# Email security statistics 2026: the tools behind company inboxes

Published November 10, 2026 by Peter Pietta. Source: https://www.runsonwhat.com/blog/email-security-statistics

> We checked public records of 1,860,569 companies to see who runs Proofpoint, Valimail, Mimecast and other email security tools, by size, industry and country.

Dedicated email security tools show up at a minority of companies, 7.3% of those we checked, and Proofpoint is the most common by a clear margin, ahead of Valimail and Mimecast. Large companies are far more likely to run one, and in our latest window stops slightly outnumbered starts.

## Key takeaways

- [Proofpoint](https://www.runsonwhat.com/reverse/proofpoint) is the most common email security tool in our data, ahead of [Valimail](https://www.runsonwhat.com/reverse/valimail) and [Mimecast](https://www.runsonwhat.com/reverse/mimecast): 37% of companies running any of the tools we track run it.
- Large companies are far more likely to run a dedicated tool, reaching 19% of companies with 1,001+ employees.
- Insurance has the highest adoption rate of any industry we break out, with 18% of insurers running at least one of these tools, ahead of construction and financial services.
- The United States has the highest adoption rate of the countries we break out (14%), while Germany and France trail well behind.
- In the last 90 days, stops outnumbered starts. [Agari](https://www.runsonwhat.com/reverse/agari) and [SpamTitan](https://www.runsonwhat.com/reverse/spamtitan) were the only tools with a net gain, and Mimecast lost the most.
- Few companies stack these tools: 4.6% of companies with any of them run two or more.

- **135,956** companies running at least one email security tool we track
- **7.3%** of all companies we checked
- **37%** of them run Proofpoint, the most used
- **4.6%** run two or more email security tools at once

## What is email security software, and how many companies use it?

Email security software protects a company's inboxes and sending domain from phishing, spam, malware and impersonation. In our scans it shows up at a minority of companies, concentrated in larger companies and in industries such as insurance and financial services.

### What does email security software actually do?

Email security software sits between the internet and a company's inboxes, or around its sending domain, to stop phishing, spam, malware and spoofed messages. The seven tools in this article fall into three rough groups: gateways that filter mail, authentication platforms that lock down a domain, and broader platforms that bundle filtering with data protection.

[Cisco Secure Email](https://www.runsonwhat.com/reverse/cisco-email) is the classic gateway, screening incoming and outgoing email for spam and phishing. SpamTitan, from TitanHQ, blocks phishing, malware and ransomware before messages reach inboxes. Valimail and Agari work on the other side: they handle DMARC (and, for Valimail, DKIM and SPF), the DNS standards that let a receiving server check whether a message claiming to come from your domain really did.

Proofpoint, Mimecast and [Barracuda](https://www.runsonwhat.com/reverse/barracuda) cover more ground, adding data loss prevention, compliance, backup or network security. That spread matters for any statistic you quote: a company using email security might be filtering every message, or simply publishing a strict authentication policy.

### How many companies use email security tools?

135,956 companies in our scans run at least one of the email security tools covered here, which is 7.3% of every company we checked. Each has a direct public trace of a tool, such as a mail record, an authentication record or a verified domain pointing at the vendor.

These counts are not market share, revenue or paying-customer numbers, and a company can run more than one tool. They show where a product is actually wired into a company's mail setup.

The ranking chart shows Proofpoint well out in front, with Valimail and Mimecast forming a second tier and the gateway specialists trailing.

**Email security tools by companies running them**

|  | Companies |
| --- | ---: |
| [Proofpoint](https://www.runsonwhat.com/reverse/proofpoint) | 50,615 |
| [Valimail](https://www.runsonwhat.com/reverse/valimail) | 34,178 |
| [Mimecast](https://www.runsonwhat.com/reverse/mimecast) | 30,276 |
| [Barracuda](https://www.runsonwhat.com/reverse/barracuda) | 19,221 |
| [Cisco Secure Email](https://www.runsonwhat.com/reverse/cisco-email) | 4,805 |
| [Agari](https://www.runsonwhat.com/reverse/agari) | 2,552 |
| [SpamTitan](https://www.runsonwhat.com/reverse/spamtitan) | 684 |

_Companies with a public trace of each tool in our scans. A company can run more than one._

The table adds each tool's share of the email security group and of every company we checked.

