

Find out in this report how the two Advanced Threat Protection (ATP) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
Analyst productivity has improved significantly, with hours saved because of automation and AI-driven work that Anomali performs.
There is a return on investment concerning time and effort saved by 40% after implementing Anomali.
The ideal situation would be to have all these portals combined into one unified dashboard.
After Proofpoint Email Protection, phishing has been completely eliminated, so it is working very efficiently.
Instead of individually logging into five portals, we can log into one and they all connect as if we had logged into all of them.
They have strong onboarding and deployment assistance, provide a dedicated technical account manager for large customers, and engage in regular product updates and customer interaction.
The technical support at Anomali is excellent.
It doesn't seem very professional how they're handling support anymore.
I am familiar with the granular policy control feature of Proofpoint Email Protection, and I find their support excellent for modifying those policies.
Even the engineers have been helpful, and if we open a case, they get back to us right away.
We always contact them if we need support, whether it's for setting up features or technical support, which is very responsive.
The scalability is massive, allowing us to store millions of indicators.
I believe Anomali's scalability is good; whether it is an organization for ten people or one hundred thousand people, the job a threat intel platform has to do will be the same.
Anomali's scalability is impressive as a mature platform capable of processing large amounts of threat intelligence and indicators of compromise data.
Proofpoint is scalable for multi-site organizations with thousands of users.
The solution provides a graphical representation and dashboard view showing how many threats are getting blocked on a daily and monthly basis.
Proofpoint Email Protection is considered to be highly scalable, designed for large enterprises, with a cloud-based architecture that offers an enormous number of options, including multi-organization support and high-volume email handling.
From a reliability perspective, Anomali consistently injects threat feeds, works on automation, performs reliable API integrations, and supports enterprise scale globally.
For example, while Microsoft allows ample time for users to adapt to deprecated features, Anomali only gave us three weeks before switching, so they need to be more cognizant of customer use cases from their engineering side.
The good thing is that they have a health check page, and if any issues arise, they notify us.
If Proofpoint Email Protection has an outage, we are either not receiving emails or not blocking the right threats.
Regarding the stability and performance of Proofpoint Email Protection, I have not experienced any crashes, downtimes, or performance issues.
Proofpoint Email Protection is very stable and reliable, as it remains accessible at all times without issues, ensuring that data is available in real time.
Combining all aliases into a coherent solution would be beneficial, as we had to review each individual source ourselves.
Anomali should increase their capability to fetch details from various dark web solutions where threat actors post compromised credentials.
Anomali's ability to correlate and integrate different Threat Intel platforms, such as Mandiant and PolySwarm, is another valuable feature, removing duplicacy and enabling the application of specific IOCs across various security controls.
The older legacy user interface just took a little to work with, and the new unified interface, as it was able to do more and more of the functionality of the old one, the product just got easier and easier to use.
In addition to the UI improvements, I would appreciate an increase in the speed of the tasks being processed on the pod.
There are pros and cons to that, but I would suggest maintaining a good balance between security protection and operational impact.
Pricing and licensing are good, but the costs for purchasing threat feeds are somewhat complicated and a bit on the higher side.
Customers pay around $90,000 yearly for a 1,000-user organization, with the subscription license being the main expense, apart from implementation fees.
Given my other experience with other vendors, I think they are a bit on the high end and a bit on the pricey end for the email security functionality that we were using.
Although it is a bit costly compared to Mimecast, Defender, and Cofense Vision, it is efficient and strong in security, so I do not mind the cost because I will not reduce my security risk.
Regarding integration, Anomali has capabilities to integrate with different downstream applications such as Palo Alto, allowing us to create playbooks to block domains, URLs, or IPs directly within the firewall.
Correlating IOCs with the telemetry data we are ingesting from our data sources allows us to pull monthly reports identifying how many assets and users interacted with malicious content, giving insight into whether communications failed or users accessed restricted content, providing complete visibility of the IOCs traveling throughout our environment.
It aggregates intelligence from hundreds of sources, automatically de-duplicates, applies risk scoring, applies context, and reduces much manual effort.
Without Proofpoint Email Protection, most of these emails would have come through, slipped through Exchange, gotten into the user's mailbox, and created a lot of trouble for the organization.
Proofpoint Email Protection has positively impacted my organization by ensuring we are not at risk of a breach through email.
TAP alerts, where Proofpoint Email Protection scans emails and sends alerts, provide the ability to review suspicious emails and validate them in a sandbox environment.
| Product | Mindshare (%) |
|---|---|
| Proofpoint Email Protection | 3.6% |
| Anomali | 3.4% |
| Other | 93.0% |


| Company Size | Count |
|---|---|
| Small Business | 2 |
| Midsize Enterprise | 1 |
| Large Enterprise | 14 |
| Company Size | Count |
|---|---|
| Small Business | 28 |
| Midsize Enterprise | 24 |
| Large Enterprise | 59 |
Anomali delivers user-friendly cyber threat intelligence, offering concise insights with robust capabilities for evolving scenarios.
Anomali offers a powerful platform for cyber threat intelligence, allowing organizations to efficiently stream and analyze threat feeds. It excels in threat modeling, prioritizing intelligence, and supporting large-scale automation through its API, fostering a proactive security approach.
What are Anomali's Key Features?Anomali serves as a crucial tool for threat intelligence in industries ranging from finance to healthcare. Organizations stream threat feeds into Anomali to correlate and aggregate data, enhancing security measures and facilitating thorough threat investigations. Its adaptability makes it suitable across different sectors.
Proofpoint Email Protection provides powerful filtering against spam, phishing, and malware, leveraging effective threat detection and blocking capabilities. This solution integrates smoothly with platforms like Office 365, offering a user-friendly dashboard for seamless operations.
Proofpoint Email Protection focuses on email security, ensuring protection against phishing, malware, and spam. It includes features like URL scanning, anti-phishing, anti-virus protection, and sandboxing for comprehensive threat analysis. Its advanced analytics through TAP and TRAP, along with strong integration abilities, make it appealing for handling email threats. While scalability and ease of deployment are advantages, challenges such as integration in complex environments, the cost, and limited local support require attention. Enhancements in search functionality, email encryption, and improved phishing detection are also needed.
What are the key features of Proofpoint Email Protection?
What benefits and ROI should users look for in reviews?
Industries adopting Proofpoint Email Protection include finance, healthcare, and education sectors, which benefit from its robust email security measures. Educational institutions prioritize safe communication for staff and students, while healthcare organizations focus on protecting sensitive patient data. Financial services benefit from preventing data breaches and fraud through advanced threats management.
We monitor all Advanced Threat Protection (ATP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.