Mimecast Insider Risk Management and Data Protection Reviews

My main use case for Mimecast Insider Risk Management and Data Protection is using it as a main tool for insider risk management or IRM, where we monitor for user activities. If there are large downloads or uploads to any external sites, or if there is a large download from SharePoint and other kinds of workloads, the use case kicks in and an alert would be triggered wherein we investigate. Then we get confirmation and do further analysis to confirm whether it is a legitimate or illegitimate activity done by the user.

One specific example of a situation where Mimecast Insider Risk Management and Data Protection helped me catch or investigate an insider risk involves multiple alerts, but one stood out. We had one alert wherein there was a large amount of data uploads to one of the S3 buckets, an Amazon S3 bucket. When we got the alert, we did the investigation, but the S3 bucket that was mentioned does not belong to our organization. While we investigated further, we came to know that the user account was compromised and the attacker was trying to upload the data from the user's OneDrive into their own S3 bucket in order to exfiltrate the information. Though it belongs to insider risk management, it was the attacker who took control of the user's account, and from there on, he started to upload information to the Amazon S3 bucket, which kicked in an alert. We got an alert that there was a large data upload from one of the users. When we performed the investigation, we concluded that it was the attacker who compromised the user account and then the attacker was trying to upload a large amount of data to their S3 bucket.

I use Mimecast Insider Risk Management and Data Protection on a regular basis for investigation and also to create any new use cases as instructed from management. Recently, we added two or three use cases related to SharePoint. We had one of the previous cases wherein the attacker was trying to manipulate the user's inbox and then there was a large amount of data that was being sent out. There were also some legitimate cases wherein the upload or download data was so minimal, in a way that it led us to increase the threshold for that. These are some of the use cases or rather tweakings that we do on Mimecast Insider Risk Management and Data Protection on a regular basis or on a day-to-day basis.

The best features Mimecast Insider Risk Management and Data Protection offers are best-in-class features wherein some of the use cases have been added by the Mimecast team themselves so that we just need to customize the existing use case and do not need to create any new use cases. The second thing is that the alert getting triggered is very fast. There is no latency issue that we have observed. In some of the tools, the users might be uploading and downloading the data, and then after a few minutes or so, the alerts would get triggered. But here it is instant and quick, wherein it provides the results with zero latency. That is also one of the best tools that we have used in recent times.

I find the built-in use cases most valuable in my day-to-day work because as we are a small team, we have many other tasks that need to be carried out. Just sitting down on a regular basis and then creating a new use case from scratch is going to be much more time-consuming. That is where the default use cases kick in, wherein we just have to tweak the existing or the default use cases so that we do not need to create it from scratch. That is one of the standard features, standout features, that I would probably go ahead with.

Mimecast Insider Risk Management and Data Protection has positively impacted my organization as earlier we were struggling with insider risk wherein we were not having any control over it. We were strong in terms of external attack surface, but insider risk was something that we were lagging behind. Because of it, unknowingly there were many data that was exfiltrated by the users and it was sent to their personal email ID and we did not have any control over that. We were exploring some of the solutions out there in the market, including Microsoft Purview, and then Mimecast was another tool that we discussed. We went on with Mimecast because of its cost optimization and also its features and use cases that caught our attention. We deployed the tool in our organization so that now we have more control over the user's activities within our organization, and the quick alerting also helped us in minimizing the internal data exposure. That is where the tool is extremely useful for us.

Regarding how Mimecast Insider Risk Management and Data Protection can be improved, sometimes the tool is slightly laggy, wherein it would take some time for us to fetch the related logs from the Mimecast portal, and that of course can be improved. There could also be a graph or a kind of a graph where, if the organization has a smaller number of employees, it is fine, but if it has a large number of employees and different departments, then in that case, Mimecast could give us an AI suggestion upon how to improvise the current security posture, how we stand and where we can go up to in terms of implementing or tweaking the policies. As the organization's size gets bigger, it would also be better if Mimecast could provide some solutions upon how to segregate the users into groups and what groups can have which policies. Those kinds of features can be added.

Regarding Mimecast Insider Risk Management and Data Protection's AI capabilities, I think its governance and security could improve as I am not entirely sure how it works. It would be helpful if Mimecast could, as the AI capabilities are in place, maintain a strict governance policy upon the data that is being processed, especially for user personally identifiable information. As insider risk management sometimes also gets into the personal details of the user, organizations might be hesitant; even we are also hesitant to use the AI capabilities. If Mimecast could provide more information about how they store the data and whether the agents are local agents or cloud-hosted agents, that would be of great help for the organizations to consider its AI capabilities while adhering to the compliance needs of a particular organization.

I have been working in my current field for about seven years now.

Mimecast Insider Risk Management and Data Protection is stable.

The scalability of Mimecast Insider Risk Management and Data Protection is good; we can deploy it in organizations with more than a thousand or even ten thousand or even hundreds of thousands of employees.

Sometimes we do encounter vague answers for some of the queries we have, but apart from that, the customer support response has always been very good.

We have not used any other solution previously; Mimecast Insider Risk Management and Data Protection is our first solution.

My experience with pricing, setup cost, and licensing for Mimecast Insider Risk Management and Data Protection was good, but the licensing cost could have some sort of concession, especially based on the number of employees within the organization. However, the setup cost or the pricing was nominal for us to proceed.

I have not seen a return on investment yet, as we have not used the AI capabilities. Currently, we have ten employees who are managing the entire portfolio, which we could potentially reduce. There have been scenarios where we have stopped users from sharing data, and that data has been successfully protected from leaving the premises, adding tremendous value for us. With respect to time saved, we have automation in place, enabling us to save a considerable amount of time, such as checking logs to confirm whether actions were performed by the user or if an account was hacked, which has also resulted in significant time savings.

I advise others looking into using Mimecast Insider Risk Management and Data Protection to consider it a great tool, but it depends on what is required as per the organization's needs to extract the maximum capabilities that Mimecast offers. The customer support has always been good, and except for the licensing cost, I think the pricing is also reasonable, and the setup cost is a one-time investment that will stay with us forever. It is essential to evaluate your organization's needs and capabilities and the complexity in managing employees, especially if you have multiple departments. Mimecast helps segregate policies for each department efficiently.

Before choosing Mimecast Insider Risk Management and Data Protection, we evaluated Microsoft Purview Insider Risk Management, but we moved to Mimecast.

