Mimecast
Mimecast is an AI-powered Human Risk Management platform providing email security, insider risk management, collaboration security, and AI governance to over 42,000 organizations globally. The London-headquartered company, owned by Permira since 2022, serves enterprise and mid-market customers across more than 100 countries.
- Company typePrivate
- Founded2003
- HeadquartersLondon, United Kingdom
- Headcount1,001–5,000
- GTM typeB2B
- OfferingSoftware
What Mimecast does
Mimecast is a London-headquartered SaaS provider of an AI-powered Human Risk Management platform serving over 42,000 organizations and protecting approximately 27 million users across more than 100 countries. Founded in 2003 by Peter Bauer and Neil Murray, the company has evolved from its email-security origins into a unified platform spanning Advanced Email Security, Incydr Data Protection (insider risk management), Aware Governance & Compliance Suite (collaboration security), Engage Security Awareness training, and emerging Agentic AI Security offerings.
The platform is built on a multi-layered AI architecture that analyzes 24 trillion behavioral signals annually across email, collaboration tools, and AI agent workflows. Core technical components include NLP-based BEC detection, computer vision for pixel-level phishing identification, social graphing for communication anomalies, predictive human risk scoring, and the Mihra AI agent for automated security investigations. The system integrates with 350+ third-party security platforms — including CrowdStrike, Palo Alto Networks, Microsoft Defender, SentinelOne, Splunk, and Okta — and supports API-based deployment into Microsoft 365 without MX record changes. The company holds 40+ granted US patents and maintains certifications including FedRAMP Moderate, ISO 27001/27018/27701/22301/42001, SOC 2 Type II, HIPAA, PCI DSS, and GDPR.
Mimecast operates a sales-led, multi-channel go-to-market combining direct enterprise field sales, reseller partners, managed service providers, and technology alliance partners, with 2,200+ employees across 13 countries. Revenue is generated through per-employee SaaS subscriptions with annual or multi-year enterprise contracts, supplemented by professional services. Since May 2022, the company has been wholly owned by private equity firm Permira following a take-private transaction valued at approximately $5.8 billion. Under Permira, Mimecast has executed multiple acquisitions — including Code42 (July 2024), Aware (August 2024), and Elevate Security (January 2024) — to extend the platform into insider risk, collaboration security, and security behavior analytics.
Mimecast firmographics
Firmographics- Name
- Mimecast
- Legal name
- Mimecast Services Limited
- Website
- https://mimecast.com
- Company type
- Private
- Founded year
- 2003
- Operating status
- Operating
- Headcount range
- 1,001–5,000 employees
- Short description
- Mimecast is an AI-powered Human Risk Management platform providing email security, insider risk management, collaboration security, and AI governance to over 42,000 organizations globally. The London-headquartered company, owned by Permira since 2022, serves enterprise and mid-market customers across more than 100 countries.
- Ownership category
- akta.pro rank
Mimecast industry classification
Industry- Product category
- Email Security and Human Risk Management Software
- NAICS
- Software Publishers (513210), Software Publishers (5132), Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (5182)
- SIC
- Services-Computer Programming, Data Processing, Etc. (7370), Services-Computer Integrated Systems Design (7373)
- akta.pro primary industry
- Email & Collaboration Threat Detection/Response (ICR/CTDR) (HDADAKAI)
- akta.pro secondary industries
- Data Security & Privacy Managed Services (DLP/Encryption) (BPAEADAL), Endpoint Security Managed Services (EDR/XDR) (BPAEADAH), Privacy-Preserving Data (De-identification, Anonymization, PII Redaction) (HDAAALAG)
Keywords
Where Mimecast is headquartered
LocationHeadquarters
- HQ city
- London
- HQ country
- United Kingdom
- HQ region
- Europe
Offices13 records
Markets served
Mimecast business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Infrastructure, Operations
Revenue model
- SaaS Subscription (Per-Employee Pricing): Mimecast operates as a cloud-based SaaS platform with subscription pricing typically based on per-employee models. The company generates recurring revenue from its comprehensive security platform including email security, insider risk management, and compliance solutions.
- Enterprise Licensing: Enterprise organizations receive comprehensive platform access with tiered pricing based on organization size and required capabilities. Pricing is quote-based with annual or multi-year contract terms.
- Professional Services: Implementation consulting, training, and dedicated technical account management services provide additional revenue streams.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Enterprise tier with full platform capabilities |
Go-to-market motion3 records
Distribution channels5 records
Marketing channels9 records
Mimecast product offering
Product offeringCore offering
Mimecast provides a unified AI-powered Human Risk Management platform that combines Advanced Email Security, Incydr Data Protection, Aware Governance & Compliance Suite, Engage Security Awareness, Collaboration Threat Protection, DMARC Analyzer, Email Archive, and Agentic AI Security with the Mihra AI agent. The platform protects email, collaboration tools, and AI agent workflows for over 42,000 organizations and 27 million users worldwide. Core capabilities include multi-vector threat detection with 99.998% accuracy, insider risk management, behavioral human risk scoring, BEC and phishing protection, and direct Microsoft 365 integration via API without MX record changes.
