We use Mimecast as our email gateway. We also use it as our archival service. All those phishing, anti-phishing, spear phishing, spamming, and other security filters that they have, we use all of them.
Head Of Finance And Administration at a financial services firm with 1,001-5,000 employees
Good gateway and email security with an easy initial setup
Pros and Cons
- "It's really quite user-friendly. In terms of technical superiority and the product itself, there are no complaints. It is really cutting edge."
- "We have subscribed to an archival service, and yet, when we have to get our data out, we have to pay a fee to get our own data. They charge an extraction fee."
What is our primary use case?
What is most valuable?
We have found email security very good.
The gateway is excellent.
We have found the archival services to be very valuable.
It's really quite user-friendly. In terms of technical superiority and the product itself, there are no complaints. It is really cutting edge.
The initial setup is straightforward.
What needs improvement?
It was not so much about the product itself, however, their business model needs improvement. We have subscribed to an archival service, and yet, when we have to get our data out, we have to pay a fee to get our own data. They charge an extraction fee. This is something which really worries us as a company.
For how long have I used the solution?
I've used the solution for about six years at this point. It's been a while.
Buyer's Guide
Mimecast Email Security
January 2026
Learn what your peers think about Mimecast Email Security. Get advice and tips from experienced pros sharing their opinions. Updated: January 2026.
881,082 professionals have used our research since 2012.
What do I think about the stability of the solution?
The solution is stable. There aren't bugs or glitches. It doesn't crash or freeze. It's very good.
What do I think about the scalability of the solution?
The solution can scale well. If a company needs to expand, it can do so rather easily.
We have grown from about 2,600 users to about 4,000 users. We have added additional geography as well. The product is resilient enough to take care of all of this.
How are customer service and support?
We have contracts and we are also subscribed to a service plan. Whenever we have used it, the service levels have been very good and we have no reason to complain.
Which solution did I use previously and why did I switch?
We were previously thinking of an alternative to Mimecast for two reasons. The main reason is as an organization, we are in the financial service industry, and we have to show some data resiliency to our regulators. However, due to the fact that we're present in 30 countries, what happens is all Mimecast data is centrally hosted in one particular grid, which is preventing us from showing data resiliency to them. I want a solution that allows me to selectively map users to a particular geography.
How was the initial setup?
We didn't find the initial implementation complex. It was pretty easy and rather straightforward. We didn't run into trouble.
We are a complex organization. We are present in 30 countries. It was a mix of on-prem and some were in Office 365. Due to the set up of our own architecture, we had to undergo some labor, however, otherwise, the entire process was pretty straightforward.
What's my experience with pricing, setup cost, and licensing?
We typically use a subscription service. If there are version upgrades. We automatically get upgraded to the latest version, as it's a software as a service setup. We don't need to update it as Mimecast takes care of it.
If you need to extract data from their archival service, there is an additional fee involved.
As we are an enterprise customer and we have a relationship with them, what we are told by the reseller is that we pay about 40% of their list price for this product.
It's an expensive solution. There are other competitors, like Barracuda, who offer similar services. We believe that over the years, they have picked up, and their pricing is much more competitive than Mimecast. As an organization, Microsoft itself has really matured over the years. They offer probably 90% of what Mimecast is offering, and then you don't have to pay anything extra for it because it comes with part of the Office 365 licenses. That is why we also believe that there is a lot of room for Mimecast to get their act together, pricing-wise.
Which other solutions did I evaluate?
We evaluated a few other options such as Cisco IronPort as a security service. We evaluated Proofpoint. The comprehensive solution that Mimecast offers, however, really made us sign on the dotted line.
What other advice do I have?
We're just an end-user.
We use their Perimeter Defense plan, we use their Continuity plan, we also use email to archive. These are the three scales that we use from them.
I would advise others considering the solution to technically evaluate their competencies, their highs, and lows, first. Also, read the fine print, and understand the exact costs. A company will need to understand natively how much of Mimecast capabilities does Microsoft offer if you just subscribe to an Office 365 license. It might make them rethink using this solution.
From a technical standpoint, I would rate the solution eight out of ten.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Graduate Analyst at a tech services company with 201-500 employees
Can observe multiple information sensors and monitors outbound traffic
Pros and Cons
- "The initial setup is easy."