**Share = share of the 135,956 companies running any of these tools. Size = most common employee band. Starts and stops: last 90 days.**

| Tool | Companies | Share | Size | Top industry | Started | Stopped |
| --- | ---: | ---: | --- | --- | ---: | ---: |
| [Proofpoint](https://www.runsonwhat.com/reverse/proofpoint) | 50,615 | 37% | 11–50 | Financial Services | 964 | 1,078 |
| [Valimail](https://www.runsonwhat.com/reverse/valimail) | 34,178 | 25% | 11–50 | IT Services | 744 | 782 |
| [Mimecast](https://www.runsonwhat.com/reverse/mimecast) | 30,276 | 22% | 11–50 | Financial Services | 590 | 748 |
| [Barracuda](https://www.runsonwhat.com/reverse/barracuda) | 19,221 | 14% | 11–50 | Healthcare | 353 | 504 |
| [Cisco Secure Email](https://www.runsonwhat.com/reverse/cisco-email) | 4,805 | 3.5% | 201–1,000 | Financial Services | 107 | 150 |
| [Agari](https://www.runsonwhat.com/reverse/agari) | 2,552 | 1.9% | 11–50 | Financial Services | 74 | 65 |
| [SpamTitan](https://www.runsonwhat.com/reverse/spamtitan) | 684 | 0.5% | 11–50 | Healthcare | 37 | 31 |

For a business case, the framing is simple: dedicated email security is a deliberate purchase made by a specific slice of companies, not a default everyone has.

### Why does the adoption rate look so low?

The rate looks low because it only counts dedicated tools that leave a public trace. Many companies run their mail on [Microsoft 365](https://www.runsonwhat.com/reverse/microsoft-365) or Google Workspace and rely on the filtering built into those platforms, which leaves nothing separate for us to detect.

So treat every adoption rate on this page as a lower bound. What the numbers show reliably is where companies decided the default wasn't enough and added something on top, and that decision tracks closely with size, industry and country.

## Which email security tools are most popular?

Proofpoint is the most popular email security tool by the number of companies running it, followed by Valimail, Mimecast and Barracuda. Cisco Secure Email, Agari and SpamTitan are much smaller, but each has a distinct niche, from banks to small healthcare practices.

### Is Proofpoint the most popular email security tool?

Yes. Proofpoint is the most common email security tool in our data, found at 50,615 companies, more than any other tool we track. Its public records show up at [Zoom](https://www.runsonwhat.com/company/zoom.us), [Oracle](https://www.runsonwhat.com/company/oracle.com), [Booking.com](https://www.runsonwhat.com/company/booking.com) and [IBM](https://www.runsonwhat.com/company/ibm.com).

Proofpoint is built for large enterprises and security teams, and the data agrees: its companies are 4.5x as likely as the average company to have 10,000+ employees. Yet its single largest size band is 11–50 employees, at 46% of its companies with a known size, partly because that band is the largest group we check. Either way, the product clearly isn't reserved for companies with a security operations center.

### Why do so many companies run Valimail?

Valimail is the second most common tool, at 34,178 companies. It automates DMARC, DKIM and SPF so nobody can easily send email pretending to be your domain, a problem every company that sends email has, which may help explain its broad reach.

Its public records appear at [DigiCert](https://www.runsonwhat.com/company/digicert.com), [Vimeo](https://www.runsonwhat.com/company/vimeo.com), [Mozilla](https://www.runsonwhat.com/company/mozilla.org) and [Epic Games](https://www.runsonwhat.com/company/epicgames.com). The tool most often seen next to it isn't a security product at all: 20% of Valimail's companies also run [Wix](https://www.runsonwhat.com/reverse/wix). That overlap suggests part of Valimail's footprint sits on small company websites rather than enterprise mail systems.

### Who uses Mimecast, Barracuda and the smaller tools?

Mimecast is third, at 30,276 companies, with the sharpest industry skew of the big three: its companies are 6.7x as likely as average to be law firms, a fit for a platform that pitches compliance. Its records show up at [HP](https://www.runsonwhat.com/company/hp.com), [Statista](https://www.runsonwhat.com/company/statista.com) and [TechCrunch](https://www.runsonwhat.com/company/techcrunch.com).

Barracuda runs at 19,221 companies and is built for businesses and managed service providers. Healthcare is its top industry and it over-indexes on construction. [Zyxel](https://www.runsonwhat.com/company/zyxel.com) is among the companies whose records show it.