Product overview
Mimecast offers a unified Human Risk Management platform architecture combining multiple integrated products and modules. The core portfolio includes Advanced Email Security for multi-layered threat protection, Incydr Data Protection for insider risk management, Aware Governance & Compliance Suite for collaboration security, and Engage Security Awareness for behavioral training. These products are unified through the Human Risk Management Platform, which correlates signals across email, endpoints, cloud, browser, and AI agent workflows. Supporting modules include Collaboration Threat Protection, DMARC Analyzer, Email Archive, and Agentic AI Security. The platform processes over 24 trillion behavioral signals annually and is designed to identify and reduce risky behaviors among the approximately 8% of employees responsible for 80% of security incidents.
Differentiator
Problem solved
Functional benefit
Brands
- Incydr: Insider risk management and data protection solution that monitors and stops data exfiltration across endpoints and cloud.
- Mimecast Engage
- Mimecast Aware
- Mimecast Mihra AI
- DMARC Analyzer
Products and services
- Advanced Email Security AI-powered email security solution protecting the inbox across every threat type with multi-layered detection for BEC, phishing, malware, and ransomware, including URL, attachment, and impersonation protection. Delivers 99.998% detection accuracy with Multi-Vector Threat Protection and 1.5 billion emails inspected daily.
- Incydr Data Protection Insider risk management and data protection solution that monitors and stops data exfiltration across endpoints, cloud, and browser without disrupting employee productivity. Provides automatic risk scoring for unsanctioned data movement across endpoint, cloud, and browser.
- Aware Governance & Compliance Suite AI-powered collaboration security platform providing real-time insights, governance, and compliance monitoring for collaboration tools like Slack, Teams, and Zoom.
- Engage Security Awareness Security awareness training solution powered by human risk signals that delivers personalized, micro-learning interventions to reduce risky employee behaviors across the workforce.
- Collaboration Threat Protection Extends real-time protection across Microsoft Teams, SharePoint, Slack, and other collaboration tools, allowing employees to collaborate securely while threats are detected and remediated.
- DMARC Analyzer Domain spoofing prevention solution that provides continuous visibility into email authentication results and protects brand and reputation against domain impersonation.
- Email Archive Cloud-based secure archiving solution that centralizes email, files, and collaboration data with tamper-proof retention, e-discovery, and compliance capabilities.
- Agentic AI Security Discovers, governs, and secures AI agents before they cause data breaches, providing visibility into AI agent usage and risks across the enterprise.
- Mihra AI Intelligent AI agent that automates security investigations and workflows for analysts, with capability to connect custom LLM agents through the Mihra MCP Gateway for autonomous threat response.
- Human Risk Management Platform Unified platform combining AI-driven detection, real-time behavioral nudges, and hard controls to address human risk across email, collaboration tools, and AI agent workflows. Processes over 24 trillion behavioral signals annually.
Quantifiable outcome
- 99.998% detection accuracy against coordinated attacks with Multi-Vector Threat Protection
- +5 more outcomes
Companies that use Mimecast
Customer profileNamed customers4 records
Segments8 records
Ideal customer profiles6 records
Mimecast technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration19 records
AI capability10 records
Feature10 records
Mimecast partnerships and signals
Strategic signalPartnerships
Ten partnerships are on record, tiered core and major.
- CrowdStrikecoreDeep integration partnership with 350+ native integrations. Mimecast shares threat intelligence and automates response with CrowdStrike's security platform, enabling comprehensive threat detection and response across customer security stacks.
- Palo Alto NetworkscoreIntegration partnership enabling threat intelligence sharing and automated response. Customers benefit from unified security visibility across Mimecast email security and Palo Alto Networks' broader security portfolio.
- OktacoreIntegration with Okta's identity management platform to enhance account takeover protection and ensure seamless identity verification across Mimecast's security solutions.
- NetskopecoreIntegration partnership providing customers with comprehensive cloud security posture management and threat detection across email and cloud collaboration tools.
- MicrosoftcoreDeep API-based integration with Microsoft 365 ecosystem including Defender for Office 365, Entra, Defender for Endpoint, Sentinel, Purview, and Defender for Cloud Apps for comprehensive threat detection and response.
- SentinelOnecoreStrategic technology partnership with SentinelOne recognized as Strategic Technology Partner of the Year. Integration enables unified endpoint and email security for comprehensive threat protection.
- SplunkmajorIntegration with Splunk's security information and event management (SIEM) platform enabling customers to consolidate security data and streamline security operations.
- AWScoreAmazon Web Services partnership with Mimecast recognized as AWS EMEA Rising Star Technology Partner of the Year. Cloud infrastructure partner for Mimecast's global platform deployment.
