No more typing reviews! Try our Samantha, our new voice AI agent.
Karsh Trivedi - PeerSpot reviewer
Security Engineer at Payatu
Real User
Top 5Leaderboard
May 17, 2026
Gateway policies have greatly reduced phishing emails and support rapid investigation workflows
Pros and Cons
  • "Mimecast Insider Risk Management and Data Protection has positively impacted our organization as it has helped us identify a lot of phishing emails and stopped many unauthorized disclosures or accidental disclosures of information."
  • "I think the UI of Mimecast Insider Risk Management and Data Protection can be more optimized, as it feels slow and laggy at points."

What is our primary use case?

My main use case for Mimecast Insider Risk Management and Data Protection is email security, as I have deployed it as my email gateway to protect against any kind of phishing attempts or malicious email attempts.

A specific example of how Mimecast Insider Risk Management and Data Protection helped me catch or block a phishing attempt or malicious email is that we deployed some gateway policies and content-based pattern matching policies. We identified recent campaigns we were facing in the organization and created regex-based patterns on the content matching side, which helped me mitigate the threat by matching that content from the gateway policies and blocking the emails that were potentially phishing.

My day-to-day use case, being a security engineer or security analyst, is to investigate the emails that users report and purge the emails. Mimecast Insider Risk Management and Data Protection gives very good functionality for purging emails or reviewing reported emails, which helps me significantly with investigation apart from blocking threats.

What is most valuable?

The best features Mimecast Insider Risk Management and Data Protection offers are its machine learning algorithms for content matching and data protection features, which are superior.

The machine learning algorithms and data protection features have made a difference for me as I explained earlier, with the same practical goals where I deployed them.

Mimecast Insider Risk Management and Data Protection has positively impacted our organization as it has helped us identify a lot of phishing emails and stopped many unauthorized disclosures or accidental disclosures of information. Multiple users attempted unauthorized or accidental disclosures during both testing and production phases.

What needs improvement?

There are no particular reviews on improvement from my side regarding Mimecast Insider Risk Management and Data Protection.

I think the UI of Mimecast Insider Risk Management and Data Protection can be more optimized, as it feels slow and laggy at points. If that can be optimized and improved, that would be better.

For how long have I used the solution?

I have been using Mimecast Insider Risk Management and Data Protection for the last one year.
Buyer's Guide
Mimecast Insider Risk Management and Data Protection
July 2026
Learn what your peers think about Mimecast Insider Risk Management and Data Protection. Get advice and tips from experienced pros sharing their opinions. Updated: July 2026.
908,800 professionals have used our research since 2012.

What do I think about the stability of the solution?

Mimecast Insider Risk Management and Data Protection is stable.

What do I think about the scalability of the solution?

Its scalability is pretty good because it is deployed on a cloud base, so we do not have to manage the scalability part of it.

How are customer service and support?

The customer support for Mimecast Insider Risk Management and Data Protection is good; I have never interacted with them, but I hear it is good.

Which solution did I use previously and why did I switch?

I do not think we switched from any other solution.

What about the implementation team?

I was not part of the deployment or procurement process for Mimecast Insider Risk Management and Data Protection.

As I mentioned, I was not part of the procurement or deployment phase, so I cannot speak to the experience with pricing, setup cost, or licensing.

What was our ROI?

I have not seen a return on investment as of now, but if we really need to measure it, we have seen a significant downfall in phishing emails getting delivered to user inboxes, which is a good point.

Which other solutions did I evaluate?

Before choosing Mimecast Insider Risk Management and Data Protection, I did not evaluate other options; there were no other options considered.

What other advice do I have?

My advice for others looking into using Mimecast Insider Risk Management and Data Protection is to evaluate it, and if it fits your needs, it is a good solution. I would rate this product a 9 out of 10.

Which deployment model are you using for this solution?

Hybrid Cloud

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Last updated: May 17, 2026
Flag as inappropriate
PeerSpot user
technical specialist at a tech vendor with 10,001+ employees
Real User
Top 20
Jun 30, 2026
Email monitoring has protected sensitive documents but still needs stronger URL threat detection
Pros and Cons
  • "Without Mimecast Insider Risk Management and Data Protection, your mail communication is not safe, and there is no one monitoring your communication."
  • "Mimecast Insider Risk Management and Data Protection could improve by adding a feature to analyze URLs; there is a need for complexity given modern AI developments."

What is our primary use case?

My main use case for Mimecast Insider Risk Management and Data Protection is utilizing it as a mail gateway security solution to filter every email sent in and out of the organization. If an internal user wants to send an email or any attachment, such as a document or a PDF file, to an external user, or if an external user tries to send a document into the company, Mimecast operates at a security layer to verify the header and analyze every email and file. Mimecast has the capability to control and monitor what is going inside the network or outside the network according to the sending of documents over the internal to external domain.