Cisco Secure Email over-indexes heavily on banking: its companies are 9.6x as likely as average to be banks. Its records appear at [Deloitte](https://www.runsonwhat.com/company/deloitte.com) and [Starbucks](https://www.runsonwhat.com/company/starbucks.com). Agari is small but reaches the largest organizations, appearing at [Apple](https://www.runsonwhat.com/company/apple.com) and [LinkedIn](https://www.runsonwhat.com/company/linkedin.com). SpamTitan is the most small-business oriented, with records at [Abbey Dental](https://www.runsonwhat.com/company/abbeydental.com) and [Anderson Electric Controls](https://www.runsonwhat.com/company/aecontrols.com).

## How does email security adoption change with company size?

Email security adoption rises steadily with company size once you pass the 11–50 band. Small businesses are the least likely to run a dedicated tool, companies with 1,001+ employees the most likely by a wide margin, and Proofpoint leads in every band.

### Do small businesses use email security software?

Small businesses are the least likely to run a dedicated email security tool. Among companies with 11–50 employees, 4.9% run one of the tools we track, and the smallest companies, with 1–10 employees, sit slightly higher at 5.3%.

That small bump isn't worth much weight, since 1–10 is the smallest group we can size. The real point is that most small companies likely rely on whatever their mail platform provides. For sellers, that's the largest pool without a visible tool; for buyers, the question is whether your risk (wire payments, client data, regulators) justifies going further.

### How common is email security in large enterprises?

Large enterprises are by far the most likely to run a dedicated email security tool: 19% of companies with 1,001+ employees do, compared with 12% in the 201–1,000 band. A plausible reading is that bigger companies have more inboxes to protect and security teams with budgets, though our scans record the tool, not the motive.

The chart shows adoption climbing at each step up in size after the 11–50 band.

**Email security adoption by company size**

|  | Any of these tools | Proofpoint |
| --- | ---: | ---: |
| 1–10 employees | 5.3% | 2.2% |
| 11–50 employees | 4.9% | 1.9% |
| 51–200 employees | 8.8% | 2.9% |
| 201–1,000 employees | 12% | 3.8% |
| 1,001+ employees | 19% | 8.7% |

_Share of companies of each size we checked that run any of these tools, and that run Proofpoint. Companies with a known size only._

The 51–200 band, at 8.8%, is where adoption first pulls clearly ahead of small business.

### Which email security tool leads at each company size?

Proofpoint leads in every size band, from 1–10 employees through 1,001+. Its grip is tightest at the top: 44% of companies with 1,001+ employees that run any of these tools run Proofpoint.

The mid-market is more open. In the 51–200 and 201–1,000 bands, Proofpoint's share drops to 33%, so other vendors hold a larger slice of those companies. Cisco Secure Email is the one tool whose most common band is 201–1,000. If you sell into mid-sized companies, expect more varied incumbents and more competitive evaluations.

## Which industries use email security tools the most?

Insurance, construction and financial services are the industries most likely to run a dedicated email security tool. Software, IT services and marketing sit at the bottom of the table, with adoption rates well below the leaders.

### Why are insurance companies the biggest email security adopters?

Insurance is the industry most likely to run a dedicated email security tool: 18% of insurers we checked run at least one. Several vendors lean into this segment, and Valimail's companies are 2.0x as likely as average to be insurers.

Mimecast skews even harder toward insurance, with companies 3.8x as likely as average to be in the industry. A plausible reason is that insurers handle personal data and claims payments, which raises the cost of a convincing phishing email, though our data can't confirm motive. If you buy for an insurer, a dedicated tool is close to the norm among your peers.

### How do construction, financial services and healthcare compare?

Construction ranks second, with 12% of construction companies running an email security tool. Two vendors over-index there: Barracuda's companies are 2.1x as likely as average to be in construction.

SpamTitan shows a similar skew, at 2.2x. One possibility is that firms paying many suppliers and subcontractors by email see extra value in filtering, but our scans can't confirm that.

Financial services comes third, and with 6,983 companies it has more adopters than any other industry in the table. Healthcare follows at 9.7%.

The table ranks ten industries by adoption rate; Proofpoint is the most used tool in all of them.

