MetaDefender™ Email Gateway Security is OPSWAT’s on-premises email gateway security solution for protecting organizations from phishing, ransomware, and zero-day email threats. It is built for enterprise, regulated, and critical infrastructure environments where teams need advanced email protection, password-protected attachment inspection, and policy enforcement across IT and OT workflows.
MetaDefender Email Gateway Security applies Metascan™ Multiscanning, Deep CDR™ technology, AI-powered malware analysis through Predictive Alin AI, Adaptive Sandbox, phishing and spam detection, and Proactive DLP™ to protect organizations from known, unknown, and AI-generated threats. It is deployed at the SMTP/MX level and provides security across inbound and outbound email workflows.
- Multi-layered email security: combines phishing and spam detection, multiscanning, Deep CDR technology, and emulation-based sandbox inspection.
- AI-powered malware analysis: combines pre-execution prediction and adaptive sandbox inspection for deeper analysis of evasive threats before delivery.
- Attachment inspection and sanitization: inspects encrypted and password-protected attachments and sanitizes supported file types before delivery.
- Data loss prevention: applies DLP policies to identify and control sensitive information across email workflows.
- On-premises deployment: supports on-premises, disconnected, and air-gapped environments without requiring cloud-based inspection.
Results:
- 99.98% detection rate for spam and phishing attacks with on-arrival and time-of-click analysis from 30+ online sources.
- Metascan Multiscanning: over 99.2% malware detection from 30+ anti-malware engines.
- Deep CDR: deconstructs, sanitizes and regenerates over 200 file types.
- MetaDefender Aether™: emulation-based sandbox with 99.5% Zero-Day detection rate and 40x faster than traditional tools.
- Predictive Alin AI: an AI-Powered malware analysis which delivers verdict in less than 100 ms and has a 0.1% false positive rate.
- Proactive DLP: redacts and anonymizes sensitive data across 125+ file types.
Mimecast Email Security protects organizations against phishing, malware, business email compromise, and impersonation attacks, with detection built on 20 years of experience and over 1.3 billion emails inspected daily. It's available as a secure email gateway (MX-based) for full control over complex, multi-region environments, or via API integration with Microsoft 365, which deploys in hours with no MX changes. Administrators get a single console for policy management, monitoring external communications, and customizing configurations, and can pair it with Mimecast Cloud Archive for long-term email retention and compliance.
What key features should users explore?
- Sandboxing: Full emulation sandboxing and AI-driven static analysis detect threats in attachments before delivery.
- Spam and Phishing Protection: Multi-layered detection catches both payload-based attacks and payloadless, socially-engineered BEC attempts.
- URL Inspection: Computer Vision AI analyzes destination pages to catch phishing and brand impersonation.
- API Deployment Option: Deploys in hours without MX or mail flow changes, with 30-day historical scanning to show threats your current defenses missed.
- Email Archiving (via Cloud Archive): Secure long-term storage supporting compliance needs.
What benefits can impact ROI?
- Regulatory Compliance: Supports adherence to standards like HIPAA through retention and monitoring.
- Integration: Deep integration with Microsoft 365, deployable as a gateway or via API depending on your environment.
- Rapid Time to Value: API deployment proves protection value in hours, before any infrastructure commitment.
- Threat Prevention: Detection engines refined daily against 1.3 billion emails, trusted by 42,000 customers globally.
Industries and use cases
Mimecast Email Security is used across industries, including healthcare and finance, to secure inbound and outbound communications and support compliance requirements. Enterprises use it as a gateway, an API-based layer on top of Microsoft 365, or both, depending on how much control versus deployment speed they need.