I can share an example where Mimecast really helped me with a security challenge: in a previous company, there was a situation where an internal user sent an offensive document to an external email. Mimecast filtered out and blocked their request, triggering an alert. As a Mimecast admin, I had the control to see what they were sending, so Mimecast blocked the request, preventing the offensive document from being sent to the external side.

What is most valuable?

Mimecast Insider Risk Management and Data Protection is very widely used nowadays for mail security. If you want to secure your communication through email, you have to deploy Mimecast Insider Risk Management and Data Protection in your network infrastructure. Without Mimecast Insider Risk Management and Data Protection, your mail communication is not safe, and there is no one monitoring your communication. It is very useful and mandatory to have Mimecast Insider Risk Management and Data Protection in the infrastructure of a network, allowing us to secure document files that we are sharing with others.

Mimecast Insider Risk Management and Data Protection offers valuable capabilities, particularly the feature that if any documents or emails are blocked over Mimecast Insider Risk Management and Data Protection, we cannot directly release them to the users or the sender. Mimecast Insider Risk Management and Data Protection requires releasing to Office 365 first, and then we can release the document to the other person. This is the best feature I have observed.

Mimecast Insider Risk Management and Data Protection is quite stable. We entirely depend on it for mail communication, sending attachments, and every document. Every user's emails and attachments are examined by Mimecast Insider Risk Management and Data Protection alone.

What needs improvement?

Mimecast Insider Risk Management and Data Protection could improve by adding a feature to analyze URLs; there is a need for complexity given modern AI developments. For users, it is difficult to determine if a URL is legitimate. Mimecast Insider Risk Management and Data Protection should incorporate features to detect if a URL is malicious or generated by AI, especially since many attackers use scripts to bypass mail gateways.

As for the user interface of Mimecast Insider Risk Management and Data Protection, it is quite simple and effective. I do not think there is any improvement needed on the user interface side, but in configuration, sometimes users mistakenly click a button and can accidentally close entire processes, which should be improved.

For how long have I used the solution?

I have 3.3 years of experience using Mimecast Insider Risk Management and Data Protection.

What do I think about the scalability of the solution?

Mimecast Insider Risk Management and Data Protection is scalable; we can handle organizational growth by deploying private, hybrid, or public cloud solutions as needed.

How are customer service and support?

Customer support for Mimecast Insider Risk Management and Data Protection is quite good; they resolve issues according to their established SLA, and I am satisfied with their support.

What other advice do I have?

Governance of security in Mimecast Insider Risk Management and Data Protection is important; we cannot easily release documents without authorization. If something triggers an alert, it requires the approval of governance and risk management before we can read messages or release communications. Therefore, its artificial intelligence capabilities are evident.

Regarding Mimecast Insider Risk Management and Data Protection's AI capabilities, I do not think artificial intelligence is reliable in the security domain. While artificial intelligence performs well in other areas, it is not applicable in security from my perspective because of the sensitive nature of user data.

I advise everyone working in a company to deploy Mimecast Insider Risk Management and Data Protection in their organization to secure email communications, including PDF and file attachments. It is essential to analyze and examine communications from internal to external.

In conclusion, every organization should consider using Mimecast Insider Risk Management and Data Protection. We operate in an artificial intelligence era, and every communication should be monitored, similar to how firewalls examine traffic. Having Mimecast Insider Risk Management and Data Protection is crucial for ensuring secure email communication, making it essential for companies to utilize Mimecast Insider Risk Management and Data Protection for at least one or two domains, especially for examining external communications. I would rate my overall experience with this product as a 7 out of 10.

Which deployment model are you using for this solution?

Private Cloud

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Other
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Last updated: Jun 30, 2026
Flag as inappropriate
PeerSpot user
Buyer's Guide
Mimecast Insider Risk Management and Data Protection
July 2026
Learn what your peers think about Mimecast Insider Risk Management and Data Protection. Get advice and tips from experienced pros sharing their opinions. Updated: July 2026.
908,800 professionals have used our research since 2012.
Joseph Makinta - PeerSpot reviewer
Deputy Director, Ict Security at a government with 201-500 employees
Real User
Top 20
May 25, 2026
Gained visibility into shared data and ensured email continuity but still need better configuration support
Pros and Cons
  • "Mimecast Insider Risk Management and Data Protection has positively impacted my organization by giving us more visibility in terms of what our users are doing or which data they are sharing."
  • "Mimecast Insider Risk Management and Data Protection can be improved because we struggled with configurations."

What is our primary use case?

My main use case for Mimecast Insider Risk Management and Data Protection is to examine our SharePoint, OneDrive, and Teams platforms within our Microsoft Collaboration environment.

