Mimecast

Mimecast
Mimecast · CC BY-SA 4.0 · source
Name	Mimecast
Type	Public
Founded	2003
Headquarters	Boston, Massachusetts; London, United Kingdom
Key people	Peter Bauer; Christopher Sefton
Industry	Computer software; Cybersecurity; Cloud computing
Products	Email security; Threat intelligence; Archiving; Continuity
Revenue	(see Financial Performance and Acquisitions)

Mimecast Mimecast is a multinational company that developed cloud-based email management, security, and archiving services for enterprises and organizations. Founded in 2003, the company grew during the expansion of cloud computing and cybersecurity markets, serving customers across sectors including finance, healthcare, education, and government. Mimecast competes with legacy vendors and cloud specialists in areas tied to enterprise communications, threat mitigation, compliance, and data retention.

History

Mimecast was established in 2003 amid increased adoption of Microsoft Exchange Server and concerns following incidents involving Conficker and early phishing campaigns. Early growth aligned with the rise of Amazon Web Services and other cloud providers that enabled SaaS delivery models used by companies such as Salesforce and Google Workspace. Significant milestones include expansion into North America and Europe, partnerships with channel firms and distributors similar to Ingram Micro and Synnex, and a public listing that paralleled other cybersecurity IPOs like CrowdStrike and Palo Alto Networks. Leadership changes and strategic shifts reflected industry consolidations exemplified by transactions involving Symantec and Proofpoint.

Products and Services

Mimecast’s portfolio addresses email security, continuity, archiving, and end-user productivity. Core offerings map to product families comparable to services from Barracuda Networks, Cisco Systems, and Microsoft. Solutions include threat protection against spear phishing, business email compromise patterns observed in incidents such as the Sony Pictures hack, and URL and attachment sandboxing similar to tools from FireEye and Sophos. Archiving and e-discovery features support regulatory regimes invoked in cases like Sarbanes–Oxley Act and HIPAA-related litigation, facilitating compliance workflows akin to offerings from Iron Mountain and OpenText. Additional modules provide secure messaging, encryption, and data loss prevention paralleling capabilities in Mimecast’s competitive set like Proofpoint and Barracuda.

Technology and Architecture

The company’s platform was designed as a multi-tenant SaaS architecture leveraging distributed data centers and cloud infrastructure patterns introduced by Amazon Web Services and enterprise networking models used by Dell EMC and VMware. Systems incorporate mail-routing frameworks compatible with Postfix-style SMTP relay flows and integrate with directory services such as Microsoft Active Directory. Malware analysis pipelines often use sandbox technologies inspired by approaches from FireEye and academic work at institutions like MIT and Stanford University. High-availability designs reference techniques used by hyperscale operators including Google and Microsoft Azure to provide continuity during outages comparable to the AWS S3 outage responses.

Security and Compliance

Security controls target threats cataloged by organizations like MITRE and standards bodies such as NIST. Threat intelligence feeds and indicators of compromise draw from collaborations analogous to partnerships between vendors and information sharing groups such as FIRST and ISACs. Compliance features accommodate frameworks and statutes including GDPR, SOX, and regulatory regimes enforced by agencies like the SEC and ICO. The company has undertaken third-party audits and certifications similar to attestations by ISO and auditors like Deloitte and KPMG to support client requirements.

Corporate Governance and Leadership

The governance structure followed common public-company practices with a board of directors and executive officers experienced in technology and finance sectors represented by alumni of firms such as Microsoft, IBM, Oracle, and private equity entities. Leadership transitions mirrored those seen at other tech companies during scaling and public-market phases, with CEOs and CFOs who had previous roles at organizations like Symantec and McAfee. Investor relations activities engaged institutional shareholders typical of listings on exchanges where peers like Okta and Zscaler operate.

Financial Performance and Acquisitions

Revenue growth tracked adoption cycles seen across cloud-native security vendors including CrowdStrike and Zscaler, with quarters influenced by corporate spending patterns in industries represented by clients such as JPMorgan Chase and Aetna. The company pursued strategic acquisitions to augment capabilities, following patterns of consolidation in cybersecurity similar to transactions involving Broadcom and VMware. Public offering events and subsequent financial reporting reflected market dynamics paralleling other IPOs in the sector and were analyzed by investment banks and research firms akin to Goldman Sachs and Morgan Stanley.

Criticism and Incidents

Like many cybersecurity vendors, the company faced scrutiny over service outages, incident response, and the operational impact of outages on customers' email continuity—issues comparable to outages experienced by Microsoft Exchange Online and outages documented for AWS. Criticism also covered product efficacy against sophisticated threats discussed in reports by researchers from Kaspersky Lab and ESET, and debates over vendor transparency in disclosure practices, echoing controversies involving firms such as SolarWinds and Kaseya. Legal and regulatory inquiries touched on compliance and contractual performance in the context of enterprise customer disputes similar to cases involving Symantec and McAfee.

Category:Cloud computing companies Category:Cybersecurity companies