Advanced Email Security

What it does

Advanced Email Security is Mimecast's email security product for Microsoft 365, Google Workspace, and on-premise or hybrid mail environments. It defends against phishing, business email compromise (BEC), impersonation, malicious URLs, and weaponized attachments. Its distinguishing approach is anomaly detection with social graphing, which models the strength and pattern of communication relationships to flag deviations that signal social engineering. The same protection is delivered two ways: a Cloud Gateway routed by MX record, or a gateway-less Cloud Integrated deployment connected to the mailbox by API.

How it works

The product applies machine learning and behavioral analysis to message content, links, and attachments, scoring relationship strength, urgency, and linguistic context to surface social engineering and business email compromise. Suspicious links are checked before delivery and re-evaluated at the moment of click, attachments are detonated in a sandbox, and computer vision inspects branded login pages used for credential theft. Cloud Gateway routes inbound mail through Mimecast by MX record change for pre-delivery filtering, while Cloud Integrated connects to Microsoft 365 by API for post-delivery detection and remediation. Emails users report are auto-classified and removed across all affected mailboxes.

Credentials and traction

SOC 2 Type II, ISO/IEC 27001:2022, and ISO/IEC 42001:2023 certified, with attestations available through the Mimecast Trust Center. Mimecast protects more than 42,000 organizations and 27 million users across over 100 countries, and this product anchors its broader Human Risk Management portfolio. It targets enterprises standardized on Microsoft 365 or Google Workspace that need threat protection layered alongside native email security controls.