Regarding Mimecast Insider Risk Management and Data Protection's AI capabilities, we have not used this feature yet; it is still in the discussion phase, so I will not be able to comment on that part.

We deploy Mimecast Insider Risk Management and Data Protection in our organization using a hybrid cloud model, as we use it for Azure, AWS, and GCP.

My additional thoughts about Mimecast Insider Risk Management and Data Protection are that it is a great tool. Before deploying, we need to understand the organization's landscape, including how many departments we have and what scope we could expand upon with respect to insider risk management. Protecting the internal environment or from internal employees is just as important as protecting the external environment, and the organization should consider insider risk management a priority. It is a valuable tool, and organizations can certainly proceed with its deployment. I would rate this solution a nine out of ten.

Hybrid Cloud

Microsoft Azure

I have used Mimecast Insider Risk Management and Data Protection for almost four and a half years for one of my clients.

I use Mimecast Insider Risk Management and Data Protection for detecting and maintaining email security for my client. Mimecast gives us unmatched visibility and focuses on behavior analysis with file vector users, real-time nudges, and top-tier support.

Mimecast Insider Risk Management and Data Protection uses a file-vector-user framework. Instead of just blocking everything blindly, it examines the file value, how it is moving, and which users are moving it. I can provide a real-world example of how a company uses this product to stop insider threats.

My example involves departing employees and data theft. An employee resigns to take a job at a direct competitor. Before their access is cut off, they decide to download sales battle cards, customer leads, or product roadmaps to a personal USB or personal Google Drive to give themselves a head start at the new job. Mimecast manages this through HR integration by connecting to the company's HR system such as Workday or their particular HR system. The moment HR marks the employee as resigned, Mimecast automatically moves that employee to a high-risk departing employee watchlist. Additionally, behavioral monitoring tracks their activity over the last thirty days and monitors them going forward. If they suddenly try to transfer fifty gigabytes or a large amount of corporate data to a personal cloud drive or rename files to other formats to sneak them past security, Mimecast flags the mismatch instantly. The security team is alerted immediately with the exact file history, allowing them to freeze the user's account before they leave.

I can provide multiple scenarios. Another scenario involves Shadow AI leak. A well-meaning product manager wants to quickly clean up a piece of unreleased proprietary code or summarize a sensitive financial presentation to save time. They paste the entire raw text into an untrusted, unapproved public AI tool such as an unsanctioned GenAI web application. Mimecast manages this through vector detection by monitoring endpoints and browsers. It detects that corporate data is moving to an unapproved browser destination or shadow IT. A real-time nudge triggers an automated response instead of locking down the computer and creating a massive IT ticket. A pop-up appears on the employee's screen saying, 'You are trying to share internal code or data with an unapproved AI tool. Please use our secure corporate enterprise AI tool instead.' This stops the leak immediately while educating the user.

Another scenario involves hijacking accounts with a compromised insider. For example, a customer support agent falls for a spear-phishing email and inputs their credentials into a fake portal. A malicious external hacker now logs into that agent's account from a different country. The hacker appears to be an insider using legitimate credentials and begins silently harvesting customer personal identifiable information. Mimecast manages this through anomaly detection. Mimecast notices that this specific user is suddenly logging in at three in the morning from an unusual IP address and downloading customer data at ten times the normal rate. The system identifies that this behavior heavily deviates from the user's standard historical profile or data through context analysis. Because this is high-risk, the platform triggers an automated workflow via integration with the company's EDR tool such as Defender or CrowdStrike or an identity provider to isolate the device and force a password reset, instantly locking out the attackers.

There are many features that come with Mimecast Insider Risk Management and Data Protection. The absolute hero feature that makes Mimecast Insider Risk Management and Data Protection incredibly valuable to a business is a no-policy trust activity model, which I understand to be inferred trust.

Traditionally, data loss prevention tools are a nightmare because IT teams must manually write thousands of strict rules trying to guess every way an employee might steal data. Mimecast turns this on its head. Instead of writing rules, the system monitors everything and uses AI to automatically build a map of your corporate ecosystem. The magic happens when an employee downloads a file from corporate Google Drive and uploads it to corporate OneDrive. Mimecast cross-references both endpoints simultaneously. It recognizes that both sides are corporate-owned, so it silently marks the activity as trusted and ignores it. If some employees take that exact file and upload it to a personal Google Drive, Mimecast instantly flags it as untrusted because it cannot verify the destination container. This is the most useful feature that Mimecast Insider Risk Management and Data Protection has.

I would highlight reporting and analytics improvement. While the dashboard looks great, getting highly customized reports out of the system without using an external API can be difficult. The daily dashboards are very intuitive, but native executive report features could be enhanced. If you want to create highly customized reports for C-level presentation or high-level reviews, you often have to rely on their API to export data into a third-party SIEM or BI tools. Having more out-of-the-box templates for quarterly risk summaries would be a huge time-saver and advantage for this tool.

I would also mention virtual or shared environment support. It is technically specific, and there is a struggle in particular virtual desktop infrastructure environments where multiple users share a single host. One area of improvement is better out-of-the-box support for multi-user shared host environments such as Azure Virtual Desktop or AVD setups. When multiple active users share a single host simultaneously, the endpoint tracking can sometimes face performance bottlenecks or require complex workarounds to report individual data flawlessly. These are the areas where this product can improve.

I have been a part of SOC operations for eight or nine years.

Mimecast Insider Risk Management and Data Protection is stable.

Customer support has been impressive. I raise a ticket or task number for any query or issue I have, and I have been receiving great support from the customer service team.

Previously, I had O365 for email security. I was not getting the centralized view that I am getting with Mimecast Insider Risk Management and Data Protection. The AI-enabled capabilities in Mimecast Insider Risk Management and Data Protection are truly impressive. It gives me behavioral analysis and allows me to monitor real-time logs. I was able to get analysis of user behavioral patterns. Because of these reasons, it helps me maintain less headcount in security engineers for this product.

The initial setup is great.

Mimecast Insider Risk Management and Data Protection does provide ROI. It saves a lot of time. Instead of having multiple people managing DLP, I have a Mimecast Insider Risk Management and Data Protection monitoring team. The biggest positive impact has been the sheer amount of time my IT and security team has saved. Legacy DLP tools used to require a dedicated engineer just to manage daily alerts and constantly tune policies. With Mimecast Insider Risk Management and Data Protection, our investigation time for high-risk incidents has been cut in half, and overall management now takes us less than four hours a week. It provided immediate ROI within the first few months by automating our response workflows. Mimecast Insider Risk Management and Data Protection AI response is integrated directly with our HR and identity systems, which allows a smaller security team to do more. It has saved time, saved cost, and reduced the number of people in that particular security project.