A specific example of how I'm using Mimecast with those Microsoft platforms is that we are checking what is currently being shared on that collaboration, what data might be leaving our organization, and we are putting controls in place to be notified of what is entering and also leaving our organization.

Mimecast Insider Risk Management and Data Protection becomes part of our challenge management because we are addressing the challenge of not having a data loss prevention tool in place. Since we don't have a DLP solution, this can be utilized to cover that space.

What is most valuable?

The best features that Mimecast Insider Risk Management and Data Protection offers include data security, which is about securing our organizational data. Data security is the best feature that comes with Mimecast Insider Risk Management and Data Protection. In terms of governance, we are able to ensure that the integrity of our data is maintained, as well as the confidentiality.

Mimecast Insider Risk Management and Data Protection helps me ensure the integrity and confidentiality of my data by filtering our emails. It is also our email backup solution where if our on-premises emails are not working, we can access our emails via Mimecast Insider Risk Management and Data Protection. We are also archiving through Mimecast Insider Risk Management and Data Protection. It serves as our email continuity solution. When filtering, we are filtering against phishing, spam, and other threats to ensure that our environment does not get compromised by those attacks.

Mimecast Insider Risk Management and Data Protection is not just about filtering; it is also an email continuity platform. For me, that is the best feature currently for us because if we are unable to access our emails, we know we can go to Mimecast Insider Risk Management and Data Protection to access our emails. Even if we are hit by a disaster, we know that we are still covered with Mimecast Insider Risk Management and Data Protection for our emails.

Mimecast Insider Risk Management and Data Protection has positively impacted my organization by giving us more visibility in terms of what our users are doing or which data they are sharing. Our organization is a high-profile judiciary organization in South Africa, so that visibility of what data has been shared and where is very important. Mimecast Insider Risk Management and Data Protection has afforded us that opportunity.

That visibility has made a difference by improving compliance because when we report to the Auditor-General, we are able to pull reports and show that this is the data that is currently being shared or traversing through our organization. Since we don't have a DLP solution, Mimecast Insider Risk Management and Data Protection is now covering us on that front.

What needs improvement?

Mimecast Insider Risk Management and Data Protection can be improved because we struggled with configurations. I suggest that Mimecast provide training and certification on that component and ensure that alerts are more accurate, including the fine-tuning of the alerts.

In terms of integration with other tools, there should be a look at the firewalls for integration to the perimeter security.

For how long have I used the solution?

I have been using Mimecast Insider Risk Management and Data Protection for approximately three to four months.

What do I think about the stability of the solution?

Mimecast Insider Risk Management and Data Protection is stable.

What do I think about the scalability of the solution?

Mimecast Insider Risk Management and Data Protection has been able to keep up with our organization's growth, including adding more users, expanding across departments, and adapting to larger data volumes.

How are customer service and support?

The customer support is excellent.

Which solution did I use previously and why did I switch?

When I joined the organization, they were already on Mimecast Insider Risk Management and Data Protection. From other organizations, I have used other solutions, but at this organization, I have used Mimecast Insider Risk Management and Data Protection since I joined.

How was the initial setup?

My experience with pricing, setup cost, and licensing is good overall because we have the best account manager, so that experience was not problematic.

What was our ROI?

I cannot share a return on investment yet because we are still evaluating to determine the return on the investment.

Which other solutions did I evaluate?

Before choosing Mimecast Insider Risk Management and Data Protection, we evaluated other options such as Purview for the DLP solution, and cost made us move away from Microsoft.

What other advice do I have?

My advice to others looking into using Mimecast Insider Risk Management and Data Protection is to proceed with it because it is a solution worth implementing. I would rate this product a 6 out of 10.

Which deployment model are you using for this solution?

Hybrid Cloud

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Other
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Last updated: May 25, 2026
Flag as inappropriate
PeerSpot user
Gayathri Subramanian - PeerSpot reviewer
Sales Coordinator at Rounak Computers LLC
Real User
Top 20
Jul 26, 2026
Email security has improved and now stops phishing attacks while protecting sensitive data
Pros and Cons
  • "Mimecast Insider Risk Management and Data Protection has positively impacted my organization by reducing the incident of clicking on malicious and phishing emails, ensuring there are zero phishing mail with filtering happening from the beginning itself so we feel we are in safe hands."
  • "The setup and administration can be a bit complex, but occasionally, legitimate emails end up in quarantine."

What is our primary use case?

My main use case for Mimecast Insider Risk Management and Data Protection is primarily email security, focusing on filtering spam and phishing emails, which has significantly improved our email security. Phishing emails and malicious emails are attacking customers everywhere, as well as from our end.

The setup and administration can be a bit complex, but occasionally, legitimate emails end up in quarantine. However, the protection it provides outweighs those inconveniences.

