Fazlur Rahman
Quick Answer
Mimecast pricing in 2026 is quote-based with three primary capability tiers. S1 Essentials runs $18 to $28 list per user per year ($12 to $20 enterprise benchmark), S2 Advanced runs $28 to $42 ($18 to $28 benchmark), S3 Comprehensive runs $42 to $55 ($26 to $38 benchmark). Email archiving adds $8 to $18 per user per year base plus storage overage. Median contract $30,242 per year per Vendr (Mimecast + Vendr, 2026).
Mimecast operates as a private company since Permira's 2022 acquisition, which means published rate cards do not exist. Every deal is direct quote negotiation.
Last verified: Sep 15, 2026.
At a glance
- S1 Essentials $18 to $28 list / $12 to $20 benchmark per user/year
- S2 Advanced $28 to $42 list / $18 to $28 benchmark per user/year
- S3 Comprehensive $42 to $55 list / $26 to $38 benchmark per user/year
- Email Archiving $8 to $18 base + $0.12 to $0.25 per GB/mo overage
- Awareness Training $14 to $22 per seat per year standalone
- Median contract $30,242 per year per Vendr
Mimecast bundles and what each unlocks
Mimecast structures its email security offerings around three capability tiers rather than Starter/Professional/Enterprise naming. The financial decision sits in bundle choice, because each tier crosses a capability boundary rather than incrementally adding features. S1 is the entry gateway with URL/attachment scanning and impersonation protection. S2 adds targeted threat protection, URL rewriting, sandboxing, internal email protection, and DMARC authentication. S3 includes email archiving, e-discovery, business continuity, DLP, and advanced reporting (vendorbenchmark.com, 2026).
| Bundle | List per user per year | Enterprise benchmark | Achievable discount |
|---|---|---|---|
| S1 Email Security Essentials | $18 to $28 | $12 to $20 | 28 to 36 percent |
| S2 Advanced Email Security | $28 to $42 | $18 to $28 | 30 to 38 percent |
| S3 Comprehensive Email Security | $42 to $55 | $26 to $38 | 30 to 40 percent |
| Email Archiving (base) | $8 to $18 | $5 to $12 | 30 to 40 percent |
| Archiving storage overage per GB/mo | $0.12 to $0.25 | $0.08 to $0.18 | 25 to 35 percent |
| Awareness Training standalone per seat/yr | $14 to $22 | $9 to $16 | 28 to 38 percent |
The jump from S1 to S2 adds approximately $10 to $14 per user per year at list, primarily for impersonation protection and internal email inspection. The jump from S2 to S3 adds another $12 to $15 for DMARC Analyzer, Awareness Training, and Incident Response hours. For organizations that will deploy all three capability sets, S3 is economically favorable versus buying them separately (vendorbenchmark.com, 2025).
Volume discounts and per-user economics at scale
Per-user cost drops sharply with user count, but the curve is not linear. The table below shows typical per-user monthly cost at different volume tiers (checkthat.ai, March 2026).
| User count | Typical per user per month | Effective per user per year |
|---|---|---|
| 25 to 99 users | $4.50 to $5.50 | $54 to $66 |
| 100 to 499 users | $3.50 to $4.00 | $42 to $48 |
| 500 to 999 users | $3.00 to $3.50 | $36 to $42 |
| 1,000+ users (negotiated) | $2.50 to $3.25 | $30 to $39 |
A 500-user organization might pay $3.00 per user per month while the same deployment at 100 users costs $4.00 or more, a 33 percent per-user premium driven purely by volume. The realistic mid-market planning line for S2 Advanced sits at $36 to $42 per user per year, while enterprise deployments at 1,000+ users with full bundle procurement reach $30 to $39 per user per year at negotiated rates (checkthat.ai, March 2026).
Hidden costs and renewal uplift risks
Mimecast annual increases range from 5 to 10 percent routine to 15 to 25 percent common. Rare cases exceed 200 percent during model restructuring, which is why contract negotiation must include explicit price escalation caps. The standard clause is to limit annual escalation to CPI plus a maximum 3 percent rather than a fixed percentage. Multi-year contracts commonly lock pricing flat across the term but trade that stability for reduced flexibility if the market shifts (Vendr, 2026).
Other predictable line items include professional services for implementation (typically 15 to 25 percent of software spend), storage overage for organizations with long retention requirements or large email volumes, and premium support upgrades. Year 1 total cost typically runs 2.5 to 3.2 times the base subscription when implementation, training, and support upgrades are included. Buyers should negotiate explicit price escalation caps into multi-year contracts to avoid the renewal cycle penalty (checkthat.ai, March 2026).
How Mimecast compares to Proofpoint and Microsoft Defender
Mimecast competes head-to-head with Proofpoint on capability, and against Microsoft Defender for Office 365 on price. Per-user annual costs for base security bundles tend to be slightly higher than Proofpoint on a list-price comparison but lower than Proofpoint when bundled modules are included. Versus Microsoft Defender for Office 365 P2 (bundled in M365 E5 at zero incremental cost), Mimecast wins on capability depth (impersonation defense, internal email protection, advanced DLP) but loses on the standalone cost line for Microsoft shops (Vendr, 2026).
API-based deployment (Mimecast) typically delivers lower implementation cost versus gateway-based deployment (Proofpoint). For organizations already standardized on Microsoft 365, the Mimecast bundle economics depend heavily on whether M365 E5 is in place. For mid-market and enterprise organizations on custom stacks, Mimecast and Proofpoint both deliver comparable capability at comparable per-user pricing after negotiation. The competitive evaluation typically drives 20 to 30 percent off initial quotes for both vendors (Vendr, 2026).
