Overview

Product video
Mimecast Advanced Email Security applies the power of AI, natural language processing, machine learning, and social graphing to make security smarter and empower employees. Our integrated platform blocks the most advanced threats to ensure you can:
. Defend against sophisticated business email compromise and impersonation attacks. . Employ real-time threat analysis to ensure safety before opening links. . Block quishing attacks with QR code detection and deep URL scanning. . Protect against the most sophisticated malware threats.
Customers get the full power of Mimecast's AI-powered detection and threat intelligence in a solution built for the reality of navigating today's hostile threat landscape with limited time and resources. Choose your deployment option, without or with a gateway.
Start your fast, secure, and free threat scan with no impact on mail flow with our advanced security powered by AI: https://www.mimecast.com/free-trial/?utm_source=aws
Mimecast Advanced Email Security is part of the connected Human Risk Management (HRM) platform providing an integrated solution designed to protect collaboration. The HRM platform provides preventative controls and direct actions to mitigate risk supporting:
. Security awareness training with Mimecast Engage: https://www.mimecast.com/products/mimecast-engage-awareness-training/?utm_source=aws . Protect Microsoft Teams, SharePoint & OneDrive with Protection for Microsoft Collaboration: https://www.mimecast.com/products/collaboration-security/?utm_source=aws . Gain control of your email domains and increase email deliverability with Mimecast DMARC Analyzer: https://www.mimecast.com/products/dmarc-analyzer/?utm_source=aws
For custom pricing and plans above 100 users, please reach out to: https://www.mimecast.com/get-a-quote/?utm_source=aws
Request a demo: https://www.mimecast.com/demo/?utm_source=aws
Start your fast, secure, and free threat scan with no impact on mail flow with our advanced security powered by AI: https://www.mimecast.com/free-trial/?utm_source=aws
Highlights
- Get best-in-class, AI-powered email security. Optimize email protection with a best-practice, out-of-the-box policy.
- Close gaps in M365 email security. Detect dormant threats in user mailboxes. Easily see what threats have been blocked and why.
- Dramatically simplify email security administration. Remove emails with the click of a button. Deploy in minutes. Try it free for 30-days.
Details
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Buyer guide

Financing for AWS Marketplace purchases
Pricing
Dimension | Description | Cost/12 months |
|---|---|---|
Bundle of 100 users / year | This bundle includes 100 Advanced Email Security users for one year. Recommended: To benefit from 3-year term contracts and For custom pricing and plans above 100 users, please reach out to: https://www.mimecast.com/get-a-quote/?utm_source=aws | $7,500.00 |
Vendor refund policy
We do not provide refunds.
Custom pricing options
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Vendor resources
Support
Vendor support
Please, visit our Support Center for Advanced Email Security:
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products

Customer reviews
Advanced email security has reduced phishing, blocked spam, and improved domain protection
What is our primary use case?
My main use case for Mimecast Advanced Email Security is to protect the email environment for Cimpress and filter out spam, phishing, or unwanted emails.
In a specific example of how Mimecast Advanced Email Security helped with spam or phishing in my organization, when someone tried to spam our organization with emails, we usually block the emails through Mimecast by creating a certain policy where if certain criteria do not match, we do not deliver the email to the user.
Regarding my main use case, we usually record the email based on email domain security, such as if SPF and DKIM and DMARC are not validated, then we do not deliver the email to the user in Cimpress from the vendor or sender.
What is most valuable?
The best feature Mimecast Advanced Email Security offers is email tracking. Email tracking is really useful in Mimecast Advanced Email Security.
What stands out to me about email tracking is that with it, we usually can deep dive into any kind of email. If it is delivered, then I can see how it is delivered. If it is not, then I can see why it is not delivered. If it was blocked by spam policy or that VIP user email policy, or if there was any configuration issue from the sender side, we can inform them. Those are the most useful cases we use. Additionally, the attachment protection policy is really good in Mimecast Advanced Email Security.