I can give you a specific example of how Mimecast helped our organization with email security. One of our customers recently received a malicious email, and one of the users clicked on that link, leading to a very big incident. Mimecast helped us understand how to retrieve it and identify the user responsible and the necessary solutions. Mimecast has reduced the number of suspicious emails reaching users and provides useful features such as email archiving and continuity.

The interface could be more intuitive, and managing quarantine sometimes requires extra effort, but overall, it is a dependable platform that enhances our organization's security. Mimecast has been reliable for keeping spam and phishing emails out of our inboxes. It is not the easiest platform to manage, and users sometimes need help finding quarantined emails, but overall it is a dependable email security solution that gives us peace of mind.

What is most valuable?

The best features Mimecast Insider Risk Management and Data Protection offers include Business Email Compromise, continuity, and phishing protection because most of our customers are using advanced protection. It has been transferring into critical protection where the BEC is also included, making it good and trustworthy.

Mimecast Insider Risk Management and Data Protection has positively impacted my organization by reducing the incident of clicking on malicious and phishing emails. The filtering now ensures there are zero phishing mail, and the quarantine has also reduced. Filtering happens from the beginning itself, so we feel we are in safe hands.

What needs improvement?

Regarding improvements, the cost is somehow higher. If we can validate and reduce some cost, it would be good so we can pitch and sell it to more customers.

For how long have I used the solution?

I have been working in my current field for one year, and it has been one year with Rona Computers.

What do I think about the stability of the solution?

Mimecast Insider Risk Management and Data Protection is stable.

What do I think about the scalability of the solution?

Mimecast Insider Risk Management and Data Protection is easy to scale up or down as our needs change, and the platform provides useful alerts for suspicious activities such as unusual file sharing and data exfiltration attempts, allowing our security team to respond quickly.

How are customer service and support?

Mimecast customer support is very good. I am saying this not only based on the sales team but also the support team; they are easily accessible. Whenever we raise any tickets or related issues, they sort it out immediately.

Which solution did I use previously and why did I switch?

Mimecast is the only solution we have used since I joined. We might have transformed from advanced to critical, but I am not sure; it is Mimecast only.

What was our ROI?

For ROI, we can get rid of those phishing emails, and Mimecast Insider Risk Management and Data Protection has helped us gain better visibility into potential insider threats and risky user behavior.

What's my experience with pricing, setup cost, and licensing?

My experience with pricing, setup cost, and licensing has been straightforward. I took the help of Mimecast Insider Risk Management and Data Protection team for pricing costs and licenses, and I did not find any challenges. Mimecast Insider Risk Management and Data Protection team supports us a lot for convincing as well, so there will be no challenges.

Which other solutions did I evaluate?

If I evaluated other options before choosing Mimecast Insider Risk Management and Data Protection, it would have been other email solutions.

What other advice do I have?

The advice I would give to others looking into using Mimecast Insider Risk Management and Data Protection is that the integration with our existing security tools was straightforward, although fine-tuning policies to reduce false positives took some time.

Overall, Mimecast Insider Risk Management and Data Protection is an effective solution for organizations looking to strengthen insider risk management and protect sensitive data. I would rate this product 9 out of 10.

Which deployment model are you using for this solution?

On-premises

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Other
Disclosure: My company has a business relationship with this vendor other than being a customer. Reseller
Last updated: Jul 26, 2026
Flag as inappropriate
PeerSpot user
Bukhosi Ndlovu - PeerSpot reviewer
Cyber Security Engineer at a computer software company with 51-200 employees
Real User
Top 20
May 28, 2026
Client onboarding has become faster and user behavior analysis guides targeted risk training
Pros and Cons
  • "Mimecast Insider Risk Management and Data Protection's best features in my experience include user behavior analysis, the executive risk summary for stakeholders, the analysis tools available for engineers and technical people, and the responsiveness of support."

    What is our primary use case?

    My main use case for Mimecast Insider Risk Management and Data Protection is during the first instance when taking on a client, when conducting risk analysis, identifying where the gaps are, and establishing baselines of what the clients are experiencing, whether it is exfiltration or understanding what the users are using. This allows me to identify behaviors from end users and create policies to mitigate those risks.

    A specific example of how I have used Mimecast Insider Risk Management and Data Protection to spot a risk or stop data loss involves onboarding the client, letting it run for some time, and then analyzing the data by pulling up executive reports. Depending on the licensing, I start the configuration and close the gaps identified in the risk assessment. In some instances, if the issue is user behavior, I create trainings for the end users to raise awareness about the risks, the direction the business is taking, and how to mitigate those risks. In my field, a fully equipped user is more valuable than depending solely on the technology.

    What is most valuable?

