|
|||
|
EmailSpoofTest.com Email Security Report (in progress) updated: 1/21/2021 |
|
|
|
|
Independent, not a pay for play solutions survey.
Findings below are "their words", and not a reflection of emailspooftest.com views.
Study performed with public data and vendor participation where noted.
Participants performed a emonstrationn of features surveyed.
Get special discounts on all below products: discount@emailspooftest.com
All vendors have been invited to take part in this survey.
Submit additions & corrections to report@emailspooftest.com
FSA = Full Support Advanced | FS = Full Support | PR = Partial Support +Roadmap | P = Partial Support | R = Roadmap | U = Unsupported
☆ = survey participant
Findings below are "their words", and not a reflection of emailspooftest.com views.
Study performed with public data and vendor participation where noted.
Participants performed a emonstrationn of features surveyed.
Get special discounts on all below products: discount@emailspooftest.com
All vendors have been invited to take part in this survey.
Submit additions & corrections to report@emailspooftest.com
FSA = Full Support Advanced | FS = Full Support | PR = Partial Support +Roadmap | P = Partial Support | R = Roadmap | U = Unsupported
☆ = survey participant
| Email Security | Payload Protection | Advanced Features | Innovation | Solution | ||||||||||
| Requirements & Definitions | Connection Security Enforcement, Inbound; DMARC, SPF, DKIM, Cloud Fraud Analysis | Inbound anti-Fraud; Reverse lookup, Fake domain, Lookalikes, Domain Authentication | Anti-malware | In-Message User Alerting | Link Rewrite | Secure Email Delivery (encryption) | DLP | User Awareness Training/ Phish Simulation | ATO Detection & Lockdown | User Behavior | AI/ ML NLP Blockchain | Architecture | Differentiators | Price |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
 ☆ updated: 1/21/21 |
FSA | FSA | FS | FS | PS | R H2 21 | FS | PS | FS | FS | Cloud SaaS API | |||
 ☆ updated: 1/12/21 |
FS | FS | FS | FS | FS | R Q2 21 | PS | PS | FS | FS | Cloud SaaS API | +Confusable
and 0 font text detection +Text direction deception +Fake attachments +ATO prevention +Stylometry +Computervision |
Pricing is per user and dependent on seat count—Enterprise pricing available | |
 ☆ updated: 1/8/21 |
FSA | FSA | FS | FS | FS | FS | FS | PS | FSA | FS | FS | Cloud SaaS API | +Fact-based
policy engine +ML/ AI and community threat intelligence to identify areas of risk +Layered controls - users to identify and mitigate risks +Prevent ATO using keystroke biometrics +Can mix Google Workspace and Office365 in the same dashboard MSP support |
Enterprise pricing available |
☆ updated: 12/24/20 |
FSA | FSA | FS | FS | FS | FS | FSA | PS | FSA | FS | FS | Cloud API SaaS | +Search &
Destroy +IR services +No MX Change +Advanced Workflows +VIP User Discovery |
$8/user/month avanan.com/pricing |
 ☆ updated: 12/16/20 |
FS | FS | PS | PS | Cloud API SaaS | |||||||||
☆ updated: 12/15/20 |
FSA | FSA | FS | FS | PS | FS | FS | Cloud API SaaS,
Hosted Gateway IaaS, On-Prem gateway |
+Lightning
fast scanning speed +Full (100%) dynamic scanning +Scale agnostic +Deterministic approach +Scans Pre Delivery +Cross Platform Threat Prevention +Assisted Mitigation & Incident Response |
$6/user/month Enterprise pricing is based on a dynamic pricing model |
||||
☆ updated: 12/10/20 |
FSA | FSA | FS | FS | FS | FS | PS | PS | FS | FS | Hosted
Gateway IaaS, Managed, On-prem |
+Whaling Protection +True SEG +Detailed Threat Remediation +URL Sandbox +Adaptive Trust Engine +Esvalabs |
Flexible pricing monthly/ yearly | |
☆ updated: 12/9/20 |
PS | PS | FS | FS | FS | FS | Q1 2021 | FS | FS | Cloud API SaaS | +Advanced
Malware/URL protection +BEC Protection +Credential Theft Protection (Computer Vision) +AI Incident Response +Collaborative Threat Hunting +Virtual security Analyst +Simulation and Training |
$7/user/month ironscales.com/pricing/ |
||
| Microsoft 365 ATP, EOP | FS | PS | FS | FS | FS | FS | FS | Cloud API SaaS,
Hosted Gateway IaaS, Hybrid, On-prem |
Cloud: $20/user/month | |||||