It has been a great journey for me with the pricing and setup. I do not have to think about reducing the cost. My experience has been great with Mimecast Insider Risk Management and Data Protection so far.

I was considering Defender, but I wanted a solution purely dedicated to insider risk management and data protection. I heard from other clients that Mimecast Insider Risk Management and Data Protection is a truly good product, and I received a demo as well. It impressed me at the first point, so I went for it.

Mimecast Insider Risk Management and Data Protection provides behavioral pattern analysis and gives me a centralized alert. It helps me maintain less headcount for security engineers. It saves time and cost.

The accuracy of Mimecast Insider Risk Management and Data Protection detection is highly impressive because it moves away from rigid keyword matching and examines the true behavioral context. By utilizing over two hundred fifty built-in risk indicators, it successfully separates everyday employees' collaboration from actual malicious exfiltration. For example, it tracks when the file extension is renamed or when an unusual large volume of files is moved to a personal cloud browser tab, giving the alert high fidelity. In terms of reliability, the endpoint agent is incredibly lightweight and stable. It operates silently across both Windows and macOS setups with almost zero performance impact, ensuring it does not slow down employees' machines or crash. The system is highly dependable. I give this product a review rating of nine out of ten.

on-premises

I manage an organization with more than five thousand employees who are all in either on-site or hybrid environments and receive multiple emails every day. The email flow on a daily basis is too much to handle manually. Emails can be sent from approved domains, or they can be spam or other unwanted messages. I cannot reveal my customer's name, but I can say that they are in the shopping business. Since they are in the shopping business, they receive multiple mail flows from the sales team and regular communications, and it becomes very crucial to differentiate which emails are useful and which are not.

On a daily basis, I check whether the mail flow is within the established threshold. Unless there are end-of-season sales occurring, I do not see a high mail flow that exceeds the threshold we observe. I evaluate the detections I am seeing, and in Mimecast Insider Risk Management and Data Protection, I can see detections based on various time frames, such as twenty-four hours, forty-eight hours, or whatever custom time frame I choose. The maximum limit according to our enterprise is thirty days. Since I need to see activity in real time, I analyze whether all the respective mail flows are coming in and what category they fall under. The categories can include malware, spam, extortion campaigns, or multiple others.

I analyze that data by fetching the raw logs for my customer, checking the spam scores for their emails, and reviewing statuses such as accepted, rejected, held, deferred, and more. I analyze whether Mimecast Insider Risk Management and Data Protection's policies work properly. I cannot just rely on it being a SaaS-based product with enabled policies working correctly. There are many use cases where I have seen emails being delivered that should not have been delivered. That does not make Mimecast Insider Risk Management and Data Protection a bad product; it means that I have not fine-tuned the policy to my organization's expectations. Once I work on the tool daily, I understand the mail flow, recognize which emails fall into the spam category, and compare them not only on the Mimecast Insider Risk Management and Data Protection database but also with external comparison tools like MX Toolbox or VirusTotal to analyze things. This gives an overview of what my general scenario looks.

The way attachments are being read by Mimecast Insider Risk Management and Data Protection is crucial, especially concerning what data is sent outside the organization from the internal network and what kind of data is being sent from outside to inside. This can include URLs, file types, PDFs, and other content. The OEM team has blocked many widely recognized malicious file types themselves, which helps in rejecting emails that people try to send containing malicious content. For PDFs specifically, which are sent regularly, it becomes crucial that if an authorized user sends something for business purposes, it should go through; however, if Mimecast Insider Risk Management and Data Protection flags it as suspicious or the domain user is not whitelisted, that is completely fair.

Mimecast Insider Risk Management and Data Protection performs its share of detection, and I have even tested it with a very large file, such as an eight-hundred-page document where only one or two hyperlinks were malicious content. Mimecast Insider Risk Management and Data Protection detected that immediately. Comparatively, other specific technologies did not block it even when I temporarily removed the sending limit that some mail tools impose, for example, only sending up to five to twenty MB. In that testing scenario, Mimecast Insider Risk Management and Data Protection shines with how policy enforcement and data protection is implemented. Secondly, it shows the top malicious senders for the week or whatever time frame I desire, illustrating which users were targeted the most. It does not just present a list; clicking on a user reveals who exactly sent the emails, the sending mail category, and more specifically regarding the targeting of the user.

The emails can fall into categories such as ransomware, spam, or impersonation, indicating whether a legitimate email has failed DKIM or DMARC validation, which Mimecast Insider Risk Management and Data Protection detects efficiently. While other tools also identify these aspects, Mimecast Insider Risk Management and Data Protection clarifies how everything works quite well. In day-to-day work, one key point I would definitely highlight is log fetching. Many other tools make fetching logs tiresome and irritating; every log search requires so much hassle with filtering. In contrast, Mimecast Insider Risk Management and Data Protection enables me to just paste the mail ID, and it finds everything automatically, fetching all relevant logs in one place without needing to differentiate between statuses such as rejected or accepted. It offers specific groups including permitted senders, trusted senders, and blocked senders. It is all clean and sophisticated. Having worked with various tools and technologies before, I can say that tools such as this should exist; they ought not to be complex. During troubleshooting calls, I should not be figuring out why the tool does not provide the required logs; it should be quick.

The SSO integration in Mimecast Insider Risk Management and Data Protection works securely and smoothly, functioning across all browsers. However, I must mention that at times, the homepage of Mimecast Insider Risk Management and Data Protection takes too long to load, which I am personally not complaining about, but colleagues have reported slow loading on rare occasions.

Mimecast Insider Risk Management and Data Protection has a very clean interface, which makes it easy to use effectively once it is handed over to the organization. I can actually ask the Mimecast Insider Risk Management and Data Protection team how to understand the tool, and they have guidelines and documentation that provide all the necessary information. Mimecast Insider Risk Management and Data Protection offers several features beyond policies and digest notifications, such as message digest notifications that I receive. It helps in understanding trace paths very well. What I mean by trace path is that when a user is sitting inside the organization and wants to send an email to an outside domain, it will not be sent directly.