    Mimecast Insider Risk Management and Data Protection's best features in my experience include user behavior analysis, the executive risk summary for stakeholders, the analysis tools available for engineers and technical people, and the responsiveness of support. Mimecast support is very effective, and I can easily reach out to them whenever I need assistance.

    Mimecast Insider Risk Management and Data Protection has positively impacted my organization by making it much easier to onboard a client and start using the technology. The simulation phase where insights are being built is not too long, and moving through that into a protective environment is straightforward. The multi-tenant capability is very helpful for us as a managed service provider because we can isolate clients.

    User behavior analysis specifically helps my team and stakeholders by analyzing what users do and what they are prone to do, taking into account the data that Mimecast has processed. This gives direction on how to help that user become risk aware and cybersecurity aware. Support responsiveness is very effective because I understand that security solutions can impact business operations. If an executive needs to send an email to secure a deal and a normal business activity is being blocked, the vendor's responsiveness allows me to efficiently communicate to executives that we are working on the issue and can always show progress.

    What needs improvement?

    Mimecast Insider Risk Management and Data Protection can be improved by incorporating artificial intelligence and machine learning into the environment for ease of operation and handling processes at machine speed.

    What do I think about the stability of the solution?

    Mimecast Insider Risk Management and Data Protection is stable in my experience. I have also tested the version on Microsoft, and while their licensing model is slightly different, it is very stable.

    What do I think about the scalability of the solution?

    Mimecast Insider Risk Management and Data Protection's scalability is one of the reasons we chose Mimecast because it is easy to scale up or down as the client base changes.

    How are customer service and support?

    Customer support for Mimecast Insider Risk Management and Data Protection is top-tier. I have never had any problems with the customer support, and they are very responsive.

    What other advice do I have?

    When onboarding a client, they want to see results sooner and want to see that they now have some level of security. Having a quick turnaround is always very beneficial because it shows presence to the client and to the end users. It also saves time because once all false positives have been cleared out, a solution can be relied upon. After tuning all those false positives, the solution becomes accurate, which is significant.

    My advice to others looking into using Mimecast Insider Risk Management and Data Protection is to take a demo, see how it works, and get a look at the features. I am confident they will find it favorable. I would rate this product and experience with a five-star rating.

    Disclosure: My company does not have a business relationship with this vendor other than being a customer.
    Last updated: May 28, 2026
    Flag as inappropriate
    PeerSpot user
    Livhuwani Ratshinanga - PeerSpot reviewer
    IT Administrator at a media company with 201-500 employees
    Real User
    Top 20
    May 25, 2026
    Email security has stopped malicious links and now protects users from risky spam every day
    Pros and Cons
    • "Mimecast Insider Risk Management and Data Protection has impacted my organization positively by protecting our environment from malicious links and spam."
    • "Additionally, there have been instances where a document or link has bypassed Mimecast, causing us to question why it was not blocked before reaching users."

    What is our primary use case?

    My main use case for Mimecast Insider Risk Management and Data Protection is email protection, blocking spam, and creating rules to avoid spam.

    A specific example of how I use Mimecast for email protection and blocking spam is that users often receive emails containing links that could compromise our system or environment. In most cases, we check the link through Mimecast to determine if it contains malware or poses a risk. If the link is risky, we block it and the email that sent it, then notify all users not to click on that link. After blocking the link, even if another person attempts to click on it, they will not be able to access it.

    Mimecast has additional benefits beyond manual blocking. Sometimes the system automatically detects and blocks malicious links or files without requiring manual intervention. When Mimecast identifies a malicious link or file, the user receives a notification that the email is blocked for our review to determine if it is safe. We have also created rules in our environment to specify what is allowed and what is not allowed.

    What is most valuable?

    The best feature that Mimecast Insider Risk Management and Data Protection offers is malware detection. I find it very useful because it detects and blocks threats before users can click on links or open documents.

    The malware detection feature makes my day-to-day work easier and safer because as soon as an email arrives with a link or document that Mimecast identifies as malicious, it blocks it. This protects our environment by preventing the threat from spreading. Even though we conduct cybersecurity training, users sometimes click on links regardless, so Mimecast's ability to detect and block threats immediately stops them from spreading across the environment.

    Mimecast Insider Risk Management and Data Protection has impacted my organization positively by protecting our environment from malicious links and spam. It detects and blocks links or removes attachments from emails, preventing them from spreading across our network.

    What needs improvement?

    To improve Mimecast Insider Risk Management and Data Protection, I believe the product should provide more options for creating custom rules in the portal. Since hackers are constantly developing new attack methods, Mimecast should continue evolving to keep pace with these threats and give us more options to create additional rules. There have been scenarios where we felt that if Mimecast could allow us to do certain actions, we could have blocked or avoided security issues, though I do not have a specific example at this moment.