| Cisco Cloud Inbox | FS | FS | FS | FS | FS | FS | FS | Cloud API SaaS,
Hosted Gateway IaaS, Hybrid, On-prem |
||||||
| Agari | PS | PS | FS | FS | FS | Cloud API SaaS,
Hosted Gateway IaaS |
||||||||
| Proofpoint Essentials | PS | PS | FS | FS | FS | FS | FS | FS | FS | Cloud API SaaS,
Hosted Gateway IaaS |
||||
| Valimail | PS | PS | Cloud API SaaS | |||||||||||
| Cofense | PS | PS | FS | Cloud API SaaS, Managed | ||||||||||
| Forcepoint Email Security | PS | PS | FS | FS | FS | FS | PS | PS | Hosted gateway IaaS, Hybrid, On-prem | |||||
| Mimecast | FS | FS | FS | FS | FS | FS | FS | FS | FS | Cloud SaaS, Hosted Gateway IaaS |
||||
| Trend Micro | FS | FS | FS | FS | FS | FS | FS | FS | FS | FS | Cloud SaaS,
Hosted Gateway IaaS, hybrid, On-prem |
|||
| Sophos | FS | FS | FS | FS | FS | FS | FS | Cloud API SaaS | ||||||
| Vade Secure | PS | PS | FS | FS | FS | FS | Cloud API SaaS | |||||||
| Clearswift | FS | FS | FS | FS | FS | FS | FS | FS | Cloud API
SaaS, Hosted Gateway IaaS |
**Data redaction, Secure email delivery, OCR | ||||
| Fortinet | FS | FS | FS | FS | FS | FS | FS | FS | Cloud Saas,
Hosted Gateway IaaS |
|||||
| SolarWinds | PS | PS | FS | FS | FS | Hosted Gateway IaaS | Heavy focus on MSP delivery, Email archive & storage | |||||||
| Comodo | FS | FS | FS | FS | FS | FS | FS | Hosted Gateway IaaS | MSP, SEG-aaS, Archive & backup | |||||
| Broadcom/ Symantec email security.cloud | FS | FS | FS | FS | FS | FS | FS | FS | FS | FS | Cloud API SaaS, Hosted Gateway IaaS, On-prem gateway | |||
| Barracuda | FS | FS | FS | FS | FS | FS | FS | FS | FS | FS | Cloud API
SaaS,
Hosted Gateway
IaaS, On-prem gateway |
|||
| G Suite Google Workspace | FS | PS | FS | FS | FS | FS | Cloud API SaaS, Hosted Gateway IaaS |
Cloud: $18/user/ month | ||||||
|
Hornet Security |
PS | PS | FS | FS | FS | FS | $5/user/month | |||||||
| Sonic Wall | FS | FS | FS | FS | FS | FS | FS | Cloud API SaaS,
Hosted Gateway IaaS, On-prem |
||||||
| Area 1 security | FS | FS | FS | FS | Cloud SaaS API | |||||||||
| Fireeye Email Security Cloud | FS | PS | FS | FS | FS | Cloud SaaS API, Hosted Gateway IaaS | ||||||||
| Vircom | FS | FS | FS | FS | FS | FS | Cloud API SaaS, On-Prem |
|||||||
| SendGrid | PS | PS | PS | FS | FS | FS | API | |||||||
| Cyren | FS | FS | FS | FS | FS | Cloud SaaS API, Hosted Gateway IaaS | ||||||||
| Totemo | FS | FS | FS | FS | On-prem or Cloud or Hybrid | |||||||||
| Retarus | FS | PS | FS | FS | FS | Cloud based (MX) | ||||||||
| CensorNet | FS | PS | FS | FS | PS | FS | Cloud based (MX) | |||||||
| Cellopoint | FS | FS | FS | FS | FS | Hosted Gateway
IaaS, On-prem |
||||||||
| Spam Titan | PS | FS | On-prem or cloud gateway | |||||||||||
| Red Sift Oninbox | FS | PS | FS | ML | Cloud API SaaS | |||||||||
| Abnormal Security | FS | NLP | Cloud API SaaS | |||||||||||
| ArmorBlox | FS | FS | FS | FS | Cloud API SaaS | |||||||||
| Appriver | FS | FS | FS | FS | Cloud API SaaS,
Hosted Gateway IaaS |
|||||||||
| Feature requirements & definitions | |||||||||
|
Connection security enforcement, Inbound; DMARC, SPF, DKIM,
Fraud Analysis Full Support: Connection security enforcement for DMARC, SPF, DKIM performed at the time-of-delivery by an email gateway. These gateways can be virtual (SaaS), hosted (IaaS), and on-prem. If a non-gateway solution enforces DMARC, SPF, and DKIM before delivery, it may also be considered "full support". Full Support Advanced: Provides the features of full support +AI/ML to enhance DMARC, SPF, and DKIM protections reputationally or behaviorally. Partial Support: DMARC, SPF, DKIM, fraud analysis validation is performed after delivery rather than connection-level enforcement.. Answers the question: Does the vendor provide email gateway level security? Concerns: Email connection security is very important for stopping spoofing and fraud. Many vendors claim to provide enforcement level of email fraud protectiony but actually leverage a scoring system which should be looked at closely. Each vendor will have high claims but widely ranging efficacy. |
|||||||||
|
