Mimecast

What Mimecast does

Mimecast is a London-headquartered SaaS provider of an AI-powered Human Risk Management platform serving over 42,000 organizations and protecting approximately 27 million users across more than 100 countries. Founded in 2003 by Peter Bauer and Neil Murray, the company has evolved from its email-security origins into a unified platform spanning Advanced Email Security, Incydr Data Protection (insider risk management), Aware Governance & Compliance Suite (collaboration security), Engage Security Awareness training, and emerging Agentic AI Security offerings.

The platform is built on a multi-layered AI architecture that analyzes 24 trillion behavioral signals annually across email, collaboration tools, and AI agent workflows. Core technical components include NLP-based BEC detection, computer vision for pixel-level phishing identification, social graphing for communication anomalies, predictive human risk scoring, and the Mihra AI agent for automated security investigations. The system integrates with 350+ third-party security platforms — including CrowdStrike, Palo Alto Networks, Microsoft Defender, SentinelOne, Splunk, and Okta — and supports API-based deployment into Microsoft 365 without MX record changes. The company holds 40+ granted US patents and maintains certifications including FedRAMP Moderate, ISO 27001/27018/27701/22301/42001, SOC 2 Type II, HIPAA, PCI DSS, and GDPR.

Mimecast operates a sales-led, multi-channel go-to-market combining direct enterprise field sales, reseller partners, managed service providers, and technology alliance partners, with 2,200+ employees across 13 countries. Revenue is generated through per-employee SaaS subscriptions with annual or multi-year enterprise contracts, supplemented by professional services. Since May 2022, the company has been wholly owned by private equity firm Permira following a take-private transaction valued at approximately $5.8 billion. Under Permira, Mimecast has executed multiple acquisitions — including Code42 (July 2024), Aware (August 2024), and Elevate Security (January 2024) — to extend the platform into insider risk, collaboration security, and security behavior analytics.

Name

Mimecast

Legal name

Mimecast Services Limited

Website

https://mimecast.com

Company type

Private

Founded year

2003

Operating status

Operating

Headcount range

1,001–5,000 employees

Short description

Mimecast is an AI-powered Human Risk Management platform providing email security, insider risk management, collaboration security, and AI governance to over 42,000 organizations globally. The London-headquartered company, owned by Permira since 2022, serves enterprise and mid-market customers across more than 100 countries.

Ownership category

akta.pro rank

Product category

Email Security and Human Risk Management Software

NAICS

Software Publishers (513210), Software Publishers (5132), Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (5182)

SIC

Services-Computer Programming, Data Processing, Etc. (7370), Services-Computer Integrated Systems Design (7373)

akta.pro primary industry

Email & Collaboration Threat Detection/Response (ICR/CTDR) (HDADAKAI)

akta.pro secondary industries

Data Security & Privacy Managed Services (DLP/Encryption) (BPAEADAL), Endpoint Security Managed Services (EDR/XDR) (BPAEADAH), Privacy-Preserving Data (De-identification, Anonymization, PII Redaction) (HDAAALAG)

Keywords

• Email security platform
• Insider risk management
• Data loss prevention
• Collaboration security
• Human risk management

Headquarters

HQ city

London

HQ country

United Kingdom

HQ region

Europe

Offices13 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Infrastructure, Operations

Revenue model

1. SaaS Subscription (Per-Employee Pricing): Mimecast operates as a cloud-based SaaS platform with subscription pricing typically based on per-employee models. The company generates recurring revenue from its comprehensive security platform including email security, insider risk management, and compliance solutions.
2. Enterprise Licensing: Enterprise organizations receive comprehensive platform access with tiered pricing based on organization size and required capabilities. Pricing is quote-based with annual or multi-year contract terms.
3. Professional Services: Implementation consulting, training, and dedicated technical account management services provide additional revenue streams.