    I give Mimecast Insider Risk Management and Data Protection a rating of eight because there are several areas where I feel the product could improve. There are scenarios where we find ourselves wishing we could perform certain actions within the platform. Additionally, there have been instances where a document or link has bypassed Mimecast, causing us to question why it was not blocked before reaching users.

    For how long have I used the solution?

    I have been using Mimecast Insider Risk Management and Data Protection for five years. Since I joined Seacom, they have been using this solution.

    What do I think about the stability of the solution?

    Mimecast Insider Risk Management and Data Protection is stable.

    What do I think about the scalability of the solution?

    I would rate the scalability of Mimecast Insider Risk Management and Data Protection between seven and ten.

    How are customer service and support?

    I think the customer support is good, and they respond on time.

    What other advice do I have?

    My advice for others looking into using Mimecast Insider Risk Management and Data Protection is that it is a nice product to use. I would give this product a rating of eight.

    Which deployment model are you using for this solution?

    Private Cloud

    If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

    Other
    Disclosure: My company has a business relationship with this vendor other than being a customer. Partner
    Last updated: May 25, 2026
    Flag as inappropriate
    PeerSpot user
    Megha Pradhan - PeerSpot reviewer
    Cyber Security Analyst at a computer software company with 201-500 employees
    Real User
    Top 20
    May 22, 2026
    Fine-tuned policies have protected sensitive data and now prevent external document leaks
    Pros and Cons
    • "Mimecast Insider Risk Management and Data Protection positively impacts my organization by helping us thoroughly check any kind of data that should not be mishandled, primarily for endpoint users who are sending organization documents outside."
    • "I would rate Mimecast Insider Risk Management and Data Protection an eight out of ten because we need improvements in policies, and although I am not aware of other organizations' experiences, we are facing some lags, and there are points we must work on."

    What is our primary use case?

    My main use case for Mimecast Insider Risk Management and Data Protection involves policy fine-tuning while analyzing patterns, incident response, and providing support and guidance to the user.

    A specific example of how I use Mimecast Insider Risk Management and Data Protection for policy engineering or incident response involves working with PAN card and mobile numbers. Since we are in India, we are provided with phone number patterns, regex, and Aadhaar details as an Indian identifying number. Accordingly, we provide certain patterns so that Mimecast Insider Risk Management and Data Protection checks documents that should trigger our system to ensure nothing is violated. For the document part, as an e-commerce company, it checks that no business data is shared externally.

    Regarding my main use case and how I handle sensitive information with Mimecast Insider Risk Management and Data Protection, we currently have some policies that we are not using, but we are working on different policies, such as those concerning various types of PII data. We are focused on fine-tuning to receive more critical alerts.

    What is most valuable?

    The best features Mimecast Insider Risk Management and Data Protection offers include providing a timestamp of each incident, which indicates when it triggers and its accuracy. However, some features we are not using yet, but we plan to proceed with them in the future.

    Mimecast Insider Risk Management and Data Protection positively impacts my organization by helping us thoroughly check any kind of data that should not be mishandled, primarily for endpoint users who are sending organization documents outside. It helps us avoid any kind of data breach.

    What needs improvement?

    For the improvement of Mimecast Insider Risk Management and Data Protection, it would be helpful if the timestamps in the console and the timestamps in the emails where we get all outgoing mails were the same, as this would provide more clarity. Additionally, some documents do not fetch carbon copies in the emails, so we need help with that.

    For how long have I used the solution?

    I have been working in my current field for three years, with two years dedicated to the DLP part and one year in endpoint EDR.

    What do I think about the stability of the solution?

    Mimecast Insider Risk Management and Data Protection is stable.

    What do I think about the scalability of the solution?

    The scalability of Mimecast Insider Risk Management and Data Protection is good.

    How are customer service and support?

    Customer support for Mimecast Insider Risk Management and Data Protection is adequate, and they are helpful.

    What other advice do I have?

    Mimecast Insider Risk Management and Data Protection prevents data breaches by triggering alerts for each email sent outside, allowing us to see patterns of users sending documents externally. We analyze these incidents and patterns to work on any issues, and this also helps in the fine-tuning process.

    I would rate Mimecast Insider Risk Management and Data Protection an eight out of ten because we need improvements in policies, and although I am not aware of other organizations' experiences, we are facing some lags, and there are points we must work on.

    I advise others looking into using Mimecast Insider Risk Management and Data Protection to definitely use it for email security because it is very helpful. I have given this product an overall rating of eight out of ten.

    Which deployment model are you using for this solution?

