Protect Your Email

    URL Protect


    Transforming email security with the most comprehensive cloud-based solution on the market

    Email is the top cyberattack vector, and malicious URLs are one of the tactics that cybercriminals use most. You need the strongest possible protections in place to let employees safely access and share URLs, which have become an essential tool for getting business done.


    The challenges of URL protection

    Phishing attacks are growing at a record rate, and cybercriminals are more adept at tricking their victims. About 200,000 new URLs are created each day; it is estimated about 70% are malicious. Attackers often use links in emails to bring unsuspecting users to these phishing sites or in some cases to initiate the downloading of malicious files, such as ransomware, directly to their computer.

    Email security systems that only inspect URLs during the initial delivery are easily bypassed by attackers by using a benign site that only later changes to a malicious one. Furthermore, individuals are clicking these links from many different types of endpoints, thus endpoint-based email security controls are generally ineffective in protecting organizations from URL-based email-borne attacks.


    The Mimecast solution

    Mimecast's URL Protection capabilities are a core component of our Email Security service, using third-party and Mimecast proprietary threat intelligence and analytics to provide multistep detection and blocking of malicious URLs. Key capabilities include pre-click URL discovery, on-click inline employee education and post-click resolution and blocking of dangerous files types.


    Protection from malicious URLs on and off the enterprise network with every click, from any device  


    Rewriting of URLs in inbound emails and real-time scanning on every click.


    Protection from credential phishing using computer vision artificial intelligence to detect the logos of highly phished brands.


    Blocking of commonly exploited typo-squatted internet brands.


    Detection of non-western character and punycode domains in URLs to protect against sophisticated domain similarity attacks.


    Stripping of file attachments containing malicious URLs from inbound emails.


    Real-time inspection and sandboxing of directly downloaded files in conjunction with Mimecast Attachment Protect.


    Dynamic and customizable user education to help improve employees caution and awareness of the threat environment.

    How It Works

    Protection from malicious URLs combined with dynamic user awareness education

    Mimecast Targeted Threat Protection – URL Protect provides comprehensive protection from malicious URLs in email, including spear-phishing and other targeted attacks, and provides integrated user awareness education to train your users.

    More Features

    Protect against email-based threats with advanced technical capabilities

    Phishing, spam, business email compromise, malicious URLs, ransomware - these attacks continue to plague businesses. Explore Mimecast's features that protect against these ubiquitous threats.

    Attachment Protection

    Neutralize threats from malware attachments embedded in emails with protection that balances speed of delivery with detection efficacy. Leverages multiple anti-virus engines, static file analysis, safe-file conversion, and behavioral sandboxing to provide advanced, multi-layer protection.


    Impersonation Protection

    Get instant, comprehensive protection against malware-less email attacks that impersonate trusted senders. Real-time scanning of all inbound emails detects header anomalies, domain similarity, recency of the sending domain, and sender spoofing to keep end-users safe.


    Internal Email Protection

    Rapidly remediate malicious emails discovered post-delivery, apply best-practice security protocols to outbound and employee-to-employee email, and prevent the lateral spread of attacks with internal email protection from Mimecast.


    Browser Isolation

    Defend against sophisticated phishing, ransomware, drive-by downloads, and zero-day attacks with browser isolation capabilities that open target web pages in a remote browser on a secure server in the Mimecast cloud.

    Back to Top