Mimecast Advanced Email Security has positively impacted our organization by securing our environment better than before compared to what we used to configure earlier to deliver the email.
After configuring Mimecast Advanced Email Security, without our standard config, I notice less spam emails and also earlier detection of phishing emails than we thought. For example, there was a signature phishing scam on the internet, but Mimecast Advanced Email Security caught it before it came to fruition and instantly blocked that signature-based phishing scam, which is useful for anyone using such links in an email signature.
I would also like to add that we have used DMARC Analyzer from Mimecast Advanced Email Security in the last two years to configure the DMARC for Cimpress owner domain. That was a really good tool from Mimecast Advanced Email Security as well, and we did use and configure the DMARC for Cimpress.
What needs improvement?
Regarding how Mimecast Advanced Email Security can be improved, I think Mimecast Advanced Email Security is continuously improving email security, but I would like them to include a feature as soon as possible that detects when someone spoofs the display name. If my name is ABC, then someone could use the ABC name and send the email to a user. If that email ID is not from Cimpress, it should create some warning indicating this is an external email, not from your company.
I have no additional comments about the needed improvements. Everything is pretty good. What we pay and what we get from Mimecast Advanced Email Security is really good, with no issues.
For how long have I used the solution?
I have been using Mimecast Advanced Email Security since the last nine years.
What do I think about the stability of the solution?
Mimecast Advanced Email Security is very stable.
What do I think about the scalability of the solution?
Regarding scalability, there are no issues with it in Mimecast Advanced Email Security. It handles email flow very smoothly, and we never face any issues with email delivery as our organization grows or email volume increases.
How are customer service and support?
The customer support is very good with no issues. We instantly get customer support from Mimecast Advanced Email Security whenever there is a requirement. Although we have not had a critical issue, customer support is good. I would rate the customer support a nine, as it is pretty good.
Which solution did I use previously and why did I switch?
We previously used Outlook Defender, basically Microsoft Defender, but it was a secondary tool, not the primary, so we ditched Microsoft Defender.
What was our ROI?
There is no specific return on investment. Mimecast Advanced Email Security is an email security product that you must have if you want to protect your organization.
What other advice do I have?
My advice to others looking into using Mimecast Advanced Email Security is that if you have a medium to big enterprise, you can definitely go with Mimecast Advanced Email Security. That is not an issue.
I rate Mimecast Advanced Email Security a nine out of ten. I give it a nine because it has all the required security measures in place. Any enterprise planning to buy Mimecast Advanced Email Security will definitely find it helpful to secure their email environment.
We have not used the AI capabilities with governance and data protection yet because our use of Mimecast Advanced Email Security has only involved the pre-built templates or policies. I have not used the AI-based capability yet in Mimecast Advanced Email Security, so I cannot comment on its accuracy and reliability of output. Mimecast Advanced Email Security is hosted on Mimecast itself, and we do not have any AI security enabled yet. Mimecast Advanced Email Security itself is hosted on Mimecast.
My experience with pricing, setup cost, and licensing is that it is pretty fair. It is not expensive compared to other tools because we are getting enough security capabilities through data governance or email protection, and the uptime Mimecast Advanced Email Security provides for email delivery is really good.
Advanced email filtering has blocked massive spam volumes and prevents unauthorized data leaks
What is our primary use case?
My main use case for Mimecast Advanced Email Security involves addressing the large influx of spam emails that users experienced before its implementation. Previously, we were dropping thousands of spam emails daily, and while we tried mitigating this with Microsoft Exchange Admin Center, those measures were not sufficient. I wanted to ensure that every email entering our environment was thoroughly checked by Mimecast before being verified by Exchange Admin Center, allowing us to block numerous spam emails and create effective policies to prevent unauthorized emails.