First, the email goes to the Microsoft Outlook mail server. From there, an SMTP request is initiated to Mimecast Insider Risk Management and Data Protection. Once the SMTP connection is established, the email gets forwarded from the specific sender mail server to the receiver mail gateway, which is Mimecast Insider Risk Management and Data Protection. Now, from the Mimecast Insider Risk Management and Data Protection gateway, the email gets analyzed. It runs through policy checks, checks for permitted blocks, trusted senders, and frequent sender information, analyzing whether I have received some specific emails from this user and whether any of them were flagged. It goes through the database, and post all Mimecast Insider Risk Management and Data Protection internal checks, the email is verified as acceptable and is good to go.

Once verified, the email goes out to the recipient's mail server. There may be a mail server at the recipient's mail end as well, but that is not my concern since I do not manage that. It then reaches the user's inbox. Many times, the organization's control includes complaints such as not receiving the email, or the email was rejected or the attachment was missing. Why do those things happen? Mimecast Insider Risk Management and Data Protection provides a clear idea through the message delivery option, where I input the from ID and to ID for a specific timeframe, and I can see what headers were captured in the emails in a completely raw format, policies that were hit, the spam score, detections, and the exact reason for these events.

The theoretical aspects are acceptable, but the best part is the clarity it provides on the connection between the sender and recipient SMTP, such as start and end time. It shows when the connection was made to Mimecast Insider Risk Management and Data Protection, when the email got delivered, the time Mimecast Insider Risk Management and Data Protection took to establish that connection to the recipient's mail server, and when Mimecast Insider Risk Management and Data Protection sent that email. It provides thorough clarity for understanding exactly where the delay lies, including how much time Mimecast Insider Risk Management and Data Protection took for internal processing before the email went out. Many times, the blame is placed on the tool that it is not functioning properly, but those logs allow me to verify the problem's exact location. The report generation is quite easy. For policy creation, I cannot create a new policy, but almost all the policies that an organization could need are present. The interface is good—I am saying this again, but it is.

Moreover, the access level, such as the access matrix, is pretty clearly defined—basic administrator, read-only access, custom IT help desk, super administrator, and one in between, based on the plan taken for Mimecast Insider Risk Management and Data Protection. Mimecast Insider Risk Management and Data Protection learning community is something I recommend; I have done certification for them and am preparing for their advanced certification. The certification is really helpful; I learned through experience mainly, but anyone can start from the original OEM certification. There are helpful documentations and multiple tests as part of the courses, which range from ten to twelve hours for basic and advanced exams.

A con to mention is that Mimecast Insider Risk Management and Data Protection, at times, may not capture everything. For instance, the time that Mimecast Insider Risk Management and Data Protection took to process something such as incoming email is normally fifteen to twenty seconds, which is completely normal. Though the email is released, delays of ten to twenty minutes may be experienced, which does not get captured in Mimecast Insider Risk Management and Data Protection. It may show delays on the recipient's mail server end, but creates a contradiction since in Mimecast Insider Risk Management and Data Protection I do not see any delay, while the recipient's mail server indicates a delay occurring at Mimecast Insider Risk Management and Data Protection.

For testing, I whitelisted the specific domain for the sender's email. After whitelisting that, the delay disappeared, yet I wonder why Mimecast Insider Risk Management and Data Protection did not capture that in this specific log. This issue has not occurred often, maybe once or twice in the past six to seven months, but understanding that aspect has led me to reach out to OEM. They provided their views, but I was not very satisfied; they could show where it is getting captured and why it is not highlighted clearly. That is a con of Mimecast Insider Risk Management and Data Protection, but overall, it is a great tool. Mimecast Insider Risk Management and Data Protection is totally recommended. The policies are solid, they work effectively, the implementation time is not very long, integrations with SIEM are quite easy, and the Glassbreak account is something I have tested, making Mimecast Insider Risk Management and Data Protection better in this regard. Overall, it is a great tool.

I have been using Mimecast Insider Risk Management and Data Protection for one and a half years.

Mimecast Insider Risk Management and Data Protection is definitely stable without fail based on my experience.

Mimecast Insider Risk Management and Data Protection scales efficiently. In the last two months, I saw a high volume of inbound email, including spam and fraudulent emails. The tool effectively detected both malware and spam, ensuring that only a few emails categorized as malware reached user mailboxes. For malicious content, Mimecast Insider Risk Management and Data Protection performs adequately, blocking suspicious formats while still validating the email's content.

Customer support for Mimecast Insider Risk Management and Data Protection is excellent. I rarely face issues, usually resolving in two to three business days when necessary.

I am not certain about the primary solution used before switching to Mimecast Insider Risk Management and Data Protection, as I did not oversee its initial deployment. I can tell you that switching involved considerations regarding costs, particularly with DLP vendors and mail control.

I am not certain about specific time savings with Mimecast Insider Risk Management and Data Protection as technical observations can be vague. However, time is definitely saved in practices, as the tool requires less hands-on management after fine-tuning. I can generate specific reports, including top malicious senders and domain statistics, presenting them during customer review sessions, and those analyses help justify needed blocks.

I am unsure about Mimecast Insider Risk Management and Data Protection's pricing, setup costs, and licensing details. However, I know that licensing details are user-specific according to the license purchased. Information on current license details is easily accessible through the right-most side of the interface under support, showing information such as account manager details for the firm and expiration timelines. I can say that the OEM escalation metrics are good, and I have never faced delays in calls to support, though sometimes CSR has business day delays.

I did not evaluate other options before choosing Mimecast Insider Risk Management and Data Protection as I am an engineer focused on technical aspects.

My advice for those looking at Mimecast Insider Risk Management and Data Protection is to compare your use case comprehensively. Do not just rely on reviews, as they offer communal insight; evaluate from a technical perspective and consider the stability of your infrastructure and how well it aligns with your operational needs moving forward. Be thorough in understanding the features that other users find critical and ensure they align with your specific requirements. I give this review an overall rating of eight out of ten.

Public Cloud

Other

I use Mimecast Insider Risk Management and Data Protection primarily to identify and investigate risky user behavior involving sensitive information, whether the action is malicious, negligent, or compromised. The goal is to detect situations where employees, contractors, or privileged users may be exposing company data before it becomes a breach.

A typical use case would include email forwarding by an employee containing confidential information to their personal accounts. Another example is a large or unusual amount of downloads of sensitive data just before a user is either terminated or they resign. Additionally, I monitor sharing of any company IP data, customer data, or financial information such as PII or PCI information, which is regulated data not supposed to be outside the organization.