- "Mimecast need to ensure that the body text format is correctly handled and that images are properly embedded in the body text."
What is our primary use case?
We have a client using the Mimecast tool. We observe multiple information sensors, such as default information, mismatched data, unknown IPs, and various user activities.
They use Mimecast to monitor outbound traffic, including impersonation and mismatched data. All these activities are managed within Mimecast. Companies use Mimecast to enhance network security within their budget. For outbound communication, emails go to Mimecast, where they are scanned and delivered to the user.
What is most valuable?
We are monitoring emails that come from outside the organization. Some impersonation policies are in place, and we are tracking five different types of impersonation policies. These policies include external IP addresses, external users, reply-to mismatches, default inbound attachments, and VIP impersonation cases.
What needs improvement?
Mimecast need to ensure that the body text format is correctly handled and that images are properly embedded in the body text. Additionally, Mimecast should ensure that the system can accommodate multiple users and effectively send information to them.
For how long have I used the solution?
We are using V7.5.0 of the solution.
What do I think about the scalability of the solution?
One person is using this solution.
How was the initial setup?
The initial setup is easy.
What other advice do I have?
I have learned various aspects related to the topic. I will monitor all types of logs, including those from Mimecast, which provides information about users’ contacts, histories, and account numbers. Although multiple policies are in place, we are currently monitoring just five specific types.
Mimecast is useful. According to the premises, Mimecast is important, but the choice of tools often depends on each company’s requirements and budget. While Mimecast is a highly effective console for email protection, companies select tools based on their own budgets and needs.
It is easy for a beginner to learn. If a person understands impersonation policies and how to apply them, the process becomes straightforward. However, if someone is unfamiliar with these policies and their monitoring, it can be challenging. However, once a person is knowledgeable about impersonation policies, the process becomes much easier.
Overall, I rate the solution an eight out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Buyer's Guide
Mimecast Email Security
January 2026
Learn what your peers think about Mimecast Email Security. Get advice and tips from experienced pros sharing their opinions. Updated: January 2026.
881,082 professionals have used our research since 2012.
Information Technology Executive at a consultancy with 1,001-5,000 employees
A stable solution that can be used for email security, but it should include more AI features
Pros and Cons
- "Email security is the most valuable feature of the solution."
- "The solution should include more AI features instead of Mimecast's more general static configuration tooling."
What is our primary use case?
We use the solution for email security.
What is most valuable?
Email security is the most valuable feature of the solution.
What needs improvement?
The solution should include more AI features instead of Mimecast's more general static configuration tooling.
For how long have I used the solution?
I have been using Mimecast Email Security with Targeted Threat Protection for two years.
What do I think about the stability of the solution?
I rate the solution a nine out of ten for stability.
What about the implementation team?
The solution was deployed by a vendor for us.
What other advice do I have?
Mimecast Email Security with Targeted Threat Protection is a well-known solution that was recommended to us by a third party.
I wouldn't say Mimecast Email Security with Targeted Threat Protection is the best tool out there, but it's okay. I would advise potential users to try out its alternatives as well.
Overall, I rate the solution a six or seven out of ten.
Which deployment model are you using for this solution?
Private Cloud
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Senior Equity Analyst & Director of Managed Income Strategy at a financial services firm with 51-200 employees
Reliable, and protects emails from threats, including spam
Pros and Cons
- "It's good, it keeps the spam out."
- "The filtering needs more flexibility."
What is our primary use case?
I am an investment research analyst. We use this solution for spam and as our security filter.
What is most valuable?
It's good, it keeps the spam out.
It does a really good job at not allowing threats through.
What needs improvement?
This solution can be frustrating. It blocks many things that should be going through. I have to authorize permission, which seems to be a frequent occurrence. It may be that we have set our protection too high but we work in a regulated industry.
When you click to change permissions on something, it always launches a browser instance to tell me that I have taken an action. I have to close that out and go on to the next one, and when I asign permission another item, again it opens up a browser again to notify me that I have taken action. I don't know why it does that or why it is necessary.
The filtering needs more flexibility.
For how long have I used the solution?
I have been using Mimecast for four or five years.