    Private Cloud

    If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

    Google
    Disclosure: My company does not have a business relationship with this vendor other than being a customer.
    Last updated: May 22, 2026
    Flag as inappropriate
    PeerSpot user
    Exchange Engineer at Kroll
    Real User
    Top 20
    Jun 23, 2026
    Advanced email filtering has reduced phishing incidents and protects users from malicious links
    Pros and Cons
    • "Mimecast Insider Risk Management and Data Protection stands out the most, with URL protection, link scanning, blocking of users, and creation of multiple profile groups, gateways, and policies as valuable features, and there have been many positive changes with Mimecast Insider Risk Management and Data Protection since implementation, and we feel it is working out positively."
    • "I would rate Mimecast Insider Risk Management and Data Protection an eight out of ten because sometimes it blocks or holds emails that are supposed to be unblocked."

    What is our primary use case?

    Mimecast Insider Risk Management and Data Protection is relied upon primarily for email security, functioning as an email gateway within the company so that every email is processed through Mimecast, filtered, and then delivered to user mailboxes after security checks are completed.

    Day-to-day operations involve handling tickets from users stating that their email has been held and they request release. We cross-check whether SPF is matching, if SPF has passed, and if DKIM has passed. Once everything is verified and we determine the sender is trusted, we release the email. We have different types of security gateways, including impersonation protection, which is created by establishing a profile group so that if it matches any keywords, it might flag potential impersonation. We have many policy options within the system. Based on our requirements, we can set up policies, and Mimecast helps us filter emails very effectively. We can clearly check whether emails are being delivered or not. If they are undelivered, we can check the reason for non-delivery. URLs are decoded through Mimecast, allowing us to scan links and determine whether they are safe or not. Many options exist within Mimecast for these purposes.

    What is most valuable?

    I have been using Mimecast Insider Risk Management and Data Protection for the past three years.

    Whenever we block an email ID, we can do so from Mimecast profile groups, and we can add email addresses from which we no longer want to receive emails. For example, if a phishing email arrives, it stops and holds that email based on SPF, DKIM, and DMARC rules so that it does not reach the user and remains held. Mimecast also protects emails that contain URLs or links within them, as users may accidentally click on those links, which might affect the entire company. In this way, Mimecast helps us significantly.

    Mimecast Insider Risk Management and Data Protection stands out the most. The URL protection, link scanning, blocking of users, and creation of multiple profile groups, gateways, and policies are valuable features. There have been many positive changes with Mimecast Insider Risk Management and Data Protection since implementation, and we feel it is working out positively. We also receive continuous support from the Mimecast team, with weekly calls to discuss technical issues within Mimecast.

    What needs improvement?

    Mimecast Insider Risk Management and Data Protection could be improved by providing more advanced features within the platform. If it collaborated with other different features, that would be more helpful.

    For how long have I used the solution?

    I have a total of ten years of experience in my current field.

    What other advice do I have?

    All functionality is performing well. There has been a reduction in phishing events. I would rate Mimecast Insider Risk Management and Data Protection an eight out of ten because sometimes it blocks or holds emails that are supposed to be unblocked. Occasionally, Mimecast does not work as effectively, which is the reason for this rating.

    Disclosure: My company does not have a business relationship with this vendor other than being a customer.
    Last updated: Jun 23, 2026
    Flag as inappropriate
    PeerSpot user
    Information Technology Technical Support at Cobweb Solutions Ltd
    MSP
    Top 20
    Jun 30, 2026
    Behavior correlation has improved insider risk detection and simplifies daily threat monitoring
    Pros and Cons
    • "Mimecast Insider Risk Management and Data Protection has positively impacted my organization by enabling investigation of risk behavior and user behavior, reducing potential data leakages, improving awareness of sensitive data handling across users, strengthening compliance with internal policies and regulatory requirements, and streamlining incident investigation through centralized case management."
    • "I have observed false positives because the solution is rule-based."

    What is our primary use case?

    Mimecast Insider Risk Management and Data Protection serves as a risk management solution that monitors user activity signals across M365 services including email, SharePoint, OneDrive, Teams, and endpoint activity.

    On a daily basis, I use Mimecast Insider Risk Management and Data Protection to monitor new risk threats, high severity cases, user flags, and level scores by checking the risk management dashboard. Currently, there are no primary use cases within my organization beyond this monitoring function.

    What is most valuable?

    Mimecast Insider Risk Management and Data Protection offers behavior correlation as one of its best features, which provides risk-based user profiling and rule-based triggers.

    This functionality helps my team because it compiles signals from emails, Teams, SharePoint, and OneDrive endpoints more quickly. The solution connects multiple actions over time and builds a comprehensive risk picture of each user.

    Mimecast Insider Risk Management and Data Protection has positively impacted my organization by enabling investigation of risk behavior and user behavior, reducing potential data leakages, improving awareness of sensitive data handling across users, strengthening compliance with internal policies and regulatory requirements, and streamlining incident investigation through centralized case management. Overall, it has enhanced my organization's ability to proactively identify insider threats while minimizing manual effort for the security and compliance team.