I also use it to detect compromised accounts that are behaving differently from normal user accounts. We also use it to support HR with security investigations based on support tickets that come up when they feel that something appears malicious or they report something that seems malicious.

There was one example where an employee who had recently submitted their resignation began forwarding documents they created with the company to their personal email ID so that they could use those as templates with the new organization they would join. The problem was that they did not realize that all of our documents have the company's digital signature and the company's logo on them. They were trying to exfiltrate data which they had created while they were employed with us, which got flagged.

Another instance occurred when we had a compromised mailbox where an attacker gained access through credential theft. Mimecast Insider Risk Management and Data Protection identified unusual outbound email activity and anomalous user behavior that did not match the employee's normal patterns of how they would send emails. This helped us contain that account and prevent sensitive information from being shared externally.

The best features of Mimecast Insider Risk Management and Data Protection are, first, the ability to catch anomalous behavior. We did not know we had a compromised account until the user behavior was tracked, especially because the user in question was on leave and themselves were not actively looking at their email accounts to realize that their account had been compromised. This was one of the best features where it caught onto pattern recognition.

Secondly, it is heavily useful for creating DLP-aided rules where it ensures that our data protection policies kick in by scanning documents and figuring out what documents should actually leave the company and what should not. It added a second guard rail layer other than our Purview DLP, which enabled us with a second form factor for checking that no sensitive information is going outside the company.

It has been an enabling tool where it has enabled us to not be actively involved with going through emails and understanding user behavior to sit and determine what kind of user behavioral metrics we should be looking at to catch threat vectors. This has been really valuable where it is able to automate that entire process. The AI layers ensure that we have an end-to-end clarity on what is happening, and the way they enrich our data set in terms of the classifications they provide for why they have flagged it for DLP add value to what they actually do.

Improvement-wise, just because I have other clients who use Abnormal and Material Security, I can say Mimecast Insider Risk Management and Data Protection's dashboard is not that user-appealing, where someone would actually go through their dashboard and figure out metrics. Additionally, navigating their platform is not the top product. These are things they could improve on and that would add really value.

I have been using Mimecast Insider Risk Management and Data Protection for around four and a half years. It started with CWG, but I am currently using it as a client.

Mimecast Insider Risk Management and Data Protection is pretty scalable, especially the way it is deployed.

They have a really good response time. The mean time to detect to mean time to respond from their end is somewhere between 15 minutes to 20 minutes. I would rate the customer support a 10.

We were using Trend Micro and the client wanted us to move away from it.

Two things stand out: money saved and time saved. We were always a smaller team, but time saved and money saved is where I can provide ROI. I would say somewhere around 5% ROI. In terms of the time complexity saved, probably around a day of an analyst looking at data has turned into only 15 minutes of the analyst looking at data.

It is not caught something per se that Purview DLP missed, but because Purview DLP is set in a way where we go into the portal and we look at alerts as compared to getting actively notified for it, we tend to not get to it until a certain point of the day when we open and go through those tickets, which leads us to look at DLP related emails. That said, Mimecast Insider Risk Management and Data Protection did catch onto that in parallel to Purview, and it immediately notified us of it. That is where I would say it had the edge over Purview, just because we have not configured Purview in a way where we have active notification set up.

Fewer incidents in terms of actual exploits going through as compared to detections stand out. We still get a lot of detections, but that is the best feature, where it is making sure those do not come through. It is keeping domain knowledge of which domain should be blocked because they are carrying malicious payloads. Another thing that got us was that it has the ability to check that even if some vendor has been marked safe, it still goes through vendor behavior as well. It has an understanding of how a vendor communicates with us. Because of that, it is able to catch onto some alerts which would have gotten missed otherwise.

I would rate Mimecast Insider Risk Management and Data Protection around an eight. The dashboard is the only piece that would take it to a 10. I would recommend people to take the product based on what their needs are and what their budget requirements are, because that is what finally comes down to getting this product. My overall review rating for this product is 8.

Hybrid Cloud

Amazon Web Services (AWS)

My main use case for Mimecast Insider Risk Management and Data Protection is to protect email threats, email threat protection, and DLP.

I use it for email threat protection or DLP in my day-to-day work by enabling the impersonation protection, attachment protection, URL protection, and also enabling the DKIM, DMARC, and SPF record. I also enable all the spam filters, create the proper policies, profile group policies, and other things.

Mimecast Insider Risk Management and Data Protection has positively impacted my organization because now people are aware of the risks associated with sending emails with important sensitive data and PII data, as well as any financial records due to this implementation, which has helped a great deal. Now 100% of the data is secured for my organization.

Since implementing Mimecast Insider Risk Management and Data Protection, I have seen specific outcomes such as achieving zero incidents over the last five years.

In my experience, the best features Mimecast Insider Risk Management and Data Protection offers include the data protection I use for the customer's PII data, financial records, employee data, and intellectual properties. Whenever any confidential data is sent outside the organization, I have created the policy, and also inside threat detection, I have created the forwarding of large volumes of email to personal accounts and also sensitive data, as well as email behavior such as registration. For DLP, data loss prevention, I have also enabled it for credit cards, social security numbers, health, HIPAA, and GDPR. I also track the recent submission of resignations, download email confidential information, and alert the HR and security team to potential theft. Additionally, I monitor third-party and vendor risk, detecting unauthorized disclosure to suppliers and contractors, and ensure regulation of GDPR, HIPAA, PCI DSS, and SOC.

Out of all those features, I find preventing sensitive data leaks as well as inside threat detection and DLP the most valuable and essential.

Mimecast Insider Risk Management and Data Protection could be improved by enhancing the dashboards and UI data. I want executive dashboards available so that I can share them with my C-suite team.

Regarding Mimecast Insider Risk Management and Data Protection's AI capabilities, I think its governance and security are effective because it has reduced false positives in data protection as well as inside risk alerts, improved real-time detection of data exfiltration attempts, expanded monitoring to email, M365 teams, SharePoint, increased automation for incident response and remediations, and improved integration with SIEM and SOAR.

I find Mimecast Insider Risk Management and Data Protection's AI accuracy and reliability of its output to be consistent and trustworthy for my organization.

I have been using Mimecast Insider Risk Management and Data Protection for the last five years.

Mimecast Insider Risk Management and Data Protection is stable.

Mimecast Insider Risk Management and Data Protection's scalability is 100% stable.

The customer support for Mimecast Insider Risk Management and Data Protection is exceptional, receiving a 10 out of 10 rating.