What do I think about the stability of the solution?
I have not had any issues with the stability of Mimecast Email Security with Targeted Threat Protection. We have not experienced any glitches or bugs.
How are customer service and technical support?
I have not contacted technical support.
What's my experience with pricing, setup cost, and licensing?
I am not familiar with the pricing.
Which other solutions did I evaluate?
I have researched Magic Software. I wanted a better understanding of the differences in the offerings. I allocated capital, I am trying to see if Magic is a good holding for our small-cap portfolio.
It is abstract but I don't do any application development.
What other advice do I have?
I would rate Mimecast Email Security with Targeted Threat Protection an eight out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
IT System Administrator at a engineering company with 1,001-5,000 employees
Easy-to-use admin console, stable and scalable, and does a good job
Pros and Cons
- "It does a good job for us, and its admin console is easy to use."
- "Their support should be improved. They are notorious for sending you to knowledge-based articles rather than actually talking to you, but that is, unfortunately, kind of becoming a trend with everything. In terms of features, I haven't had any complaints. However, I don't like the fact they moved to a paid training subscription model. They used to have a lot of free webinars for training, but they have started to charge for them in the past year."
What is our primary use case?
It is our spam filter, phishing filter, and executive impersonation filter. We have its latest version.
What is most valuable?
It does a good job for us, and its admin console is easy to use.
What needs improvement?
Their support should be improved. They are notorious for sending you to knowledge-based articles rather than actually talking to you, but that is, unfortunately, kind of becoming a trend with everything.
In terms of features, I haven't had any complaints. However, I don't like the fact they moved to a paid training subscription model. They used to have a lot of free webinars for training, but they have started to charge for them in the past year.
For how long have I used the solution?
I have been using this solution for two years.
What do I think about the stability of the solution?
It is stable. We didn't have any issues.
What do I think about the scalability of the solution?
It is scalable. It is used across our entire enterprise. We probably have about 175 people, and they range from our CEO to all the way down to our warehouse people.
How are customer service and technical support?
They always send you a link to an article rather than call you and talk to you about the problem you're reporting.
How was the initial setup?
It was pretty complex.
What about the implementation team?
We had a third party do the setup for us.
Which other solutions did I evaluate?
We looked at Microsoft, Proofpoint, and Mimecast.
What other advice do I have?
I would advise others to take a good look at it. There are a lot of layers to it, and there are parts of Mimecast that we don't even use yet. It is pretty much a beast when it comes to email security, but just make sure you take your time and have somebody who knows how to set it up. Give enough training to your admin. I manage several different pieces, and Mimecast is one of them. It is just an ongoing thing that requires monitoring all day and looking for phishing, impersonations, and things like that. You also have to set up different policies as they come about for block centers and permitted centers. It is almost a full-time job.
I would rate Mimecast Email Security with Targeted Threat Protection an eight out of ten. I don't really have any complaints, and it does its job.
Which deployment model are you using for this solution?
Private Cloud
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Cyber Security Professional at a tech services company with 51-200 employees
Can be used for the banking and financial sectors, and their DMARC Analyzer is very valuable
Pros and Cons
- "The most valuable feature is the DMARC Analyzer."
- "External security features need improvement."
What is our primary use case?
The solution is used for banking and finance clients.
What is most valuable?
The most valuable feature is the DMARC Analyzer.
What needs improvement?
External security features need improvement.
For how long have I used the solution?
I have been using Mimecast Email Security for one year.
What do I think about the stability of the solution?
It is a very stable solution.
What do I think about the scalability of the solution?
It is a scalable security solution. I have one client with 5,000 users and another with 200 users. Mostly, SMBs use this solution. It is a bit slow for enterprises.
How was the initial setup?
The setup is really easy. You do not need to install it on-premises. You can install it on the cloud with any desktop. The deployment takes one hour.
What's my experience with pricing, setup cost, and licensing?
The solution is expensive.
What other advice do I have?
Overall, I would rate the solution an eight out of ten.
Disclosure: My company has a business relationship with this vendor other than being a customer.
IT Consultant at a tech services company with 11-50 employees
Reliable with nice dashboards and an easy setup
Pros and Cons
- "It offers an easy initial setup."
