Knowledge Hub · Security

What is the difference between Mimecast and SendMarc in FirstNet's email security?

Email Security & Threat Protection · Answered by FirstNet Technology Services

Short answer

Mimecast is inbound protection: it stops phishing and malware reaching your users. SendMarc is outbound brand protection: it stops anyone spoofing your domain to attack your customers and suppliers. Most organisations need both, and FirstNet runs both as managed services.

In detail

How they differ:

  • Mimecast sits in front of Microsoft 365, Google Workspace or Exchange and filters spam, malware, phishing, impersonation and malicious links and attachments before delivery
  • SendMarc manages your DMARC, SPF and DKIM set-up, identifies every system sending email as your domain, and takes your policy to p=reject so criminals cannot put your domain in the From line
  • Mimecast protects your staff, while SendMarc protects everyone who receives email from you
  • Mimecast adds optional continuity, archiving and awareness training; SendMarc adds optional BIMI logo display and look-alike domain takedown

Neither replaces the other. DMARC does not stop a phishing email arriving from someone else's domain, and an inbound gateway cannot stop attackers spoofing your domain to your customers.

A FirstNet specialist can help you decide which to start with, based on whether your bigger risk today is inbound phishing or impersonation of your brand.

Source: FirstNet Email Security & Threat Protection service page →

Didn’t answer your question?

Call