One specific example of how Mimecast Advanced Email Security helped us was when we discovered a group of 16 to 17 users sending out data to their personal email addresses, utilizing various domains. We faced challenges tracking these incidents with Exchange Admin Center, as we could not adequately monitor attachments. With Mimecast Advanced Email Security, we implemented attachment policies that blocked emails with attachments from being sent out without approval, which significantly helped us prevent unauthorized data leaks.
How has it helped my organization?
The positive impact of Mimecast Advanced Email Security on our organization is evident in how it has drastically reduced spam emails and improved our data security. Thousands of spam emails, which previously flooded our environment, are now blocked, allowing us to enhance our overall data protection by restricting users from sending sensitive data to personal or third-party email domains.
While I don't have a specific percentage to share, I can confirm that we managed to cut down on spam emails by thousands. Additionally, instances of unauthorized information being sent externally were significantly reduced, and we noticed improvements in our overall data protection scores assessed by a third-party vendor.
What is most valuable?
In addition to my main use case, Mimecast Advanced Email Security offers enhanced email security management, URL protection, attachment protection, and the ability to enforce DMARC policies effectively. My experience with Mimecast Advanced Email Security has been great, and I find this tool extremely useful for both email security and URL protection.
The best features of Mimecast Advanced Email Security include the flexibility to create customizable rules for email and URL protection, along with the attachment protection feature that blocks emails solely based on having an attachment. Features such as holding emails based on DMARC or SPF scores stand out to me, as they significantly improve our email security.
What needs improvement?
Improvements for Mimecast Advanced Email Security include enhancing the user interface and accessibility, particularly regarding admin capabilities to add or modify user accounts. Streamlining this could improve overall usability and security management for users.
Reporting is another area needing improvement in Mimecast Advanced Email Security, as the reports provided are not very easy to decipher. With artificial intelligence being integrated into various tools including Mimecast Advanced Email Security, I believe there is potential to enhance functionality, enabling users to ask specific questions and retrieve concise answers instead of overwhelming data.
I choose a nine for Mimecast Advanced Email Security because improvements such as better user interface and artificial intelligence integration features would greatly enhance its usability. While no tool is perfect, these adjustments could greatly elevate Mimecast Advanced Email Security's capabilities.
For how long have I used the solution?
I have been in my current role for over four years, but I consider my leadership experience to have started on my very first day.
What do I think about the stability of the solution?
In my experience, Mimecast Advanced Email Security is stable, with the only issues being occasional sign-in problems for users. However, the support team resolves these efficiently, affirming the platform's stability.
What do I think about the scalability of the solution?
Mimecast Advanced Email Security is scalable for my organization's needs. While our user base remains around 2,200, I believe it can adapt to much larger requirements as needed, based on discussions with others managing larger organizations.
How are customer service and support?
The customer support for Mimecast Advanced Email Security is excellent. Our requests are addressed promptly, and we receive thorough responses, contributing to my satisfaction with the service. I rate the customer support a 10 out of 10.
Which solution did I use previously and why did I switch?
Before adopting Mimecast Advanced Email Security, we utilized Microsoft Exchange Admin Center for our email security needs, and the decision to upgrade was driven by a significant number of spam emails and security concerns related to data leaks.
What's my experience with pricing, setup cost, and licensing?
Overall, my experience with pricing, setup costs, and licensing was smooth. The vendor management and team cooperation we received, post-negotiation and integration, was a 10 out of 10.
Which other solutions did I evaluate?
We did not evaluate many options prior to choosing Mimecast Advanced Email Security. Given our budget as a financial corporation and the recognition of Mimecast Advanced Email Security as an industry leader, we opted for it without exploring other solutions extensively.
What other advice do I have?
One specific example of how Mimecast Advanced Email Security helped us was when we discovered a group of 16 to 17 users sending out data to their personal email addresses, utilizing various domains. We faced challenges tracking these incidents with Microsoft Exchange Admin Center, as we could not adequately monitor attachments. With Mimecast Advanced Email Security, we implemented attachment policies that blocked emails with attachments from being sent out without approval, which significantly helped us prevent unauthorized data leaks.