- "The solution is very expensive."
What is our primary use case?
We primarily use the solution for filtering.
What is most valuable?
The dashboard is very nice.
It offers an easy initial setup.
The solution has been stable.
We can scale the product.
Technical support is helpful.
What needs improvement?
The solution is very expensive.
For how long have I used the solution?
I've used the solution for a couple of years. Maybe four or five.
What do I think about the stability of the solution?
The solution is stable and reliable. There are no bugs or glitches, and it doesn't crash or freeze.
What do I think about the scalability of the solution?
This is s scalable product. If you want to expand it, you can.
We have 100 people on the solution at this point. The users vary. Different departments use it.
How are customer service and support?
We are satisfied with the technical support. We find them to be responsive.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
We did previously use a different solution. It might have been Check Point. Once we saw the demo, we felt this solution would be a better fit, so we switched.
How was the initial setup?
The solution is very simple to set up. It's not overly complex or difficult. The deployment only takes a couple of days.
One person can handle any maintenance requirements as needed.
What about the implementation team?
We had a third-party assist us with the initial setup process. We did not handle it completely by ourselves.
What's my experience with pricing, setup cost, and licensing?
The solution is quite pricy. We find it to be costly.
What other advice do I have?
I'm a customer and end-user.
We are using the latest version of the solution.
I'd rate the solution eight out of ten.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
General Manager at a tech services company with 11-50 employees
It does exactly what it promises to do
Pros and Cons
- "Mimecast certainly helped my customers reduce phishing emails."
- "From an administrative point of view, Mimecast is a little bit cumbersome and difficult. It's not something that the end-user can easily find navigate themselves."
What is our primary use case?
My customer base is made up of small clients. They all fall between five and 10 users.
How has it helped my organization?
Mimecast certainly helped my customers reduce phishing emails.
What is most valuable?
Among my customers, there was a lot of traction for the archiving. The targeted threat protection was also quite useful.
What needs improvement?
From an administrative point of view, Mimecast is a little bit cumbersome and difficult. It's not something that the end-user can easily find navigate themselves.
For how long have I used the solution?
I've been using Mimecast for five years. I used to be a reseller, but now I've moved on to a different business.
What do I think about the scalability of the solution?
As far as I'm concerned, it worked exactly the same for a client that had one mailbox as it would for a client that had 500 mailboxes.
How was the initial setup?
I've never set Mimecast up. The technical teams did that. From my understanding, it took them about two days to set it up.
What's my experience with pricing, setup cost, and licensing?
Mimecast is expensive. It's a premium product. It sometimes could be a difficult sell because of the cost.
Which other solutions did I evaluate?
I don't have anything to compare Mimecast with because I haven't looked at any of the others yet to see if there is something comparable. But I would presume that by now there will be other products that can compare to it. To get security and targeted threat protection, one could potentially look at Sophos Central Email Protection. But they don't have an archiving solution. So one would have to go somewhere else to get an archiving solution. With Mimecast. at least, it's all available from the same vendor, if that makes sense.
What other advice do I have?
I would rate Mimecast nine out of 10. It's a brilliant product. It works very well. I've very seldomly, if ever, had any problems with it. It does exactly what it promises to do. At the same time, it is expensive. That's the only problem. And the price tag puts it out of the range of smaller businesses. That's where I think it falls flat. But I always tell people the same thing: If security is important to you, then certainly spend the money and get it, because Mimecast is a great product and it works.
Which deployment model are you using for this solution?
Public Cloud
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Buyer's Guide
Download our free Mimecast Email Security Report and get advice and tips from experienced pros
sharing their opinions.
Updated: January 2026
Popular Comparisons
Microsoft Defender for Office 365
Proofpoint Email Protection
Abnormal Security
Barracuda Email Security Gateway
Kiteworks
Barracuda Email Protection
IRONSCALES
Sophos Email
Trellix Collaboration Security
TitanHQ SpamTitan
Fortinet FortiMail Cloud
Hornetsecurity 365 Total Protection
Symantec Messaging Gateway
Kaspersky Security for Mail Server
Vade for M365
Buyer's Guide
Download our free Mimecast Email Security Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:


