Inbound anti-Fraud; reverse lookup, fake domain, lookalikes, domain
authentication
Full Support: Connection security enforcement for DMARC, SPF, DKIM performed at the time-of-delivery by an email gateway. These gateways can be virtual (SaaS), hosted (IaaS), and on-prem. If a non-gateway solution enforces DMARC, SPF, and DKIM before delivery, it may also be considered "full support". Full Support Advanced: Provides the features of full support +AI/ML to enhance reverse lookup, fake domain, lookalikes, domain authentication protections reputationally or behaviorally. Partial Support: Reverse lookup, fake domain, lookalikes, domain authentication, fraud analysis validation is applied after delivery to a scoring system rather than enforcement at time of delivery connection-level enforcement.. Answers the question: Does the vendor provide email gateway level security? Concerns: Email connection security is very important for stopping spoofing and fraud. Many vendors claim to provide enforcement level of email fraud protectiony but actually leverage a scoring system which should be looked at closely. Each vendor will have high claims but widely ranging efficacy. |
|||||||||
|
Anti-malware Full Support: This product claims it can stop inbound virus and malware email threats in the body or attachment. |
|||||||||
|
In Message User Alerting Full Support: This product alerts users to suspicious emails in the body of the message. |
|||||||||
|
Link rewrite Full Support: Intercepts and re-writes any links in email and performs time of click analysis of the link destination. Partial Support: Intercepts and rewrites some (not all) email links OR scans email links when the email is received but not when clicked. |
|||||||||
|
Secure Email delivery (encryption) Full Support: Provides secure email delivery; by storing the email in cloud infrastructure for secure email retrieval leveraging PKI. The ability to see if the email was accessed as well as the ability to revoke email access is required for full support. |
|||||||||
|
DLP Full Support: API based mailbox scanning providing real time DLP (Data Loss Prevention) controls as well as historical DLP reports that will help prevent data build-up (helps with ATO risk management) Full Support Advanced: +OCR, +AI/ML for policies and detection Partial Support: leverages regex to scan email as accessed |
|||||||||
|
User Awareness Training/ Phish simulation Full Support: ability to run phish simulations, ability to provide pre-packaged end user email security training Partial Support: No phish simulation but provides an end user notifications by re-writing links in spam, when the user clicks a link they are redirected to training |
|||||||||
|
ATO Detection & Lockdown Full Support: Detects and prevents ATO (Account Take Over) by limiting mass downloads or by leveraging user behavior for ATO detection. Full Support Advanced: Has native AI/ML, MFA, and advanced DLP capabilities working together to prevent ATO Partial support: can detect but not prevent ATO, only notifies |
|||||||||
|
User Behavior Full support: Vendor leverages user behavioral analysis and is able to detect anomalies in its email security feature-set |
|||||||||
|
AI/ ML NLP blockchain Full support: Vendor leverages AI/ ML, NLP, and or blockchain analysis and is able to detect anomalies in its email security feature-set |
|||||||||
|
Architecture Cloud API SaaS: Email security as a service that bolts onto your existing email solution via API integration. this architecture usually carries advanced capabilities that leverage cloud based AI/ML, and behavioral analysis Hosted Gateway IaaS: Email security gateway hosted as a service in the cloud On-Prem Gateway: Email security gateway installed on-premise in your org. Hybrid: a mix of cloud and on-prem architectures that work together Managed: The vendor provides complete management, has SLA's |
|||||||||
|
To
submit changes or add a product review use the form below or send us an email: report@emailspooftest.com
|
|
EmailSpoofTest.com is owned and operated by
IGNITE Cyber 2020