No more typing reviews! Try our Samantha, our new voice AI agent.

Anomali vs Proofpoint Email Protection comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Anomali
Ranking in Advanced Threat Protection (ATP)
20th
Average Rating
7.8
Reviews Sentiment
7.2
Number of Reviews
4
Ranking in other categories
Security Information and Event Management (SIEM) (32nd), User Entity Behavior Analytics (UEBA) (12th), Threat Intelligence Platforms (TIP) (7th), Extended Detection and Response (XDR) (22nd)
Proofpoint Email Protection
Ranking in Advanced Threat Protection (ATP)
3rd
Average Rating
8.4
Reviews Sentiment
6.7
Number of Reviews
95
Ranking in other categories
Email Security (1st), Digital Risk Protection (3rd), Office 365 Protection (1st), Secure Email Gateway (SEG) (2nd)
 

Mindshare comparison

As of April 2026, in the Advanced Threat Protection (ATP) category, the mindshare of Anomali is 3.2%, up from 0.8% compared to the previous year. The mindshare of Proofpoint Email Protection is 4.3%, down from 12.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Advanced Threat Protection (ATP) Mindshare Distribution
ProductMindshare (%)
Proofpoint Email Protection4.3%
Anomali3.2%
Other92.5%
Advanced Threat Protection (ATP)
 

Featured Reviews

CC
Enterprise Security Architect V at FirstEnergy
Enables automated threat intelligence sorting and enhances proactive threat hunting capabilities
You have to have at least a threat intelligence background or a SOC analyst background to use it, as that's the information you'll dig around with in there. If you don't have that kind of knowledge, it probably can be a little hard to use, but they do provide training. They offer training not only for how to use the platform but also some basic threat intelligence training to explain what these things are and what these terms mean. My company is a customer of Anomali. I would recommend it to other people. I would advise making sure you don't pick it without testing other products and have your use cases well thought out and documented before testing, so you know it will solve the problems you're trying to address. Keep an open mind with it and realize that whatever you can dream of, you can probably do with the platform. Overall, I would rate Anomali an eight out of ten.
AshishKochhar - PeerSpot reviewer
Information Technology Team Lead at a manufacturing company with 201-500 employees
Advanced email protection has blocked targeted attacks and reduces manual threat handling
I feel Proofpoint Email Protection is overpriced. I cannot say that the security level being provided does not justify the cost, but when comparing the similar level of security with other applications or security systems, it is overpriced. If Proofpoint could provide offers or discounts for customers who are already using the product or for new customers implementing it, along with some free services or add-ons, that would be helpful in terms of financial expense. Proofpoint Email Protection has recently introduced AI functionality in terms of data security capabilities and protecting AI assistance from targeted attacks. This is important since everything is now related to AI. The solution is doing threat detection and real-time threat detection and response pretty well. There are a few things I would like to see improved. Sometimes Proofpoint Email Protection takes time to analyze the workflow and the nature of the email. In this age of AI, the solution should analyze an email on the first receipt and determine whether it should pass or be marked as spam without checking previous data. Another improvement would be to have a more user-friendly dashboard. Additionally, if Proofpoint could add the same features in BCP as part of email protection in BCP, it would be helpful since I currently have to take a different add-on for BCP, and integrating it would save costs. I cannot say that threats have increased or decreased with Proofpoint Email Protection because it depends on the mail flow. The solution captures and filters out all threats, and the email threats vary every day depending on how many users are receiving how many emails per day. Today there might be 1,000 emails, tomorrow 5,000, and the day after 500. Proofpoint Email Protection does its job by scanning all emails and threats are reduced to some extent. Since I am aware that virus definitions are updated every day, I cannot blame Proofpoint Email Protection if they take time to determine the nature of an email being received. There are sometimes emails that are false positives, and Proofpoint Email Protection is a bit strict in analyzing false positives, sometimes stopping emails that are actually required. It analyzes the previous nature of an email and if a template looks like an informational template or related to spam, it blocks it because it looks similar to one blocked earlier. However, the template might actually be required. If I receive the same template today that is also blocked by Proofpoint Email Protection, that particular template might be useful and should not be blocked. In such cases, I have to raise it as a false positive stating that this is something in use or my users use and should be released. When AI starts doing its work, it analyzes the email from a sender with a particular template and releases it, but if the same email and template come from another sender, it blocks it according to the policies.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I have found Cyber threat intelligence (CTI) very useful and concise. The solution is easy to use."
"The feature I have found most valuable is credential monitoring. This feature is easy and quick."
"The most valuable aspect of Anomali is the threat modeling capability."
"I have found Cyber threat intelligence (CTI) very useful and concise. The solution is easy to use."
"We now have a very robust collection of threat intelligence based on the capabilities that Anomali provides."
"Proofpoint Email Protection's advantage is that, when it's working properly, it tends to catch more threats as compared to other products."
"Proofpoint Email Protection stands out as the best among all, including EOP."
"The tool has improved our workflow by ensuring people receive only the emails they need for work rather than being inundated with hundreds or thousands of unnecessary emails daily."
"I recommend Proofpoint Email Protection because it provides everything in one place, such as security control."
"The most valuable features are the business email compromise protection and targeted attack prevention."
"I would recommend Proofpoint Email Protection to others because it is useful, simple to use, and provides whatever is required."
"When those bad emails are kept out of the gate, and the user can just focus on the email that matters most to them, I think that is how much Proofpoint Email Protection is impacting the entire organization."
"The most valuable feature of Proofpoint Email Protection is the dashboards and their visibility, easy configuration, and artificial intelligence. Additionally, the reports are very important and helpful."
 

