Company Intelligence

Mimecast

A pioneer of cloud-based email security, now privately owned by Permira, that has spent the years since its 2022 take-private acquisition rebuilding itself into a broader human, data, and AI risk platform.

In this profile

Quick Facts

  • Founded 2003
  • Country United Kingdom
  • Industry AI in Cybersecurity
  • Founders Peter Bauer, Neil Murray
  • Status Acquired
  • Website Official site
  • Last Reviewed Jul 2026

Executive Summary

Mimecast was founded in 2003 in London by Peter Bauer, who became chief executive, and Neil Murray, who became chief technology officer, with a goal Bauer later described as wanting to build a company they could feel 'fiercely proud' to work at while radically improving how email security, data, and resilience were managed. The company pioneered a cloud-based approach to email management at a time when most email security still ran on on-premises appliances, initially serving organizations running Microsoft Exchange and later expanding to Google Workspace and Microsoft 365. That cloud-first approach helped Mimecast grow into a company serving tens of thousands of organizations before its ownership structure changed dramatically in 2022.

Why It Matters

Mimecast's trajectory — a two-decade-old email security specialist taken private by a PE firm, then expanded through a string of acquisitions into insider-risk, data-loss, and AI-compliance tooling, and now handing its CEO role to an internal product executive — is a clear example of the private-equity platform playbook increasingly shaping enterprise email and human-risk security, the same pattern seen at rival Proofpoint under Thoma Bravo.

Products

Founders

Recent Developments

  1. Company status

    Documented status on Brel profile: Acquired.

    Source
  2. 2026 Product

    June 25, 2026: Mimecast promotes Ranjan Singh, its chief product and technology officer, to chief executive, succeeding Marc van Zadelhoff, who moves to a board advisory role.

    Source
  3. 2024 Acquisition

    August 2024: Mimecast acquires Aware, adding AI compliance monitoring for sanctioned and unsanctioned AI tool usage.

    Source
  4. 2024 Acquisition

    July 2024: Mimecast acquires Code42, adding insider risk and data-loss detection.

    Source
  5. 2024 Acquisition

    January 2024: Mimecast acquires Elevate Security, adding human risk management capabilities.

    Source
  6. 2022 Acquisition

    May 19, 2022: Permira completes its acquisition of Mimecast for approximately $5.8 billion, or $80.00 per share in cash, taking the company private.

    Source
  7. 2003 Development

    2003: Peter Bauer and Neil Murray found Mimecast in London to build cloud-based email management and security for what would become Microsoft Exchange and, later, Google Workspace and Microsoft 365 environments.

    Source
  8. 2003 Company founded

    Mimecast was founded in 2003 per the company profile source on file.

    Source

Connected Reports

Connected Insights

Industries

Technologies

Introduction

Mimecast was founded in 2003 in London by Peter Bauer, who became chief executive, and Neil Murray, who became chief technology officer, with a goal Bauer later described as wanting to build a company they could feel ‘fiercely proud’ to work at while radically improving how email security, data, and resilience were managed. The company pioneered a cloud-based approach to email management at a time when most email security still ran on on-premises appliances, initially serving organizations running Microsoft Exchange and later expanding to Google Workspace and Microsoft 365. That cloud-first approach helped Mimecast grow into a company serving tens of thousands of organizations before its ownership structure changed dramatically in 2022.

What the company does

Mimecast’s platform now spans email and collaboration security, insider risk management, data compliance, and security awareness training, built outward from its original core: protecting the email systems that remain one of the most common initial access points for cyberattacks. Rather than a single point product, Mimecast today describes itself as a unified human, data, and AI risk platform, reflecting a series of acquisitions that added capabilities well beyond scanning inbound and outbound email for malicious content.

Who it serves

Mimecast reports serving more than 42,000 organizations and 27 million users worldwide, spanning organizations of varying sizes that need email security integrated with Microsoft 365 or Google Workspace, alongside insider-risk and AI-usage-compliance capabilities layered on through its recent acquisitions. Its customer base includes some of the largest and most security-sensitive organizations globally, according to the company’s own public statements at the time of its 2022 take-private transaction.

