Mimecast Logo
Get a Quote

    General FAQs

    About Mimecast

    Mimecast is a cybersecurity company specializing in cloud-based email security, risk management, and data protection. Its platform uses advanced AI to defend organizations against human-centric threats like phishing and ransomware. Core capabilities include:

    • Email and collaboration threat protection
    • Employee security awareness training
    • Cloud archiving, governance & compliance for collaboration data
    • Insider risk management & data loss prevention (DLP)
    • Business continuity to keep email operational during outages or attacks

    Mimecast was founded in 2003 by Peter Bauer and Neil Murray. The company is headquartered in London, United Kingdom, with a major North American headquarters in Lexington, Massachusetts.

    Mimecast stands out as a trusted cloud platform, providing broad protection that extends well beyond email security. Key differentiators include:

    • AI-driven threat detection: Multiple inspection techniques combat spoofing, phishing, malware, and impersonation attacks before they reach the inbox.
    • Internal email security: Scans and remediates threats originating within an organization, not just inbound mail.
    • Attachment & URL protection: Converts suspicious attachments into safe formats and continuously analyzes URLs, even after delivery.
    • Built-in email continuity: Users can continue sending and receiving email for up to 7 days during outages.
    • Integrated awareness training: Security awareness training is built into the platform to reduce human error, a leading cause of breaches.

    Mimecast is a private company, owned by the private equity firm Permira, which acquired the company in May 2022 (at which point it delisted from the NASDAQ). Mimecast operates globally, with offices and data centers across the US, Canada, UK, France, Germany, Australia, South Africa, Singapore, and additional regions, serving over 42,000 customers worldwide.

    Products & Capabilities

    Mimecast delivers an AI-powered cloud platform managed through a single web-based console, with integrated solutions including:

    • Advanced Email Security: Multi-layered detection for BEC, phishing, malware, and ransomware, URL, attachment, and impersonation protection
    • DMARC Analyzer: Domain spoofing prevention
    • Engage: Security awareness training
    • Incydr: Insider risk management and data protection
    • Cloud Archive: Tamper-proof data retention and e-discovery
    • Email Continuity: Maintains access during outages

    Mimecast's email security platform employs over 40 scanning layers that use interconnected signals to block the most sophisticated email threats. A centralized AI system and threat intelligence continuously adapt to the evolving risk landscape. Core defenses, including signature and reputation checks as well as static analysis, filter known malicious senders and file patterns in real time. Advanced dynamic analysis and AI/ML detection sandbox suspicious content and leverage machine learning to identify zero-day exploits that traditional methods might miss. Together, these layers provide comprehensive protection against weaponized attachments, credential theft, phishing attacks, spam, graymail, and Business Email Compromise.

    Yes. Mimecast integrates AI and ML extensively, analyzing billions of signals daily. Key applications include Natural Language Processing (NLP) to detect BEC attacks by analyzing context and sentiment, Social Graphing to identify anomalies in communication patterns, Computer Vision to detect phishing sites at the pixel level to counter AI-generated attacks, and AI to monitor & prioritize insider risk and data protection threats. Mimecast provides the option for organizations to bring their own LLM and also employs Mihra AI, an intelligent agent that automates investigations and other workflows for security analysts.

    Yes. Mimecast supports compliance with regulations such as GDPR, HIPAA, FINRA, and SEC 17a-4 through secure, immutable archiving, customizable retention policies, and proactive communication supervision. It also offers Legal Hold & Case Management for preserving data during investigations, DLP policies to protect sensitive information, and advanced search for rapid audit and e-discovery responses. Mimecast serves compliance-heavy industries including finance, healthcare, and legal.

    Mimecast combines cloud-based email DLP with Incydr’s real-time data protection to provide comprehensive data loss prevention. Together, they enforce content policies on outbound communications, monitor file activity across endpoints & cloud services, and apply adaptive controls to stop data exfiltration events before they happen.

