Proofpoint vs. Mimecast

Mimecast's disjointed product approach, leverages static rules for blocking and limited AI/ML for contextual warning tags, requires manual tuning and is prone to high false positives.

Proofpoint's continuous detection analysis includes pre-delivery, post-delivery and click time for superior end-to end detection resulting in efficacy of 99.999% and low false positives.

Mimecast's URL detection relies on multiple 3rd party technologies for reputation analysis, leading to poor novel URL threat detection. This approach leads to URL redirect latency, poor user experience, and manual URL remediation.

Proofpoint's URL detection and analysis are driven by static analysis, anomalous behaviours, and dynamic sandboxing. Pre-and-post-delivery URL sandboxing prevents malicious payloadless threats from detonating in your user’s inboxes. Combined with automated URL retraction from all impacted mailboxes, your people and business are better protected.

Mimecast offers limited threat insights based on third-party data. This limitation results in no threat campaign correlation, no Indicators of Compromise (IOCs), no actor tracking, no people-risk visibility, and no URL attack visibility.

Proofpoint provides comprehensive threat detection visibility. This includes targeting trends, campaign correlation, forensics, and threat actor aggregation. With Proofpoint's Very Attacked People (VAPs) visibility, you can see which threats are targeting your users and how threat actors are attacking them. This allows you to quickly identify the users most at risk and take immediate remediation actions.

Mimecast provides limited to no AI/ML capabilities for compliance and archiving to improve efficiency. With compliance monitoring or supervision, Mimecast relies primarily on detection rules to reduce false positives. Virtually all vendors that offer supervision do this at a minimum.

Proofpoint can apply ML from point of collecting data to performing e-discovery to supervising communications. We centralise capture across email, social media and enterprise collaboration platforms. We use ML to reduce false positives by up to 84% in compliance reviews and cull vast amounts of search results down to relevant, responsive data, helping reduce e-discovery costs.

Mimecast primarily answers support tickets from a single geography, leading to delayed responses for customers in other countries. Business reviews and health checks may also incur additional fees.

Proofpoint offers a proactive approach with customer business reviews, configuration health checks, training, robust customer communities, and world-class support with aggressive response SLAs.