Company background

Permira, a global private equity firm, completed its acquisition of Mimecast on May 19, 2022, for approximately $5.8 billion, or $80.00 per share in cash, taking the company private after 19 years as an independent, and later publicly traded, business. Marc van Zadelhoff subsequently led Mimecast as CEO through much of the Permira ownership period, before the company announced on June 25, 2026 that Ranjan Singh — who had joined Mimecast in April 2025 as chief product and technology officer after roughly three years as chief product officer at IT management firm Kaseya — would be promoted to chief executive, with van Zadelhoff moving to a board advisory role. Mimecast’s board is chaired by Michail Zekkos, a senior technology partner at Permira, underscoring how directly the private equity owner remains involved in the company’s strategic direction.

Product and AI capabilities

Mimecast’s platform expansion since 2022 has been driven almost entirely by acquisition rather than solely internal development: Elevate Security (acquired January 2024) added human risk management, scoring individual employees’ susceptibility to social engineering; Code42 (acquired July 2024) added insider risk and data-loss detection, tracking how sensitive data moves across an organization’s endpoints and cloud applications; and Aware (acquired August 2024) added AI compliance monitoring, helping organizations track and govern employee use of sanctioned and unsanctioned AI tools. Collectively, these acquisitions have shifted Mimecast’s core AI-relevant value proposition from filtering malicious email content toward giving organizations visibility into human behavior and AI tool usage as risk factors in their own right.

Key developments

Mimecast’s 2022 take-private transaction under Permira set the stage for the acquisition-driven platform expansion that followed in 2024, adding insider-risk, human-risk, and AI-compliance capabilities in quick succession. The June 2026 promotion of Ranjan Singh to chief executive — an internal pick from within Mimecast’s product and technology organization, rather than an external hire — signals continuity in the platform-led growth strategy set under van Zadelhoff, with Permira’s board chair Michail Zekkos confirming the move. Singh’s own background, having joined Mimecast in April 2025 after roughly three years as chief product officer at IT management vendor Kaseya, gives him direct prior experience running product organizations inside a similarly acquisition-driven, private-equity-owned software company.

Why it matters

Mimecast’s path from independent, cloud-pioneering email security vendor to Permira-owned platform company mirrors a broader pattern in enterprise email security, most directly comparable to rival Proofpoint’s 2021 take-private acquisition by Thoma Bravo: private equity ownership increasingly functions as the mechanism through which mature email security vendors fund acquisition-led expansion into adjacent human- and AI-risk categories, rather than pursuing that expansion as independent, venture-backed, or public companies. For readers tracking how email security is evolving into a broader human-risk discipline, Mimecast’s acquisition history is one of the clearer maps of which adjacent capabilities buyers are actually being asked to consolidate under one vendor, and its June 2026 leadership transition is an early test of whether that acquisition-led platform strategy continues under new, internally promoted leadership.

Sector context

Within Brel’s cybersecurity coverage, Mimecast represents the email and human-risk security category, distinct from network, endpoint, and cloud-posture vendors elsewhere in this batch, and its acquisition-driven platform strategy under Permira closely parallels the private-equity-backed consolidation also visible at Trellix, formed under a different PE owner from a merger of two legacy security brands. Both companies illustrate how much of the current consolidation in mature cybersecurity categories is being financed by private equity rather than public markets or continued independent venture funding.

Sources and references

This profile draws on Permira’s official press release announcing the completed 2022 acquisition of Mimecast, Mimecast’s Wikipedia entry for founding history and acquisition timeline, and emailexpert’s June 2026 reporting on Mimecast’s CEO transition to Ranjan Singh.

Official resources

Sources and references

This article draws on publicly available company information, official websites, filings, interviews, announcements, and other cited sources. Information may change over time.

Company information is based on publicly available sources and is reviewed periodically. If you represent this company and would like to request a correction, contact Brel.

Explore Related Intelligence

The AI Brief

Weekly company intelligence in your inbox.

Subscribe