Question 1

We already have a Security Operations Center (SOC). Do we still need Managed Threat Response?

Accepted Answer

Most Managed Threat Response customers had a SOC when they bought it. The
question is where user-reported email sits in your priority stack. For most
teams it's noisy, largely benign, and not where their best analysts want to
spend time. Managed Threat Response removes the highest-volume, lowest-signal
queue so your SOC can focus on actionable threats.

Question 2

How does Managed Threat Response compare to an automation-only tool on cost?

Accepted Answer

Automation tools shift the work — your team still tunes the model, reviews edge
cases, and explains misclassifications. The fully-loaded comparison, including
tuning time and analyst hours, typically closes the gap or favors Managed Threat
Response. And unlike a single mid-level analyst dedicated to abuse mailbox work,
Managed Threat Response is 24×7.

Question 3

Does Managed Threat Response replace our existing phishing report button?

Accepted Answer

No. Managed Threat Response integrates with the reporting button your users
already use — Microsoft, KnowBe4, Proofpoint, and others. Your end users don't
change how they report email, and you don't change your awareness training
vendor.

Question 4

What happens when the analyst team misclassifies a message?

Accepted Answer

Mimecast owns the outcome contractually. Admins can dispute classifications and
add context via a Follow-up workflow, triggering analyst reassessment. There is
one team accountable for the result — not an automation tool that leaves the
edge-case responsibility with your SOC.

Question 5

How do we trial Managed Threat Response before committing?

Accepted Answer

Through a proof of value (POV). Submit real suspicious emails from your
environment — or samples we provide — and Mimecast analysts respond exactly as
they would for a paying customer. You see the classification, threat
intelligence, transmission notes, and remediation actions before you sign
anything. No console deployment required for the trial.

Leader in Gartner® MQ™ for Email Security

Respond to threats without clocking out

Ease your SOC’s workload

Maintain coverage after hours

Scale response without headcount

Questions? We’ve got answers.

Close the gap on reported email security

Built for the problem automation can’t solve

Cushman & Wakefield secures global operations with Mimecast

Scale your tech stack with Mimecast Apex™

One view of all your risk

Ready to get started?

Mimecast key message

Mimecast key stats