I previously used Proofpoint.

I switched from Proofpoint to Mimecast Insider Risk Management and Data Protection because Proofpoint is not accurate, not user-friendly, and has more false positives compared to Mimecast Insider Risk Management and Data Protection.

My experience with pricing, setup cost, and licensing is that everything is favorable compared to Proofpoint, which I previously used. After migrating, the cost is almost a 50% discount.

I did not purchase Mimecast Insider Risk Management and Data Protection through the AWS Marketplace. I went directly to the vendor, and Trivera is my vendor.

I have seen a return on investment with money saved, time saved, and more features available. Now employees find it easy to send their emails.

My experience with pricing, setup cost, and licensing is that everything is favorable compared to Proofpoint, which I previously used. After migrating, the cost is almost a 50% discount.

Before choosing Mimecast Insider Risk Management and Data Protection, I did not evaluate other options.

My advice to others looking into using Mimecast Insider Risk Management and Data Protection is that there are no more false positives, it is 100% reliable, and the AI and real-time data are excellent.

I observed that the AI-powered risk score has improved, with automation in place using AML, so that most threats are detected and there are fewer false positives. I gave this product a 10 out of 10 rating because of these capabilities.

Public Cloud

Amazon Web Services (AWS)

I have been using Mimecast Insider Risk Management and Data Protection for around two years for data protection and risk management. It is used for email security protection against phishing attacks, malware, ransomware, and data leakage to protect the organization's email security.

Mimecast Insider Risk Management and Data Protection filters malicious emails, protects attachments and URLs, maintains email continuity during outages, and archives email for compliance. It protects from malicious URLs, credential theft, phishing websites, and newly created malicious URLs while preventing harmful attachments. The solution scans attachments before delivery and detects ransomware, trojans, and zero-day malware. Additionally, it protects from impersonation attempts; if someone impersonates a business email, it stops CEO fraud and business email compromise. It effectively prevents sensitive information from leaving the organization.

The best features Mimecast Insider Risk Management and Data Protection offers are URL protection, attachment management, impersonation attempts protection, and blocking senders. As I work in email security, URL protection and blocking senders are the most valuable features, and we use them day-to-day in our business.

Mimecast Insider Risk Management and Data Protection stops phishing by combining SPF, DKIM, and DMARC validation with anti-spam, impersonation protection, URL protection, attachment sandboxing, and machine learning-based threat protection to identify and block phishing attempts.

I track messages, release quarantined emails, manage policies, and investigate phishing incidents through Mimecast Insider Risk Management and Data Protection, which protects our organization positively.

Mimecast Insider Risk Management and Data Protection already provides data loss prevention through content examination and email encryption; however, the insider risk management and data protection could be enhanced by adding more intelligent, behavior-based detection and integration with enterprise security tools.

I wish for better integration with SIEM and XDR, specifically improved integration with platforms such as Splunk, Microsoft Defender, and Sentinel.

Mimecast Insider Risk Management and Data Protection is already providing strong email security and data loss prevention capabilities, but the insider risk management could be enhanced by adding advanced user behavior and analytics, including AI-based risk scoring and more context-aware data loss prevention policies. Deeper integration with SIEM and XDR platforms would improve visibility across the security system, and with better data classification and adaptive security policies, it would help reduce false positives and prevent sensitive data from leaving the organization.

I have been working in the cybersecurity domain for almost four years.

Mimecast Insider Risk Management and Data Protection is stable for our organization.

Mimecast Insider Risk Management and Data Protection is delivered as a cloud-native SaaS architecture, so customers do not need to buy or maintain email security servers. As the organization grows, Mimecast scales its cloud resources to handle increased demand, providing easy user expansion and high email processing capacity.

Mimecast Insider Risk Management and Data Protection provides technical support to help customers deploy, manage, and troubleshoot its email security services. Mimecast Insider Risk Management and Data Protection provides enterprise technical support through its support portal, phone, email, and an extensive knowledge base, so their support team assists with mail flow issues, email delivery, and policy management threat protection as well. Since it is a SaaS platform, software updates and security enhancements are managed by Mimecast, and I highly recommend Mimecast Insider Risk Management and Data Protection for email security.

I did not previously use a different solution before Mimecast Insider Risk Management and Data Protection.

The main benefit is time saved; I am not sure about money saved, but it is definitely time saved.

Our client has chosen Proofpoint over Mimecast Insider Risk Management and Data Protection because they are highly recommended to the Proofpoint solution rather than Mimecast Insider Risk Management and Data Protection.

Mimecast Insider Risk Management and Data Protection is using artificial intelligence and machine learning to improve email security by analyzing and identifying threats; for example, a new phishing email pretending to be from Microsoft 365 may be blocked because AI identified suspicious language and sender characteristics.

It can help detect phishing, business email compromise, spam, malicious URLs, and suspicious attachments by analyzing email content.

In the future, AI could further enhance Mimecast Insider Risk Management and Data Protection through advanced user behavior analytics and AI-assisted incident investigations. I provide this review with a rating of 8 out of 10.

Public Cloud

Other

The main usage of Mimecast Insider Risk Management and Data Protection for me, coming from a security background, involves handling the daily phishing emails we receive. I use Mimecast message tracking and email preview features to determine whether emails are phishing and to take relevant actions accordingly.

A week ago, we received a phishing email in Defender, and Mimecast Insider Risk Management and Data Protection helped us handle it. I took the data to Mimecast and applied relevant filters in message tracking. I discovered that the framework values for SPF and DKIM were not matching, and the spam value was high. After pulling the header from Mimecast and analyzing it, I observed some delays that led me to conclude the email was likely phishing.

This is the primary function I perform with Mimecast Insider Risk Management and Data Protection.

The best features offered by Mimecast Insider Risk Management and Data Protection include message tracking and attachment information. If an email contains any attachment, the system displays it and allows me to download it for review. The email preview feature enables me to view incoming emails.

Message tracking is the game changer for me in Mimecast Insider Risk Management and Data Protection. I can filter any email information based on sender address, subject, and attachment information, and I can gather relevant data such as frameworks, whether they are passing or not, and the header.

Mimecast Insider Risk Management and Data Protection has positively impacted our organization because before implementing this tool, when we received phishing emails, we did not have an appropriate tool to check the framework. We only analyzed emails from a grammar perspective, and many phishing emails reached user inboxes. Since Mimecast has been introduced into our system, we have been very effective at tackling phishing emails and helping our organization remain secure.