- Amazon Web Services (AWS Partner)coreAWS Partner Network member enabling Mimecast to deliver cloud-based security services and receive recognition for technology innovation in EMEA region.
- LogRhythmmajorIncydr integration with LogRhythm enables customers to ingest alerts, get actionable insights, and triage insider threats through a prioritized view of top exfiltration destinations.
Scale indicators10 records
Recent moves7 records
Expansion highlights7 records
Mimecast competitors and assessment
Company assessmentDirect peers
- Proofpoint: Proofpoint is the most direct competitor to Mimecast, offering enterprise email security, archiving, DLP, and security awareness — addressing the same buyer and overlapping heavily on BEC and phishing protection.
- KnowBe4: KnowBe4 is the leading security awareness and phishing simulation vendor, directly competing with Mimecast Engage and overlapping on human-risk-management positioning.
Broad incumbents
- Microsoft Defender for Office 365: Microsoft's native email security within M365 E3/E5 is the most significant competitive alternative to Mimecast, especially for customers seeking bundled, in-platform protection at marginal incremental cost.
- CrowdStrike: CrowdStrike is a broad endpoint and XDR security leader that competes with Mimecast on insider risk and adjacent detection use cases while integrating deeply with Mimecast via its 350+ integration ecosystem.
- Palo Alto Networks: Palo Alto Networks offers a broad security platform that overlaps with Mimecast in email, DLP, and cloud security, while also being a key technology integration partner.
Emerging players
- Abnormal Security: Abnormal Security is an AI-native email security platform focusing on BEC and account takeover protection, offering a modern ML-based alternative to legacy gateways like Mimecast's core email security product.
- Zscaler: Zscaler competes with Mimecast in DLP and data protection via its Zscaler Data Protection suite and is also a documented integration partner for insider risk management.
- Splunk (Cisco): Splunk is a leading SIEM and security analytics platform that integrates with Mimecast and competes in adjacent SOC analytics workflows where behavioral telemetry is consumed.
- Cofense: Cofense specializes in phishing defense and security awareness, directly overlapping with portions of Mimecast's Engage and email security product lines.
- Material Security: Material Security is an AI-native email security and data protection startup that competes with Mimecast on collaboration security and zero-trust email protection for M365.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat6 records
Key risks6 records
Key highlights7 records
Customer concentration
Mimecast social profiles
Digital presenceMimecast compliance and trust
Trust signalCompliance15 records
Mimecast financial estimates
Financial estimateRevenue estimate
Valuation estimate
Mimecast leadership team
Management profileNumber of profiles
Profiles10 records
Mimecast subsidiaries and ownership
Company hierarchySubsidiaries2 records
Mimecast funding detail
Funding detailFunding overview
Funding rounds5 records
Investors4 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Mimecast M&A and investment
M&A and investmentM&A10 records
Investments1 record
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Mimecast
What does Mimecast do?
Mimecast provides a unified AI-powered Human Risk Management platform that combines Advanced Email Security, Incydr Data Protection, Aware Governance & Compliance Suite, Engage Security Awareness, Collaboration Threat Protection, DMARC Analyzer, Email Archive, and Agentic AI Security with the Mihra AI agent. The platform protects email, collaboration tools, and AI agent workflows for over 42,000 organizations and 27 million users worldwide. Core capabilities include multi-vector threat detection with 99.998% accuracy, insider risk management, behavioral human risk scoring, BEC and phishing protection, and direct Microsoft 365 integration via API without MX record changes.
Is Mimecast a public or private company?
Mimecast is a private company. It is classified as private equity controlled and is currently operating.
When was Mimecast founded?
Mimecast was founded in 2003. It employs 1,001 to 5,000 people.
Where is Mimecast based?
Mimecast is headquartered in London, United Kingdom, in the Europe region.
How does Mimecast make money?
Three revenue lines are on record. SaaS Subscription (Per-Employee Pricing) is the primary driver. The others are enterprise Licensing and professional Services.
Who are Mimecast's main competitors?
Direct peers on record are Proofpoint and KnowBe4. Broad incumbents are Microsoft Defender for Office 365, CrowdStrike and Palo Alto Networks. Emerging players are Abnormal Security, Zscaler, Splunk (Cisco), Cofense and Material Security.
Does Mimecast have an API?
Yes. Mimecast offers a public API for integration with custom applications or workflows. The API enables organizations to integrate email security, threat intelligence, and data protection capabilities into their existing security stack. The API documentation is available at developer.services.mimecast.com. Mimecast also offers the Mihra MCP Gateway, which allows organizations to connect their own LLM agents with Mimecast's platform. Developer documentation is at developer.services.mimecast.com.
What industry is Mimecast in?
Mimecast's product category is Email Security and Human Risk Management Software. Its primary akta.pro industry code is HDADAKAI, Email & Collaboration Threat Detection/Response (ICR/CTDR), with a secondary code of BPAEADAL, Data Security & Privacy Managed Services (DLP/Encryption). Its NAICS code is 513210 and its SIC code is 7370.