**Rate = share of the companies in each industry we checked that run any of these email security tools. Industries with 500+ companies checked.**

| Industry | Checked | Run one | Rate | Most used |
| --- | ---: | ---: | ---: | --- |
| Insurance | 25,495 | 4,531 | 18% | [Proofpoint](https://www.runsonwhat.com/reverse/proofpoint) |
| Construction | 26,527 | 3,233 | 12% | [Proofpoint](https://www.runsonwhat.com/reverse/proofpoint) |
| Financial Services | 63,343 | 6,983 | 11% | [Proofpoint](https://www.runsonwhat.com/reverse/proofpoint) |
| Healthcare | 64,734 | 6,279 | 9.7% | [Proofpoint](https://www.runsonwhat.com/reverse/proofpoint) |
| Real Estate | 69,763 | 4,268 | 6.1% | [Proofpoint](https://www.runsonwhat.com/reverse/proofpoint) |
| Retail | 78,261 | 3,637 | 4.6% | [Proofpoint](https://www.runsonwhat.com/reverse/proofpoint) |
| Software | 79,837 | 3,541 | 4.4% | [Proofpoint](https://www.runsonwhat.com/reverse/proofpoint) |
| Management Consulting | 55,611 | 2,311 | 4.2% | [Proofpoint](https://www.runsonwhat.com/reverse/proofpoint) |
| IT Services | 174,471 | 6,716 | 3.8% | [Proofpoint](https://www.runsonwhat.com/reverse/proofpoint) |
| Marketing and Advertising | 87,385 | 2,683 | 3.1% | [Proofpoint](https://www.runsonwhat.com/reverse/proofpoint) |

### Why do tech and marketing companies rank so low?

Software, IT services and marketing companies are among the least likely to run a dedicated email security tool. IT services sits at 3.8% and marketing and advertising at 3.1%, the lowest in our table.

One likely reason is that many of these companies stick with the filtering built into Google Workspace or Microsoft 365, which leaves no trace we count. Low rates don't mean they're unprotected; they mean protection, where it exists, isn't a separate tool we can see.

## How does email security adoption vary by country?

English-speaking markets lead email security adoption in our data. The United States, the United Kingdom, Australia and South Africa all show high rates, while Germany, France and the Netherlands sit far lower.

### Which countries have the highest email security adoption?

The United States has the highest adoption rate of the countries we break out: 14% of American companies we checked run at least one of these tools, or 63,788 companies. It's also the largest group by far, so US buying habits shape the category.

The United Kingdom is close behind at 13%. South Africa stands out among smaller markets at 13%, and it's one of Mimecast's top countries, which suggests a strong local presence for that vendor. Canada sits a step lower.

**Rate = share of the companies based in each country we checked that run any of these email security tools.**

| Country | Checked | Run one | Rate |
| --- | ---: | ---: | ---: |
| United States | 467,001 | 63,788 | 14% |
| United Kingdom | 98,141 | 13,017 | 13% |
| Australia | 41,160 | 5,245 | 13% |
| Canada | 48,597 | 4,811 | 9.9% |
| Germany | 65,662 | 3,095 | 4.7% |
| Netherlands | 37,315 | 2,269 | 6.1% |
| South Africa | 14,326 | 1,859 | 13% |
| France | 39,307 | 1,596 | 4.1% |

### Why is email security adoption lower in Germany and France?

Germany and France show much lower adoption of these seven tools: 4.7% of German companies and 4.1% of French companies run one.

Part of the gap is likely coverage. Our seven tools don't include regional European providers, so a German company using a local filtering service shows up as having none of these tools. For vendors, the low rates mix opportunity with local competition, and our data can't separate the two.

## What email security do the biggest websites and startups use?

The highest-traffic websites are far more likely than average to run a dedicated email security tool, and Proofpoint leads among them. Y Combinator startups are much less likely to, and when they do, Valimail is their most common choice.

### How many of the highest-traffic websites run email security tools?

The biggest websites are heavy users: 14% of the highest-traffic sites we track run at least one of these tools. A plausible reason is that popular domains are attractive targets for spoofing, and many belong to large companies, which already adopt at higher rates.

Proofpoint leads this group, running on 6.8% of these sites. Agari, small overall, has outsized reach here, with companies like Apple and LinkedIn among its users. If you benchmark a well-known brand, compare against these sites, not the overall average.

### What do Y Combinator startups use for email security?

Y Combinator startups rarely run a dedicated email security tool: 4.1% of the YC companies we checked do. When they do, Valimail is the most common choice, at 2.3% of YC startups.

One plausible reading: startups send a lot of product email (onboarding, receipts, outreach) and care about deliverability, and an authentication tool addresses domain spoofing without a full filtering gateway.

