Proofpoint vs. Mimecast

Mimecast’s disjointed approach, using static rules for blocking and limited AI/ML for contextual warning tags, requires manual tuning and is prone to high false positives.

Proofpoint Nexus®, our proprietary AI-driven detection stack, stops the widest variety of advanced human-targeted threats with 99.99% accuracy and industry-low false positive rates.

Mimecast’s URL detection relies on multiple third-party technologies for reputation analysis, leading to poor novel URL threat detection. This approach leads to URL redirect latency, poor user experience, and manual URL remediation.

Proofpoint's URL detection and analysis are driven by static analysis, anomalous behaviors, and dynamic sandboxing. Pre-and-post-delivery URL sandboxing prevents malicious payloadless threats from detonating in your user’s inboxes. Combined with automated URL retraction from all impacted mailboxes, your people and business are better protected.

Mimecast offers limited threat insights based on third-party data. This limitation results in no threat campaign correlation, no Indicators of Compromise (IOCs), no actor tracking, no people-risk visibility, and no URL attack visibility.

Proofpoint provides comprehensive threat detection visibility. This includes targeting trends, campaign correlation, forensics, and threat actor aggregation. With Proofpoint’s Very Attacked People™ (VAPs) visibility, you can see which threats are targeting your users and how threat actors are attacking them. This allows you to quickly identify the users most at risk and take immediate remediation actions.

Mimecast provides limited to no AI/ML capabilities for compliance and archiving to improve efficiency. With compliance monitoring or supervision, Mimecast relies primarily on detection rules to reduce false positives. Virtually all vendors that offer supervision do this at a minimum.

Proofpoint can apply ML from point of collecting data to performing e-discovery to supervising communications. We centralize capture across email, social media and enterprise collaboration platforms. We use ML to reduce false positives by up to 84% in compliance reviews and cull vast amounts of search results down to relevant, responsive data, helping reduce e-discovery costs.

Mimecast primarily answers support tickets from a single geography, leading to delayed responses for customers in other countries. Business reviews and health checks may also incur additional fees.

Proofpoint offers a proactive approach with customer business reviews, configuration health checks, training, robust customer communities, and world-class support with aggressive response SLAs.