    Mimecast archives data using a secure, cloud-based platform that centralizes email, files, and collaboration data from Microsoft Teams, Zoom, Slack, and Google Chat. It uses AES encryption and maintains three geographically dispersed copies to ensure availability and resilience. It enables compliance, e-discovery, legal hold, and automated retention policies with rapid 7-second search speeds and accessible retrieval across any device. The platform also offers a "bottomless" mailbox approach that offloads long-term storage to the cloud with cost-effective per-employee pricing.

    Mimecast simplifies e-discovery through its Cloud Archive, a centralized, tamper-proof repository for email, files, and instant messaging. It delivers near real-time search, one-click litigation holds, and case management with chain-of-custody integrity. By enabling teams to quickly identify, preserve, and export data across platforms like Microsoft Office 365, Google Workspace, and Slack, Mimecast reduces search times from days to seconds and streamlines legal investigations.

    Mimecast provides an "always-on" cloud service that instantly takes over email traffic when primary systems (e.g., Exchange On Premise, Exchange Online, & Google Workspace) go down. Key capabilities include instant failover with near-zero RPO/RTO, multi-platform access to email via Outlook, mobile apps, or the Mimecast Personal Portal, and automatic synchronization of all messages once systems are restored, eliminating manual cleanup for IT. These services are backed by a 100% service availability SLA and supported by geographically dispersed data centers.

    Yes. Mimecast can integrate with any email environment - on-premise architecture, Microsoft 365, Google Workspace, and complex hybrid mail infrastructures. Beyond email, it provides strong integration with over 350 other security tools. For Microsoft 365, Mimecast offers deep, API-based integration for enhanced phishing and malware protection, including extensive connections with Microsoft’s security stack such as Entra, Defender for Endpoint, Defender for Office 365, Sentinel, Purview, and Defender for Cloud Apps, enabling comprehensive threat detection and response. Mimecast also provides connectors for Google Workspace covering mail routing, archiving, and compliance monitoring across tools like Drive and Chat. Additionally, it integrates with SIEM, XDR, and SOAR platforms to share threat intelligence and enable centralized security management. Mimecast supports cloud, on-premise, and hybrid environments.

    Customers & Use Cases

    Mimecast's ideal customers are organizations of all sizes, particularly in manufacturing, finance, technology, and healthcare, that need advanced, cloud-based email security, archiving, data protection, and threat protection. We are especially well-suited for companies using Microsoft 365 that require protection beyond native capabilities, and for businesses facing sophisticated email-borne attacks or strict compliance requirements.

    Mimecast serves over 42,000 customers of all sizes, from SMBs to global enterprises. Our platform is valued for its ease of deployment and intuitive management that make it ideal for organizations with lean IT and security teams. It also scales seamlessly to meet the demands of large enterprises, with customers like Netflix, Uber, and other global brands relying on Mimecast for comprehensive, scalable email security and data protection. Beyond IT and security teams, Mimecast delivers significant benefits to Data Protection Officers (DPOs), IT compliance professionals, Legal Counsel, and HR teams - helping them manage risk, ensure regulatory compliance, and support legal and data governance initiatives.

    Mimecast addresses a wide range of security challenges rooted in human risk, recognizing that people are often the primary target and vulnerability in an organization's security posture. Key challenges include:

    • Ransomware
    • Phishing
    • Malware
    • Spear-phishing campaigns
    • Business Email Compromise (BEC) and brand impersonation
    • Data leaks and insider threats through DLP and behavioral monitoring
    • Email downtime during attacks or outages
    • Human error through security awareness training
    • Emerging threats within collaboration tools like Teams and Slack

    Our cloud-based platform uses multi-layered detection engines to provide real-time scanning of links, attachments, and content. Our human risk management approach helps organizations identify, monitor, and reduce risky employee behaviors before they lead to breaches.