Cons

"A lot of tools can give you many features, such as CTI intelligence and a tax service reduction. However, many people are combining different tools together to have more capabilities. It is up to the consumer whether they want to have multiple tools or have one tool that serves the purpose. Anomali Enterprise could improve by combining all the other tools' features into one solution."
"Anomali Enterprise could improve by combining all the other tools' features into one solution."
"An area for improvement is the intelligence sharing within the Anomali community. The tagging system can be inconsistent, as any company can use any tags for their reporting."
"Less code in integration would be nice when building blocks."
"Support in the past has been top-notch, but recent trends indicate that it has taken a back seat, as we often don't get answers for days."
"Proofpoint is a little bit expensive."
"Proofpoint Email Protection's interface is confusing and could be improved."
"Proofpoint Email Protection could improve on the training. Every organization is different and to fine-tune it to block everything properly there needs to be better training."
"The areas that have room for improvement in Proofpoint Email Protection include their cost of ownership, which is fairly high."
"However, for low-size or mid-level organizations, it can be challenging in terms of cost, management, and resource utilization, which could be a problem for low-level enterprises."
"The solution could be improved with the addition of PLP and email encryption features."
"I feel Proofpoint Email Protection can be improved by providing a better user experience."
"Sometimes it doesn't detect actual spam emails, and sometimes it catches normal emails."
 

Pricing and Cost Advice

"When comparing the price of Anomali Enterprise to other solutions it is in the medium to high range. However, I am satisfied with the price."
"The licensing model for Proofpoint Email Protection is simple. It's based on the number of users. Price-wise, Proofpoint Email Protection is a five out of ten because it's a pretty expensive solution."
"Pricing has recently been increased and the cost is a downside"
"Proofpoint is fairly expensive."
"I rate the product price a seven on a scale of one to ten, where one is low price and ten is high price."
"Customers pay around $90,000 yearly for a 1,000-user organization, with the subscription license being the main expense, apart from implementation fees."
"I rate the price of Proofpoint Email Protection a four out of five."
"It is multiple times more expensive, which made it very much less attractive."
"Clients pay for an annual subscription of Proofpoint Email Protection. Every client always finds it expensive."
report
Use our free recommendation engine to learn which Advanced Threat Protection (ATP) solutions are best for your needs.
886,906 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
16%
Construction Company
7%
Manufacturing Company
7%
Computer Software Company
6%
Financial Services Firm
12%
Computer Software Company
9%
Manufacturing Company
9%
Comms Service Provider
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business2
Midsize Enterprise1
Large Enterprise5
By reviewers
Company SizeCount
Small Business28
Midsize Enterprise24
Large Enterprise45
 

Questions from the Community

What needs improvement with Anomali ThreatStream?
An area for improvement is the intelligence sharing within the Anomali community. The tagging system can be inconsistent, as any company can use any tags for their reporting. Combining all aliases ...
What is your primary use case for Anomali ThreatStream?
I use Anomali ( /products/anomali-reviews ) for threat hunting, threat collection, operationalization of intelligence, such as indicators of compromise (IOCs), and dissemination of reports for repo...
What advice do you have for others considering Anomali ThreatStream?
For new users, I recommend taking the training provided by Anomali as it is very well articulated. I advise reading the user manual and taking the instructor-led training sessions from the customer...
What is your experience regarding pricing and costs for Proofpoint Email Protection?
This is not something that I deal with regarding pricing, setup cost, and licensing.
What needs improvement with Proofpoint Email Protection?
I would like to see improvements in the transition from Proofpoint Protection Server to Proofpoint on Demand because Proofpoint Protection Server is not very user-friendly and requires logging into...
What is your primary use case for Proofpoint Email Protection?
In my environment, I am using Proofpoint Email Protection for advanced email threat protection. For malware, spam, and virus protection, we are using their email protection module and security modu...
 

Also Known As

Match, Lens, ThreatStream, STAXX, Anomali Security Analytics
Proofpoint Enterprise Protection, Proofpoint Digital Protection
 

Overview

 

Sample Customers

Bank of England, First Energy, UBISOFT, Bank of Hope, Blackhawk Network
Blocket, University of Waterloo, Lincoln Memorial University, WellSpan Health, U-Haul, Carestream Health, Westinghouse
Find out what your peers are saying about Anomali vs. Proofpoint Email Protection and other solutions. Updated: April 2026.
886,906 professionals have used our research since 2012.