Mimecast
Human risk management and advanced email security for people, data and AI
By Mimecast Limited · HQ London, United Kingdom · 4.2/5 Value-Position score (estimate)
Positioning guardrails
Best for
- Email-heavy organisations that need advanced phishing, malware and business email compromise defence
- Security teams that must discover and govern employee use of AI tools
- Regulated firms needing data loss prevention, insider risk and communications governance
- Mid-market to large enterprises standardising email security across Microsoft-style collaboration suites
Ideal size: 200–10,000+ employees people · Security-mature organisation with a dedicated IT or security team and compliance drivers
Not for
- Small teams looking for a free or self-serve email filtering tool
- Buyers who need transparent public list pricing before speaking to sales
- Organisations wanting a single narrow product rather than a multi-module platform
Value metrics scorecard
Time-to-Value
Roughly 3–6 weeks
~30 days to first production value
Total Cost of Ownership
$35,000/yr
Starts at $3,000 · Per-user subscription billed annually; quote-based, no public list price
Implementation Friction
2/5
Engineering + admin effort required
Value-Position score
out of 5 · model estimate
Full cost breakdown
Mandatory implementation fee
None
Seat tiers
Not published; seat minimums confirmed at quote
Add-on costs
- None
Company & support
Who is behind Mimecast, and how your team gets help once it is live.
Company
- Founded
- 2003 · 23 yrs in business
- Headquarters
- London, United Kingdom
How you get support
We haven’t recorded support channels for Mimecast yet. Nothing here means unverified — not absent.
Market position
Where Mimecast sits against its closest alternatives. Pick any two of cost, speed, friction and buyer score, and up to 9 companies to compare.
Quadrant view
Typical annual cost × Time-to-value
The lines cross at the median of the solutions shown, so about half sit on each side of each line. A dashed ring marks an outlier pinned to the edge; hover for its value.
Companies on the chart 6 / 10
- Mimecast
- Material Security
- Gatekeeper
- UpGuard
- Blumira
- Bitwarden
Add or change companies
Up to 10 companies including Mimecast. Listed closest first.
Stack fit signal
Compatibility with standard B2B ecosystems.
No supported MCP path today, so it cannot be driven from an AI client.
AI & MCP readiness
What Mimecast ships in AI, and what it asks of your ecosystem.
AI features shipped
Mimecast's published AI content is about governing AI usage: AI Governance and Governance & Compliance Insights let customers collect, search and govern AI systems, including coverage for Claude Enterprise. No source states how Mimecast hosts its own models or whether customer data is used for training.
Your data & models
- Trains on your data
- Not recorded — ask the vendor
- Runs on
- Not recorded
- AI pricing
- Not recorded
In your ecosystem
- AI connection
- Not supported
- Model key
- Not recorded
- AI usage audit
- Not recorded
Compliance attestations
* IAPP AIGP certifies individuals, not products. It means named staff hold the credential — not that the platform does.
Bottom line
Mimecast is a British information security vendor founded in 2003 and headquartered in London. It sells email and collaboration threat protection, data loss prevention, insider risk, awareness training, digital communications governance and AI governance on one platform, priced per user via quote. The company cites more than 42,000 customers, 300+ integrations, and leader placements in Gartner's Email Security and DCGAS Magic Quadrants.
Frequently asked questions
What problems does Mimecast solve?
Mimecast positions itself as a unified risk platform spanning human, data and AI risk: advanced email and collaboration threat protection, data loss prevention, insider risk, security awareness, communications governance and AI governance. The vendor says it protects more than 42,000 organisations and cites leader placements in Gartner's Email Security and DCGAS Magic Quadrants.
How is Mimecast priced?
Mimecast does not publish list pricing on its website; buyers are routed to Get a Quote, so deals are negotiated per user and generally billed annually. Expect module-based packaging across email security, DLP, awareness training and AI governance. Confirm seat minimums, retention terms and any implementation or onboarding fees during the quote process.
How long does implementation take?
No standard timeline is published. Email gateway deployments usually require a mail-routing change plus policy tuning, so plan in weeks rather than days. A published SMB customer story describes a seven-step implementation that ran smoothly with no user-visible disruption, suggesting the switch is low-touch once routing and policies are agreed.
Can Mimecast govern employee use of AI tools?
Yes. Mimecast markets AI Governance and Governance & Compliance Insights to collect, search and govern AI systems, and claims visibility into shadow AI use by employees, including governance coverage for Claude Enterprise. Buyers should confirm which AI providers and data sources are covered and how findings are logged for audit.
Does Mimecast suit a small business?
The website references a small and medium business segment for email and collaboration threat protection alongside enterprise deployments, so smaller organisations are in scope. However, pricing and packaging are quote-based and the platform is broadest when several modules are bought together, so very small teams may find it heavier than a simple email filter.