Mimecast Insider Risk Management and Data Protection can be improved in the user interface. The UI is still very outdated and not functional, and there is no AI chatbot that would help us navigate through the interface.

I believe that Mimecast Insider Risk Management and Data Protection could improve the attachment info option. Sometimes it is glitchy, and occasionally the format is not proper, making it difficult to download the attachment and review it.

Regarding the AI capabilities of Mimecast Insider Risk Management and Data Protection, the governance and security features are very strong, but it is still lacking in AI features.

Mimecast Insider Risk Management and Data Protection has been very stable in my experience. The logs have been flowing through Sentinel without any log shortage, and all features are working very well.

The scalability of Mimecast Insider Risk Management and Data Protection depends on the organization. If you purchase more features, it will be more scalable at that point.

Customer support for Mimecast Insider Risk Management and Data Protection is adequate, but I would not say it is excellent. We raised a vendor ticket for one of the features, and the response was within 28 to 48 hours. While not quick, we do eventually receive a resolution.

There was no solution before Mimecast Insider Risk Management and Data Protection. It was the first solution we used regarding email security.

I have seen a return on investment since using Mimecast Insider Risk Management and Data Protection. It has definitely saved us considerable time. Previously, everything had to be done manually, and we were still unable to achieve our goals of catching phishing emails. Since Mimecast has been introduced, it has been saving us significant time. Money has also been saved, as our stakeholders made an investment in the tool. If we properly secure the environment through this tool, it indirectly helps save money.

Regarding pricing, setup cost, and licensing for Mimecast Insider Risk Management and Data Protection, these are decisions that stakeholders make, and I am the one actually using the tool, so I am not fully aware of these details. However, regarding licensing, in our team, everyone has separate roles we are working with, leading to limited access.

Before choosing Mimecast Insider Risk Management and Data Protection, I believe we evaluated Proofpoint as a comparison. However, because Mimecast has a strong reputation, we chose it instead.

The advice I would give to others looking into using Mimecast Insider Risk Management and Data Protection is that there are many features in this tool. Make sure when you purchase this tool that you go through the catalog, and after buying, explore every field because not everything is in the dashboard itself. You need to go into depth to understand how those features can help you in your day-to-day security work. I would rate this product an 8 overall.

Private Cloud

Other

My main use case for Mimecast Insider Risk Management and Data Protection is that in my organization, we use it as a governance policy to ensure that it's implemented for email retention, and then also email recovery. A failover should our primary email service provider fail, it works as a failover as well, and provides a security layer and encryption layers for inbound and outbound emails.

In regards to email retention, because our organization or customer is within the finance industry, regulatory policies require that we have a retention in place in case it is requested that we retrieve emails. This should be separate from your primary email source, so you need an independent, separate, or independent data retention provider in place. Another scenario where I needed to make use of it is we had a cyber attack in our organization, in our Microsoft 365 Exchange platform. The on-premises server was down and was inoperable, so it was required that we reroute all emails through our Mimecast service. Users were logging in, signing into their Mimecast profiles and accounts and then accessing their emails while a restoration was being implemented for the primary email service.

Mimecast Insider Risk Management and Data Protection has several features that we have noted, including the email signature feature enabled in it, which we use for company branding. We assign email signatures to various users in the organization, so they are automatically applied, and also used for promotional purposes, and for customer and marketing related matters.

Mimecast Insider Risk Management and Data Protection offers the ability to conduct a deep dive and granular access to previous data in our organization. We are able to retrieve emails in a secure manner. The security policies in place are used to filter spam and also protect C-suite executives from malicious attacks such as impersonation and cyber attacks.

Mimecast Insider Risk Management and Data Protection has positively impacted our organization by giving us confidence in our security. It has eased the workload that our technical team has to do in order to resolve cyber related issues. Mimecast offers cyber training material that we can pass on to our users, which makes it easier for upskilling our users in regards to cybersecurity.

Mimecast Insider Risk Management and Data Protection could be improved if they can offer a remote app for ease of use. If the team is not working from a workstation, we usually have the service access through our laptops, and if there's an interface on a mobile basis, that would be useful.

Ease of use for our newer recruits is an area for improvement. When someone just joins our team, we want an easy onboarding process for them to understand why Mimecast Insider Risk Management and Data Protection is in place. Sometimes we do not have the capacity to train someone, but we would like to ensure that Mimecast Insider Risk Management and Data Protection is able to provide that training information to get them up to speed on what our system is, what our setup is in the Mimecast platform. Maybe implementing a deep dive AI tool that understands our organization much better and can relay information to anyone that we're training would help. This way, we can pull training parameters to track areas where our technical teams can improve their understanding and knowledge base and skill base into making use of Mimecast Insider Risk Management and Data Protection better.

I have been using Mimecast Insider Risk Management and Data Protection for three years.

Mimecast Insider Risk Management and Data Protection is stable.

The scalability of Mimecast Insider Risk Management and Data Protection can be challenging at times, but once set up, it is fantastic.

I would rate customer support a seven out of ten because support is provided through a third party, and we are technically not inclined to reach out to Mimecast directly unless we go through our support vendor. I would rate the customer support an eight out of ten.

I previously used a different solution, Acronis, along with other various platforms that come with our RMM platform.

The setup process can be difficult due to the documentation process taking very long if you don't have the right technical team. Services for additional support are offered by third-party vendors that actually resell the product.

We use Azure as our cloud provider, along with the standard one that gets offered by Mimecast Insider Risk Management and Data Protection itself.

I have seen a return on investment more on time saved. In a team where our resources are limited, Mimecast Insider Risk Management and Data Protection eases the workload through automation, through policies and rules that are pre-configured to handle complex tasks that would take hours and days for a team to initiate, automatically replying to basic user incidents and providing level zero support to our end users.

My experience with pricing, setup cost, and licensing indicates that pricing is always very expensive. It's a very expensive product to sell to other people, but usually customers accept it once they experience the risk, and not when the risk is there. When the risk occurs, that's when they want to implement it, but it can be very difficult to implement. Sometimes support can be difficult as well. Reaching out to support can be challenging for some users or for our technical team.

Before choosing Mimecast Insider Risk Management and Data Protection, I evaluated other options, including Acronis and other software offered by most antivirus product companies such as Sonos.