    What needs improvement?

    Improvements could be made through AI-based risk explanations to provide better guidance on necessary enhancements to the platform.

    What other advice do I have?

    I cannot provide specific metrics regarding the reduction of manual effort. Regarding Mimecast Insider Risk Management and Data Protection's AI capabilities, its governance capabilities are not as deep or unified as purpose-built insider risk platforms such as Microsoft Purview.

    I have observed false positives because the solution is rule-based. My review rating for this solution is 9.

    Which deployment model are you using for this solution?

    Public Cloud

    If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

    Microsoft Azure
    Disclosure: My company does not have a business relationship with this vendor other than being a customer.
    Last updated: Jun 30, 2026
    Flag as inappropriate
    PeerSpot user
    Infrastructure Security Engineer at a tech vendor with 201-500 employees
    Real User
    Top 20
    Jun 30, 2026
    Email defenses have stopped outsider threats and protect sensitive data with clear user guidance
    Pros and Cons
    • "My experience using Mimecast Insider Risk Management and Data Protection has been great."

      What is our primary use case?

      Mimecast Insider Risk Management and Data Protection is used to identify all risks that have been identified in my current client's environment. The solution is applicable at the gateway level and serves to stop outsider threats from invading our environment. Regarding data protection, we have implemented the DLP part so that insider employees do not share sensitive information with outsiders.

      We have various DLP rules implemented into Mimecast Insider Risk Management and Data Protection. One such rule involves setting the email content to trigger on specific words. When any sensitive word from our defined set is detected, the DLP rule triggers and notifies our team. We have also implemented Mimecast secure email messaging, where any documents sent to external parties must be shared via the Mimecast secure email gateway only so that documents do not get leaked. Through Mimecast, we are working to secure our environment.

      What is most valuable?

      The best features Mimecast Insider Risk Management and Data Protection offers are the banner, which is the CyberGraph feature, and the DLP rules.

      Regarding the CyberGraph feature, we recently implemented it. For a company with thousands of employees, it is quite difficult to make every user understand phishing emails, not to click on links, or open attachments, even with user awareness sessions. In that case, CyberGraph helped because it comes with a banner. When a user receives an email, a banner appears in different color codes before the email body. This makes the user aware and forces them to read what is written on the banner. This is what helps us rely on Mimecast Insider Risk Management and Data Protection, as we do not need to personally conduct user awareness. It has helped a lot. Regarding the DLP rules, they are quite efficient and very easy to understand from a Mimecast perspective. That is what I liked.

      Mimecast Insider Risk Management and Data Protection has had a great impact. It has helped us to manage outsider threats from invading our environment in a very effective way.

      What needs improvement?

      Mimecast Insider Risk Management and Data Protection is good, user-friendly, and has a nice UI. I do not think there should be any improvement at this time. Everything I have used has been user-friendly, so I do not think there is any improvement I need to suggest.

      For how long have I used the solution?

      I have been using Mimecast Insider Risk Management and Data Protection for almost one year.

      How are customer service and support?

      The customer support is amazing.

      Which solution did I use previously and why did I switch?

      We were using Mimecast Insider Risk Management and Data Protection from the beginning.

      What was our ROI?

      I have not seen a return on investment.

      Which other solutions did I evaluate?

      We did not evaluate other options. We were going with Mimecast only.

      What other advice do I have?

      My experience using Mimecast Insider Risk Management and Data Protection has been great. Before, I did not have any experience with Mimecast or any email security tools. When I first saw the interface and the UI of Mimecast, it was so user-friendly and simple to understand. A person with no background in email security can still learn and use Mimecast Insider Risk Management and Data Protection and practice on it within a few weeks. That is what makes Mimecast Insider Risk Management and Data Protection user-friendly.

      Mimecast Insider Risk Management and Data Protection is amazing. I have found it very trustworthy. I would simply tell others to go with Mimecast Insider Risk Management and Data Protection because it is user-friendly and amazing. I rate this product nine out of ten.

      Which deployment model are you using for this solution?

      Public Cloud

      If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

      Other
      Disclosure: My company does not have a business relationship with this vendor other than being a customer.
      Last updated: Jun 30, 2026
      Flag as inappropriate
      PeerSpot user
      Buyer's Guide
      Download our free Mimecast Insider Risk Management and Data Protection Report and get advice and tips from experienced pros sharing their opinions.
      Updated: July 2026
      Product Categories
      Data Loss Prevention (DLP)
      Buyer's Guide
      Download our free Mimecast Insider Risk Management and Data Protection Report and get advice and tips from experienced pros sharing their opinions.