Pricing tiers

Go-to-market motion3 records

Distribution channels5 records

Marketing channels9 records

Core offering

Mimecast provides a unified AI-powered Human Risk Management platform that combines Advanced Email Security, Incydr Data Protection, Aware Governance & Compliance Suite, Engage Security Awareness, Collaboration Threat Protection, DMARC Analyzer, Email Archive, and Agentic AI Security with the Mihra AI agent. The platform protects email, collaboration tools, and AI agent workflows for over 42,000 organizations and 27 million users worldwide. Core capabilities include multi-vector threat detection with 99.998% accuracy, insider risk management, behavioral human risk scoring, BEC and phishing protection, and direct Microsoft 365 integration via API without MX record changes.

Product overview

Mimecast offers a unified Human Risk Management platform architecture combining multiple integrated products and modules. The core portfolio includes Advanced Email Security for multi-layered threat protection, Incydr Data Protection for insider risk management, Aware Governance & Compliance Suite for collaboration security, and Engage Security Awareness for behavioral training. These products are unified through the Human Risk Management Platform, which correlates signals across email, endpoints, cloud, browser, and AI agent workflows. Supporting modules include Collaboration Threat Protection, DMARC Analyzer, Email Archive, and Agentic AI Security. The platform processes over 24 trillion behavioral signals annually and is designed to identify and reduce risky behaviors among the approximately 8% of employees responsible for 80% of security incidents.

Differentiator

Problem solved

Functional benefit

Brands

• Incydr: Insider risk management and data protection solution that monitors and stops data exfiltration across endpoints and cloud.
• Mimecast Engage
• Mimecast Aware
• Mimecast Mihra AI
• DMARC Analyzer

Products and services

• Advanced Email Security AI-powered email security solution protecting the inbox across every threat type with multi-layered detection for BEC, phishing, malware, and ransomware, including URL, attachment, and impersonation protection. Delivers 99.998% detection accuracy with Multi-Vector Threat Protection and 1.5 billion emails inspected daily.
• Incydr Data Protection Insider risk management and data protection solution that monitors and stops data exfiltration across endpoints, cloud, and browser without disrupting employee productivity. Provides automatic risk scoring for unsanctioned data movement across endpoint, cloud, and browser.
• Aware Governance & Compliance Suite AI-powered collaboration security platform providing real-time insights, governance, and compliance monitoring for collaboration tools like Slack, Teams, and Zoom.
• Engage Security Awareness Security awareness training solution powered by human risk signals that delivers personalized, micro-learning interventions to reduce risky employee behaviors across the workforce.
• Collaboration Threat Protection Extends real-time protection across Microsoft Teams, SharePoint, Slack, and other collaboration tools, allowing employees to collaborate securely while threats are detected and remediated.
• DMARC Analyzer Domain spoofing prevention solution that provides continuous visibility into email authentication results and protects brand and reputation against domain impersonation.
• Email Archive Cloud-based secure archiving solution that centralizes email, files, and collaboration data with tamper-proof retention, e-discovery, and compliance capabilities.
• Agentic AI Security Discovers, governs, and secures AI agents before they cause data breaches, providing visibility into AI agent usage and risks across the enterprise.
• Mihra AI Intelligent AI agent that automates security investigations and workflows for analysts, with capability to connect custom LLM agents through the Mihra MCP Gateway for autonomous threat response.
• Human Risk Management Platform Unified platform combining AI-driven detection, real-time behavioral nudges, and hard controls to address human risk across email, collaboration tools, and AI agent workflows. Processes over 24 trillion behavioral signals annually.

Quantifiable outcome

• 99.998% detection accuracy against coordinated attacks with Multi-Vector Threat Protection
• +5 more outcomes

Named customers4 records

Segments8 records

Ideal customer profiles6 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration19 records

AI capability10 records

Feature10 records

Partnerships

Ten partnerships are on record, tiered core and major.