**Share of each group we checked that runs each tool. Highest-traffic websites = top 10,000 by traffic rank.**

| Tool | Highest-traffic sites | Y Combinator startups | All companies |
| --- | ---: | ---: | ---: |
| [Proofpoint](https://www.runsonwhat.com/reverse/proofpoint) | 6.8% | 1.2% | 2.7% |
| [Valimail](https://www.runsonwhat.com/reverse/valimail) | 4.7% | 2.3% | 1.8% |
| [Mimecast](https://www.runsonwhat.com/reverse/mimecast) | 1.7% | 0.5% | 1.6% |
| [Barracuda](https://www.runsonwhat.com/reverse/barracuda) | 0.2% | under 0.1% | 1.0% |
| [Cisco Secure Email](https://www.runsonwhat.com/reverse/cisco-email) | 0.8% | under 0.1% | 0.3% |
| [Agari](https://www.runsonwhat.com/reverse/agari) | 1.6% | 0.1% | 0.1% |
| [SpamTitan](https://www.runsonwhat.com/reverse/spamtitan) | under 0.1% | 0% | under 0.1% |

## Is email security adoption growing?

Not in our latest window. Over the last 90 days, stops outnumbered starts across these tools, so the group shrank slightly. Only Agari and SpamTitan gained ground.

### Are more companies starting or stopping email security tools?

Stops outnumbered starts. We recorded 2,869 starts across these tools in the window, against 3,358 stops.

Both sides of the ledger are large: thousands of start and stop events in the last 90 days, so this is a market with steady movement, not a frozen one. One company can produce both a start and a stop, for example when it switches vendors.

**Companies that started each tool in the last 90 days**

|  | Companies |
| --- | ---: |
| [Agari](https://www.runsonwhat.com/reverse/agari) | 74 |
| [SpamTitan](https://www.runsonwhat.com/reverse/spamtitan) | 37 |
| [Valimail](https://www.runsonwhat.com/reverse/valimail) | 744 |
| [Cisco Secure Email](https://www.runsonwhat.com/reverse/cisco-email) | 107 |
| [Proofpoint](https://www.runsonwhat.com/reverse/proofpoint) | 964 |
| [Barracuda](https://www.runsonwhat.com/reverse/barracuda) | 353 |
| [Mimecast](https://www.runsonwhat.com/reverse/mimecast) | 590 |

_A start is a tool found on a company's latest scan that its previous scan, done the same way, didn't find._

A stop isn't always a loss to the category. It can mean a switch to another vendor, a move to built-in protection, or a retired domain. Our data records the change, not the reason.

### Which email security tools are gaining companies?

Agari and SpamTitan are the only tools with a net gain in the last 90 days. Agari added a net +9 companies and SpamTitan a net +6.

Those are small numbers on small bases, a direction rather than a surge. They also come from opposite ends of the market: Agari skews toward the largest enterprises, SpamTitan toward small businesses and the managed service providers that serve them.

### Which email security tools are losing companies?

Mimecast lost the most, with a net change of -158, followed closely by Barracuda at -151. Both lost more than Proofpoint despite being smaller.

Proofpoint's net change of -114 hides a lot of motion: it also picked up more new companies than any other tool. Cisco Secure Email and Valimail ended slightly down too. For sellers, a company leaving one tool is often evaluating another.

## Do companies run more than one email security tool?

Most companies run just one. Stacking is uncommon in our data, and the clearest pairing we can see is Agari with Cisco Secure Email.

### How many companies run two or more email security tools?

6,267 companies run two or more of these tools at once, a small minority of the group. For most organizations, one dedicated tool is the ceiling.

One pairing we can see is Agari with Cisco Secure Email: 7.5% of Agari's companies also run Cisco's gateway. One tool filters what comes in, the other helps prove that outgoing mail really came from you, so if you already run a gateway, an authentication product is complementary rather than redundant.

### What other software do email security buyers run?

Email security buyers often run enterprise infrastructure and collaboration software. 8.3% of Proofpoint's companies also run [Akamai](https://www.runsonwhat.com/reverse/akamai), and Mimecast's companies lean on [DocuSign](https://www.runsonwhat.com/reverse/docusign), at 9.4%.

[KnowBe4](https://www.runsonwhat.com/reverse/knowbe4), the security awareness training product, is often seen alongside both Mimecast and Barracuda. 16% of Cisco Secure Email's companies run [Webex](https://www.runsonwhat.com/reverse/webex), which hints at buyers standardizing on Cisco. SpamTitan's most common companion is [Exclaimer](https://www.runsonwhat.com/reverse/exclaimer), the email signature tool, at 8.2% of its companies.

## What should you take from this if you're choosing or selling email security?

The data gives buyers a peer benchmark and gives sellers a map of where adoption is thin, where incumbents are losing companies and where switching is already happening.