I trust the accuracy and reliability of the outputs from Mimecast Advanced Email Security completely, without question.
Mimecast Advanced Email Security is currently deployed in a fully cloud-based environment for my organization after transitioning from a hybrid cloud setup with both on-premises servers and Microsoft cloud services.
While our user base is approximately 2,200 users with just six supporting staff, I would not claim there were monetary benefits in terms of staff reductions due to Mimecast Advanced Email Security's integration, but it has notably enhanced our email security and data protection.
For those considering Mimecast Advanced Email Security, I would advise evaluating their requirements carefully. Since they are likely seeking solutions for specific issues with previous systems, it is straightforward to endorse Mimecast Advanced Email Security for its effectiveness in enhancing email security and data protection.
My confidence in the security brought by Mimecast Advanced Email Security's artificial intelligence features is high. Even though artificial intelligence is relatively new, I trust that the mechanisms in place will ensure data protection, given that Mimecast Advanced Email Security's core mission is safeguarding sensitive information in the email environment.
Mimecast Advanced Email Security is scalable for my organization's needs. While our user base remains around 2,200, I believe it can adapt to much larger requirements as needed, based on discussions with others managing larger organizations. I rate this solution a nine overall.
Email protection has improved and message retraction keeps misdirected mail under control
What is our primary use case?
My main use case for Mimecast Advanced Email Security is to check the logs of inbound emails, and if something is blocked, then accordingly, I will review and provide the solution so that it will not get blocked next time.
For example, there was one external sender who was sending us an email, and that got blocked because of the DMARC policy, so I just checked the logs there to solve that issue.
Regarding my main use case, sometimes I just read the SMTP logs to check and verify if the emails are sent out successfully or if they are delivered, such as relayed to Microsoft 365 or the other mail servers successfully.
What is most valuable?
One of the best features Mimecast Advanced Email Security offers is message retraction, which I really appreciate.
What I appreciate about that method is that I know that message SMTP logs help verify if the emails are successfully relayed or not from our server to different servers, and also the message I'm talking about is specifically for retracting any emails that were wrongly delivered to the recipient mailboxes.
Mimecast Advanced Email Security positively impacts my organization by helping us to deliver any spam or malware emails, which I know can cause our users to be in danger if any emails slip from the filters.
What needs improvement?
Mimecast Advanced Email Security is all good, but if we can include AI, it will be really good.
Regarding Mimecast Advanced Email Security's AI capabilities, my thoughts on its governance and security are that security is always the first priority of Mimecast, so we basically do not share our data with the AI; we are just improving some filters.
As for the accuracy and reliability of output, I find the accuracy of Mimecast Advanced Email Security to be good.
For how long have I used the solution?
I have been using Mimecast Advanced Email Security for five years.
What other advice do I have?
I notice some emails are delivered because of that, and we are changing some DMARC policies, so accordingly, I will review on the platform and block as required.
My advice for others looking into using Mimecast Advanced Email Security is that they can strengthen their security very well if they choose to go with it. I would rate this product a 9 out of 10.
Email defenses have reduced phishing risk and support strong compliance and user awareness
What is our primary use case?
The primary use cases for Mimecast Advanced Email Security is email security, which focuses on email inspection, phishing, and impersonation detection.
What is most valuable?
Feature-wise, what we normally see as a provider is how well they are aligned with their confidentiality management like DMARC, SPF, and DKIM management. Mimecast Advanced Email Security has been doing an excellent job in that area, as well as the compliance part, including how they do email archival, legal holding, and eDiscovery . Apart from that, they also have features like awareness training and user risk scoring, which definitely helps as a provider to show the complete picture to end customers.
Regarding pricing, Mimecast Advanced Email Security will be at par with Proofpoint. They are not saying they are very cheap; they are a decently premium product in the market. The ROI discussion sometimes wins the conversations. Pricing-wise, they are slightly premium, and that is how everyone has positioned themselves in the market.