• CrowdStrikecoreTechnology or IntegrationDeep integration partnership with 350+ native integrations. Mimecast shares threat intelligence and automates response with CrowdStrike's security platform, enabling comprehensive threat detection and response across customer security stacks.
• Palo Alto NetworkscoreTechnology or IntegrationIntegration partnership enabling threat intelligence sharing and automated response. Customers benefit from unified security visibility across Mimecast email security and Palo Alto Networks' broader security portfolio.
• OktacoreTechnology or IntegrationIntegration with Okta's identity management platform to enhance account takeover protection and ensure seamless identity verification across Mimecast's security solutions.
• NetskopecoreTechnology or IntegrationIntegration partnership providing customers with comprehensive cloud security posture management and threat detection across email and cloud collaboration tools.
• MicrosoftcoreTechnology or IntegrationDeep API-based integration with Microsoft 365 ecosystem including Defender for Office 365, Entra, Defender for Endpoint, Sentinel, Purview, and Defender for Cloud Apps for comprehensive threat detection and response.
• SentinelOnecoreTechnology or IntegrationStrategic technology partnership with SentinelOne recognized as Strategic Technology Partner of the Year. Integration enables unified endpoint and email security for comprehensive threat protection.
• SplunkmajorTechnology or IntegrationIntegration with Splunk's security information and event management (SIEM) platform enabling customers to consolidate security data and streamline security operations.
• AWScoreTechnology or IntegrationAmazon Web Services partnership with Mimecast recognized as AWS EMEA Rising Star Technology Partner of the Year. Cloud infrastructure partner for Mimecast's global platform deployment.
• Amazon Web Services (AWS Partner)coreTechnology or IntegrationAWS Partner Network member enabling Mimecast to deliver cloud-based security services and receive recognition for technology innovation in EMEA region.
• LogRhythmmajorTechnology or IntegrationIncydr integration with LogRhythm enables customers to ingest alerts, get actionable insights, and triage insider threats through a prioritized view of top exfiltration destinations.

Scale indicators10 records

Recent moves7 records

Expansion highlights7 records

Direct peers

• Proofpoint: Proofpoint is the most direct competitor to Mimecast, offering enterprise email security, archiving, DLP, and security awareness — addressing the same buyer and overlapping heavily on BEC and phishing protection.
• KnowBe4: KnowBe4 is the leading security awareness and phishing simulation vendor, directly competing with Mimecast Engage and overlapping on human-risk-management positioning.

Broad incumbents

• Microsoft Defender for Office 365: Microsoft's native email security within M365 E3/E5 is the most significant competitive alternative to Mimecast, especially for customers seeking bundled, in-platform protection at marginal incremental cost.
• CrowdStrike: CrowdStrike is a broad endpoint and XDR security leader that competes with Mimecast on insider risk and adjacent detection use cases while integrating deeply with Mimecast via its 350+ integration ecosystem.
• Palo Alto Networks: Palo Alto Networks offers a broad security platform that overlaps with Mimecast in email, DLP, and cloud security, while also being a key technology integration partner.

Emerging players

• Abnormal Security: Abnormal Security is an AI-native email security platform focusing on BEC and account takeover protection, offering a modern ML-based alternative to legacy gateways like Mimecast's core email security product.
• Zscaler: Zscaler competes with Mimecast in DLP and data protection via its Zscaler Data Protection suite and is also a documented integration partner for insider risk management.
• Splunk (Cisco): Splunk is a leading SIEM and security analytics platform that integrates with Mimecast and competes in adjacent SOC analytics workflows where behavioral telemetry is consumed.
• Cofense: Cofense specializes in phishing defense and security awareness, directly overlapping with portions of Mimecast's Engage and email security product lines.
• Material Security: Material Security is an AI-native email security and data protection startup that competes with Mimecast on collaboration security and zero-trust email protection for M365.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat6 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/mimecast
• Facebookfacebook.com/Mimecast
• LinkedInlinkedin.com/company/mimecast

Compliance15 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles10 records

Subsidiaries2 records

Funding overview

Funding rounds5 records

Investors4 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A10 records

Investments1 record

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Mimecast