Mimecast Insider Risk Management and Data Protection has eased the workload for my technical team because in the Mimecast platform, we can automate certain tasks to filter certain risk criteria, using its built-in features such as spam filtering to remove all unnecessary spam, so it does not bombard or cause issues for our users. Should a specific email be required and confirmed that it's secure, then we release it. It also helps us manage and keep us up to date in regards to all relevant threats in the specific time frame or in the time period that we're in.

I advise others looking into using Mimecast Insider Risk Management and Data Protection to give it a try and see for themselves. If they have access to a demo, they should really give it a trial and see for themselves. I would rate this product a ten out of ten.

I am using Mimecast Insider Risk Management and Data Protection, and I used it in my previous company for around two to three years.

We are leveraging Mimecast Insider Risk Management and Data Protection for email security, and it is acting as our primary email gateway, through which all our emails are entered. We have all the policies and security configuration implemented on Mimecast Insider Risk Management and Data Protection as our main gateway.

Mimecast Insider Risk Management and Data Protection is an email gateway, so all our email passes through our primary security device. It is used for all the security checks, policy checks, all the block checks, and URL rewriting. Our work mainly revolves around email work such as tracing emails and applying some blocking or remediation configurations.

We are leveraging Mimecast Insider Risk Management and Data Protection for email security, which includes URL sandboxing, URL shorteners, URL sand details, and headers.

Mimecast Insider Risk Management and Data Protection is a very robust and highly reliable gateway. We are very satisfied with its excellency with the anti-spam and URL rewriting feature. We are also leveraging it to stop phishing and malware attempts that our company receives. It has a good capability to deal with day-to-day trends and also has a good interface.

Regarding the best features Mimecast Insider Risk Management and Data Protection offers, it has highly customizable policies. It also has reliable, dynamic rewriting and blocking of URLs. Additionally, it provides instant threat remediation and is very good in identifying impersonation and BEC attacks. We have good admin visibility.

Mimecast Insider Risk Management and Data Protection has impacted our organization positively in several ways. It has good threat remediation and good attachment protection. It also has good impersonation and BEC protection. For our organization, these three are the most critical threat vectors that an attacker can leverage to enter the company. Mimecast Insider Risk Management and Data Protection has good control over these threat vectors. Apart from that, it has a good interface and good integration with other tools.

Regarding improvement for Mimecast Insider Risk Management and Data Protection, I believe there is one area that needs attention: QR code phishing. I can see it is still allowing some emails that have phishing QR codes inside them or some phishing attachments. It needs to slightly improve on the QR-ishing side.

I have been in this field for around six years and am working as a SOC incident responder.

Mimecast Insider Risk Management and Data Protection is stable.

Regarding Mimecast Insider Risk Management and Data Protection's scalability, as we have a public cloud, there should not be an issue with scalability.

Customer support for Mimecast Insider Risk Management and Data Protection is good. I have interacted with them multiple times regarding any kind of ongoing issues, and I can confirm that customer support is good.

I am using only Mimecast Insider Risk Management and Data Protection because I am working in an incident response team where we need to work for different clients. The choice of devices totally depends on what the client is using.

I am not the implementer; Mimecast Insider Risk Management and Data Protection was already there at the customer premises. We learned it, applied it, and used it.

The accuracy of Mimecast Insider Risk Management and Data Protection is good. We do not see any kind of mis-data or misinterpretation. From the accuracy side, I can confirm that it is reliable and there are no issues.

Mimecast Insider Risk Management and Data Protection is time-saving. From the employee perspective, it is neutral. From the security perspective, Mimecast Insider Risk Management and Data Protection is helping in reducing the ongoing threats for the organization.

I am from the incident response team, and regarding pricing and cost, I am not very familiar with this. I cannot comment on the pricing part.

We do not have a business relationship with this vendor other than being a customer.

I will give one piece of advice regarding Mimecast Insider Risk Management and Data Protection: be sure about zero-day attacks because it might be missing in applying any remediation or security controls on any kind of zero-days. This is applicable for all the security equipment we are using on a daily basis. Just be assured if there is a zero-day. I gave this review a rating of 8.

Public Cloud

Amazon Web Services (AWS)

I have been using Mimecast Insider Risk Management and Data Protection for five years.

My main use case for Mimecast Insider Risk Management and Data Protection is to trace phishing emails, block users, and create policies when necessary. We use Mimecast Insider Risk Management and Data Protection to manage our mail flow.

In a specific example of how I traced a phishing email using Mimecast Insider Risk Management and Data Protection, we have a sender address, and through that address, we enter it to see how many users received those emails. We check records including SPF, DKIM, and DMARC, along with the sender's IP address. If we find the IP address indicates that the sender is suspicious, we block the sender address to prevent future emails.

All aspects of my main use case with Mimecast Insider Risk Management and Data Protection function properly.

Mimecast Insider Risk Management and Data Protection offers several best features, including being a very user-friendly tool where we can easily create policies, add or remove users, and block sender addresses or links, making it very useful for email protection.

Integration is also easy with Mimecast Insider Risk Management and Data Protection, as we can easily implement this in our Outlook client to scan emails and protect our environment from phishing threats.

Mimecast Insider Risk Management and Data Protection has positively impacted my organization because we are using it in its full version. We receive notifications and reports if we encounter any issues. When users report emails, we can check whether they are legitimate or blocked and advise them not to accept suspicious emails, making it very useful for data protection.

Mimecast Insider Risk Management and Data Protection can be improved by enhancing policies and rules.

One improvement I would suggest is to create a dashboard where we can view all data, such as how many emails we receive and how many get blocked, rather than having to go through subfolders. A dashboard would allow us to easily check everything on one screen.

I have been working in my current field for nine years.

Mimecast Insider Risk Management and Data Protection's customer support was good overall, but sometimes we did not receive timely responses, needing to wait two to three days for updates.

We did not use a different solution before Mimecast Insider Risk Management and Data Protection. We started with the default Microsoft setup and then implemented Mimecast Insider Risk Management and Data Protection.

I did not evaluate other options before choosing Mimecast Insider Risk Management and Data Protection.

I recommend considering Mimecast Insider Risk Management and Data Protection, as it is a very useful and user-friendly tool to protect our Exchange environment.

I can share specific outcomes where we have noticed a reduction in phishing incidents. Many times, we receive phishing emails in our environment. If emails reach user mailboxes, users can report any suspicious emails they encounter. When they report, we get the notification, and as admins, we scan those emails and check all relevant details.

I would rate this product an 8 out of 10.

On-premises

Microsoft Azure