Email Security
7 providers in this category.
Email security tools defend inboxes against phishing, malware, spam, and business email compromise, either as a gateway filtering mail inline or as an API-based layer that plugs into Microsoft 365 and Google Workspace after delivery. They suit organizations whose biggest attack surface is email. The deployment model is the first decision; impersonation protection and data loss prevention separate the rest.
Companies
Neutral ordering. Not a recommendation.
Abnormal Security
abnormalsecurity.com
Abnormal Security is an API-based, cloud-native email security platform that integrates with Microsoft 365 and Google Workspace without changing MX records.
Barracuda Email Protection
www.barracuda.com/products/email-protection
Barracuda Email Protection is the mid-market email-security staple, combining a secure gateway with API-based inbox defense, AI impersonation protection against business email compromise, data loss prevention, and backup-integrated incident response.
Cloudflare Area 1
www.cloudflare.com/zero-trust/products/email-security
Cloudflare Area 1 (now Cloud Email Security) is a cloud-native email security service that provides AI-driven protection against phishing, malware, ransomware, and business email compromise, including malware-less BEC and account-takeover fraud.
Material Security
material.security
Material Security is an API-based security platform for Google Workspace and Microsoft 365 that unifies email security, data protection, identity threat detection, and posture management.
Mimecast
www.mimecast.com
Mimecast is a cloud-based email security gateway that inspects inbound and outbound mail to block malware, malicious URLs, spam, and impersonation fraud before delivery.
Proofpoint
www.proofpoint.com
Proofpoint is an enterprise email security and compliance vendor whose Email Protection product is a secure email gateway routing mail via MX records to block phishing, malware, spam, and impersonation.
Sublime Security
sublime.security
Sublime Security is an email security platform built around an open, provider-agnostic detection-as-code model: anyone can write, run, and share rules in a domain-specific language to block phishing, BEC, and other email attacks.