    Mimecast combines AI-powered behavioral analytics with data loss prevention to monitor, prevent, and mitigate risky user actions. Key tools include the Human Risk Command Center (personalized employee risk scorecards), Incydr (monitors and stops data exfiltration), Internal Email Protect (catches threats from compromised accounts), and Mimecast Engage (real-time behavioral nudges via email, Slack, or Teams). The approach focuses on the 8% of users responsible for 80% of security incidents, enabling targeted intervention over blanket policies.

    Mimecast serves organizations across a wide range of industries, with particularly strong presence in manufacturing (protecting IP and supply chains), finance (regulatory compliance and fraud prevention), healthcare (HIPAA compliance and email continuity), government (secure, compliant communications), legal (protecting client data and enabling secure file transfers), and professional services like retail (securing collaboration tools like Teams and Microsoft 365).

    Industry-Specific Applications

    Mimecast provides AI-powered protection tailored to each sector's unique needs:
    • Healthcare: HIPAA-compliant email security, secure messaging, and ransomware prevention for patient data.
    • Financial Services: Protection against targeted attacks, data leak prevention, and secure large-file sharing (up to 2GB) for regulatory compliance.
    • Government: Robust phishing and impersonation defense, secure archiving, email continuity during outages, and a FedRAMP™ certified DLP solution.
    • Education: Protection for sensitive student and staff data, plus security awareness training to reduce human error.

      • Across all sectors, Mimecast delivers 100% anti-malware and 99% anti-spam protection, DLP, cloud archiving, and human risk management tools.

    Yes. Mimecast supports compliance frameworks including HIPAA, FINRA, SEC, and GDPR with capabilities such as immutable, tamper-proof archiving; Data Loss Prevention (DLP); FIPS 140-2 and FedRAMP™ compliant solutions for U.S. government requirements; and targeted threat protection, all extending across email and collaboration platforms like Teams and Slack. These tools help regulated organizations in healthcare, finance, legal, and government avoid costly fines and reputational damage.

    Implementation & Support

    Implementation timelines for Mimecast's solutions vary widely depending on the specific products, the complexity of the organization’s environment, and the scope of deployment.

    Onboarding includes a dedicated implementation consultant, modular setup wizards, and pre-configured protection packages. Training is delivered through Mimecast University and Mimecast Community with self-paced and instructor-led courses, certification programs, and end-user awareness modules featuring phishing simulations. Support comes in three tiers: Basic (self-service Knowledge Base), Advanced (24/7 phone support), and Premium (dedicated Technical Account Manager with priority routing). All cases are managed through the Mimecaster Central portal.

    Recognition & Trust

    Mimecast is widely recognized as an industry leader, including being named a Leader in the 2024 and 2025 Gartner® Magic Quadrant™ for Email Security Platforms. Additional recognition includes the 2024 AWS EMEA Rising Star Technology Partner of the Year, three CybersecAsia Readers' Choice Awards (2025), SentinelOne Strategic Technology Partner of the Year, G2 Leader and TrustRadius Top Rated designations, and CRN Security Vendor of the Year. CEO Marc van Zadelhoff was named SC Awards Security Executive of the Year.

    Mimecast holds a comprehensive set of certifications including ISO 27001, 27018, 27701 (security and privacy), ISO 22301 (business continuity), ISO 42001 (AI management), and ISO 14001 (environmental). Operational certifications include SOC 1 and SOC 2 Type II, FIPS 140-2, and FedRAMP™ authorization. The platform supports compliance with GDPR, CCPA, HIPAA, PCI DSS, and FINRA, and aligns with control frameworks like NIST CSF and CIS Critical Security Controls.

    Over 42,000 organizations trust Mimecast as a comprehensive cybersecurity platform that goes well beyond email protection. Our AI-powered technology defends against phishing, ransomware, and impersonation across email, collaboration tools like Microsoft Teams, Slack, and SharePoint, and broader communication channels. The platform takes a human risk management approach, recognizing that people are often the primary target in security incidents, and provides tools to identify and reduce risky behaviors before they lead to breaches. From a single console, organizations can manage threat protection, data loss prevention, cloud archiving, and e-discovery.

    Back to Top