What needs improvement?
The improvement needed is not necessarily in the product itself, but rather around how other organizations have evolved. The DLP discussion is no longer limited to email; it has gone to border level with companies like Zscaler, Netskope , and Palo Alto giving the complete full-stack SASE setup. When somebody has a SASE setup, then Mimecast Advanced Email Security DLP might not even be needed at a point in time. Mimecast Advanced Email Security needs to improve in this area because they are only focusing on a particular set of problems which is on email and human risk, whereas companies that need a slightly bigger picture will look elsewhere.
The second thing is when you buy an XDR provider, they give you a complete holistic story around it, showing what has happened, which email somebody has clicked on, whether there have been any changes, and whether there is any network activity. You get a holistic picture. When pushing Mimecast Advanced Email Security to end customers, people are more often saying that they would rather buy XDR from another provider because the story when an analyst sees is complete in terms of what they see, whereas they only get an email story from Mimecast Advanced Email Security. Mimecast Advanced Email Security has to improve there. Companies like Abnormal AI cover more on UEBA and user behavior, and there are many things for Mimecast Advanced Email Security to improve in this area as well.
It is less of a technology issue; they are doing very well on email. The conversation for them to have is on how to get into a broader level or how to get a tie-up to become a broader supplier. At least from a service provider landscape, I can say that.
For how long have I used the solution?
I have been working with Mimecast Advanced Email Security for probably three to five years.
What do I think about the stability of the solution?
Mimecast Advanced Email Security is a good product and is very stable.
What do I think about the scalability of the solution?
Mimecast Advanced Email Security is definitely scalable, and we are deploying it in very large environments.
How are customer service and support?
The customer service is good. Normally as a service provider, we do have our in-house support and we manage most of the things in-house, but if we need help, they are great. They are not like Microsoft, but they are great at it. They respond properly and try to help wherever they can.
How was the initial setup?
The setup is straightforward.
What about the implementation team?
We do in-house deployment.
What was our ROI?
The ROI is more around whether they are able to reduce the risk dramatically. The ROI which companies see should be able to justify buying Mimecast Advanced Email Security. It is acceptable. I cannot say that it is cheaper, but definitely it is on a decent side. People can buy it. It is not very costly. The ROI is decent and they can definitely invest in it.
What other advice do I have?
DLP is part of most of the compliance journey for most organizations because it helps identify the PII data which normally gets sent. Sometimes you have to send it, and you have no other choice than the option of masking the data. It is this kind of a filter where you have an option to identify whether there are any passport details, customer PII data, or any source code. You have an option to hold it or encrypt it if you need to. If you still have to send it, you can encrypt and send it. You can notify your security team to check it and all that. These are features which most DLP has, and even Proofpoint has similar features.
They are being pretty happy with Mimecast Advanced Email Security. The policies are decently researched and marked. They are happy and at the same time, with some of the features, they have the option to customize. That is where service providers like us come into the picture. We help them customize few of the policies, but apart from that, they have been very strong in terms of the policies and their processes.
It will be straightforward. Since you have email security, you get a decent number of emails without phishing and BEC risk. They reduce dramatically. Email availability and business communication continue uninterrupted, so you have email continuity in your picture. Compliance, as I mentioned, the litigation hold and eDiscovery helps them maintain compliance. I have seen that being utilized by a few of our legal clients. For them, it is very useful. Data leakage is reduced; if you have an option to block something, encrypt it, mask it, or block it, you have less risk of data leakage. User security awareness is also important. They do have phishing simulation and security awareness trainings that help reduce human errors and maintain user risk scores.
The primary thing which comes when I suggest is that people mostly go for email security features. I would still recommend people to start with their DMARC analyzer. Start from there, start your authentication, get the authentication methodology right, get the process right, and then followed by taking a product like Mimecast Advanced Email Security. I have been in this field for ten years, and in Microland, I have been for three years. Overall, I would give this product a rating of eight point five.