community threads describe variable support responsiveness and handling; use reference checks and review SLAs. - Potential end-user friction and false positives - Reports of blocking or altering legitimate messages and attachments indicate the need for proper policy tuning and user education. - Documentation gaps for initial due diligence - Although the vendor publishes trust and product documentation, some buyer questions (exact tier pricing, consolidated enterprise security feature lists) may require direct engagement with sales or the trust portal.

Deal disqualifiers (what makes a poor fit)

Very small organizations seeking transparent, low-cost, self-serve pricing and minimal administration overhead.
Teams with limited tolerance for end-user friction and without resources for ongoing policy tuning.

Why some customers left for competitors (churn reasons)

Reported churn drivers include perceived gaps in incident response workflows for organizations invested in specific security stacks (for example, consolidating on Microsoft-native tooling) and concerns about renewal pricing.

02Why they buy

- Key differentiators (neutral framing) - Combined functionality across email filtering, continuity, and archiving in a single vendor offering. - Vendor-published emphasis on compliance certifications and regional deployments to support data residency requirements. - Product portfolio that extends into adjacent areas such as data protection; buyers should request product-by-product capability matrices and integration details. - Vendor recognitions (vendor-claimed; verify independently) - The vendor cites awards and analyst recognition in its marketing materials; procurement should validate claims with the original analyst reports and review the evaluation criteria. - Areas where competitors may have advantages - Native integration and operational consolidation can be advantageous for organizations standardizing on a single cloud provider's security stack. - Some competing products emphasize lower administrative overhead or different provisioning models that may be a better fit for SMB environments.

Why customers chose this product over alternatives

Selection drivers often include the need for a dedicated secure email gateway combined with continuity and archiving capabilities, and a preference for a vendor that emphasizes platform breadth across email security and governance.

03Field reports

Review platform coverage and volume

The vendor is reviewed on common enterprise review platforms; review volumes and access to full content may vary across sites.

Positive feedback themes (cross-source synthesis)

Commonly reported benefits include improved protection against phishing and spam relative to some native email protections, and combined functionality covering filtering, continuity, and archiving.
Some administrators report that the management console can be workable for teams that are self-sufficient with product configuration.

Negative feedback themes (examples)

Support and responsiveness: community posts include criticisms of support responsiveness and perceived quality in some cases.
Administrative overhead: some administrators describe a non-trivial operational burden for initial configuration and ongoing tuning to reduce false positives.
End-user friction: reports exist of productivity impacts when policies are not tuned appropriately, including blocking or altering messages or attachments.

Deal-breakers and reasons customers didn't purchase

Lack of public pricing transparency and perceived minimum costs for small deployments appear in community discussions as barriers for small organizations.

Vendor-published case study example

The vendor publishes customer case studies that highlight outcomes such as continuity and recovery benefits.

Critical evaluation

Metrics in vendor case studies are useful as illustrative examples but generally lack counterfactuals and independent verification. Buyers should request reference calls and attempt to validate claimed outcomes directly with customers.

Aggregated customer storytelling

The vendor provides curated customer stories and reference materials. These are marketing-curated resources that can be used to identify potential references but should be validated during due diligence.

04Best fit

Company sizes

Best suited to mid-market and enterprise organizations (e.g., mid-sized to very large organizations) where email continuity and protection are mission-critical and where budget and staff resources exist for platform administration.

Industries and verticals

Common fits include regulated industries such as healthcare, financial services, and public sector organizations that have pronounced governance, retention, and compliance requirements.

Roles and personas

Decision makers: Chief Information Security Officer (CISO), Head of Security, IT Director, Head of Infrastructure, Compliance/Data Protection Officers.
Operational users: Security operations analysts, email administrators, Microsoft 365 administrators, and helpdesk staff responsible for false positive handling.

Qualification criteria (what makes a good fit)

Requirements for advanced policy controls, impersonation protection, continuity, and governance beyond built-in email suites.
Willingness to invest in initial tuning and ongoing administration.
Need for formal security certifications and trust documentation provided by the vendor.

05The pitch

What the product does (core value proposition in objective terms)

- Mimecast is a cloud-hosted email security and resilience platform focused on protecting organizations from email-borne threats (phishing, malware, impersonation), reducing user risk, and supporting business continuity and governance functions such as archiving and retention. - The vendor describes an expanded platform approach it calls "human risk management," which integrates email security with adjacent capabilities such as data protection rather than acting solely as a traditional secure email gateway.

Target market and market positioning

Primary customers are mid-market to enterprise organizations that require advanced email security controls, policy management, continuity, and compliance features beyond baseline protections available in standard Microsoft 365 or Google Workspace offerings.
Typical stakeholders and users include security teams, IT operations, compliance, legal, HR, and data governance groups.

Get a comprehensive analysis of Mimecast including market position, competitive landscape, adoption trends, and peer benchmarks.

Download full report →

How it compares

Secure Email Gateway market report
Mimecast is #4 of the top 10 Secure Email Gateway vendors by known customers (86 known customers).
Other top vendors: Barracuda Networks, Abnormal AI, Fortinet, Sophos, Forcepoint.