### How should buyers use these statistics?

Buyers should first decide which problem they're solving. If attackers spoof your domain or your mail lands in spam, an authentication tool like Valimail or Agari is the targeted fix. If phishing and malware reach employees, you want filtering from a gateway or a broader platform like Proofpoint, Mimecast or Barracuda.

Then benchmark against your real peers. A small construction firm and a large bank face different expectations: the construction firm is already in a high-adoption industry, and the bank sits where Cisco Secure Email and Agari over-index. You can check what specific competitors or partners run with our [lookup tool](https://www.runsonwhat.com/lookup). And because tools come and go often in our scans, a vendor is not a lifetime commitment.

### Where are the openings for vendors and sellers?

The clearest opening is the mid-market. Companies with 51–200 employees adopt well above small businesses, yet Proofpoint's share there is at its lowest, so evaluations are more open.

Second, follow the stops: Mimecast and Barracuda lost the most companies in the last 90 days, and each stop may be a company shopping. Third, high-adoption industries (insurance, construction, financial services) are where peers validate the purchase, while low-adoption industries like marketing need a different argument, usually about deliverability and domain spoofing.

## What does an email security detection look like?

Every match on runsonwhat comes with the record that produced it. Here's an example of the evidence behind an email security detection.

```
mx0a-00190b01.pphosted.com
```

A MX record we found for one company (name replaced with "example"). Records like this, in public DNS, are how a company shows up as running Proofpoint.

A record like this, typically a mail exchanger record routing a domain's mail through the vendor or an authentication record referencing it, proves the company has configured its email to rely on that tool. It doesn't tell us which product tier the company bought, how many mailboxes are covered, or whether it's the company's only layer of protection.

## How we counted

We checked the public records of 1,860,569 companies: DNS records (including mail and authentication records), certificate logs and website code. A company counts as running a tool when one of those records points directly at the vendor. These numbers were queried on November 10, 2026.

A start means a tool appeared in a company's records that wasn't there in its previous scan done the same way; a stop means it disappeared. A company's first scan is a baseline and never counts as a start. Starts and stops cover the last 90 days.

This page uses only our own scans and cites no third-party surveys, market-size estimates or incident data. Our counts are companies with a public trace of a tool, not market share or paying customers, and a company can run several tools. Adoption rates are lower bounds, because companies using built-in Microsoft 365 or Google filtering, or providers outside these seven, leave no trace we count. Size, industry and country are known for only part of the companies, so those rates are among companies where we know them.

Read more about our [research method](https://www.runsonwhat.com/about#research) and our [crawler](https://www.runsonwhat.com/bot). If you cite these figures, please link this page and include the date the data was queried.

## Frequently asked questions

### What are the latest email security statistics?

As of November 10, 2026, 7.3% of the companies runsonwhat checked run at least one dedicated email security tool. Proofpoint is the most common, ahead of Valimail and Mimecast. Adoption is far higher at companies with 1,001+ employees and in insurance. In the latest window, stops slightly outnumbered starts, with Agari and SpamTitan the only tools posting a net gain.

### Which email security tool do large enterprises use most?

Proofpoint is the most used email security tool among large companies. In our scans, 44% of companies with 1,001+ employees that run a dedicated email security tool run Proofpoint. Its companies are also far more likely than average to sit in the 10,000+ employee band, and its public records appear at Oracle, IBM and Zoom.

### How many companies use DMARC tools like Valimail and Agari?

Valimail is the most widely used DMARC automation tool we track, found at 34,178 companies, while Agari appears at 2,552. Both focus on email authentication to stop domain spoofing. Agari skews heavily toward very large organizations such as Apple and LinkedIn, while Valimail is common across all company sizes, including Y Combinator startups.

### What is the difference between Proofpoint and Mimecast?

Proofpoint and Mimecast both protect email, but they emphasize different add-ons. Proofpoint pairs email protection with data loss prevention and AI security and is built for large enterprises. Mimecast covers email and collaboration security with a focus on human risk, data protection and compliance. In our data, Mimecast's companies are far more likely than average to be law firms and insurers.

### Do companies use Microsoft 365 and a separate email security tool together?

Yes, many companies layer a dedicated email security tool on top of Microsoft 365. In our data, Microsoft 365 is among the tools most often seen alongside Barracuda and SpamTitan, two vendors that serve businesses and managed service providers. The dedicated tool adds filtering or authentication beyond what the mail platform provides by default.