Mimecast introduces AI agent governance and managed threat response. Mimecast has unveiled Agent Risk Center, a beta capability for discovering, monitoring, and governing AI agents, alongside Managed Threat Response, a redesigned 24/7 service that combines AI-assisted triage with analyst-confirmed remediation. According to Mimecast's analysis, 98% of organizations already have unsanctioned AI tools in use, and by 2029 more than a billion agents will take some 217 billion actions a day1 on employees' behalf with limited visibility for security tools. The Mimecast Agent Risk Center gives security and risk teams one place to see who is behind that activity and act on it, applying the same risk lens Mimecast already applies to human insiders. "AI agents are being deployed faster than security teams can see them," said Rob Juncker, Chief Technology & Product Officer, Mimecast. "Most organizations don't know what agents are running in their environment, what data they're touching, or who's accountable when something goes wrong. Mimecast Agent Risk Center changes that - same risk model, same controls, extended to every agent acting on behalf of your people." Mimecast Agent Risk Center: beta now open. As enterprises deploy AI agents across email, collaboration, and business workflows, security teams face a growing risk surface with limited visibility into agent behavior, permissions, and data access. Mimecast Agent Risk Center gives security and risk teams a single point of control to discover, monitor, and govern AI agents operating in their environment. Key capabilities include: * Unified Agent Dashboard - a single, real-time inventory of every AI tool and connection, sanctioned or not * AI Rulebook - governance for classifying and enforcing policy by department, with no new deployment required * Response Controls - desktop app blocking, browser upload and paste blocking, and in-context user nudges The Mimecast Agent Risk Center is in beta as a free, opt-in capability for active Incydr subscription customers, with early access in September 2026 and general availability for those customers planned for January 2027. Managed Threat Response: AI-accelerated triage, analyst-confirmed remediation. Mimecast also introduced Managed Threat Response, a redesigned 24/7 managed service that combines AI and human expertise to address one of security's most persistent problems: uninvestigated alerts. Research shows that 42% of security alerts go entirely uninvestigated.2 Mimecast closes that gap for emails flagged by users, taking on 100% of the queue and remediating confirmed threats. Mimecast AI triages every reported email. Mimecast Security Operations Center analysts then action confirmed threats - blocking senders or domains, removing campaigns tenant-wide, and updating detection logic based on confirmed outcomes. Customers see the outcome, not the work: no new console, no model to tune, no analyst headcount to fund. Detection logic improves continuously as confirmed threats are identified across Mimecast's 42,000-customer base. More about

Mimecast Governance, Compliance & Insights (GCI): evolving to meet what's next. Today, Mimecast is announcing a variety of updates that streamline its governance and compliance solution, designed to anticipate and innovate in an evolving market, including new consolidated packaging options, a new backup and recovery solution, and other enhancements. Jul 31, 2026 Key points. * Mimecast GCI plans are restructuring around Core, Pro, and Max - simplified pricing and packaging built around the processes customers run daily (eDiscovery, Data Subject Access Requests [DSARs], archiving, legal holds, and more), replacing complex line-item evaluation with a clear path that scales with governance maturity. * Backup & Recovery is joining the GCI suite as a new, standalone product, delivering continuous, policy-driven backups with fast, flexible recovery at the item, folder, or mailbox level - with no infrastructure to provision or per-TB costs that grow as your data expands. * GCI has added five new capabilities - Webex Messaging and Workvivo support, inline file and document preview, instant conversation translation, and native file redaction - each improving what teams can see and do within the product. Regulatory requirements haven't stopped evolving. Neither have the business systems and data sources organizations rely on every day. Email evolved into collaboration. Collaboration evolved into AI. Business data spread across more systems, more processes, and more business-critical decisions. As organizations evolve, governance has to evolve with them. That's exactly what Mimecast Limited is building toward at Mimecast with Governance, Compliance & Insights (GCI). It started with a simple mission. From the beginning, the mission of Mimecast GCI has been to become the single source of truth for business email and collaboration data. With its recent Claude Enterprise Compliance API integration, that mission now includes AI data, making critical business information immediately accessible, usable, and valuable across an organization. That mission hasn't changed. What has changed is how Mimecast Limited deliver on it. As the governance and compliance needs of its customers have grown, Mimecast GCI has grown with them, expanding from individual capabilities into a full product suite that brings critical business systems, data sources, and processes together under one architecture. Today's announcement is another step in its Mimecast evolution. Each investment reflects its continued commitment to not only improving its GCI solution, but to helping its customers and their organizations manage governance and risk with greater speed, visibility, simplicity, and confidence. The next step in the evolution of Mimecast GCI. This quarter's updates reflect a few significant ways in which GCI is expanding with its customers: simplified pricing and packaging plans, its new Backup & Recovery product launch, and additional ways Mimecast Limited is enhancing the GCI user experience. New Mimecast GCI Core / Pro / Max pricing and packaging plans. As the GCI suite of products and capabilities grows, Mimecast Limited want its customers to grow with Mimecast Limited - not grow frustrated trying to figure out how to scale efficiently and cost-effectively. No more complex line items or components to piece together. No more guessing about budgets as AI token-based pricing adds complexity. No more wondering what reactive scaling will cost you. Its new simplified plans remove all of that so the value shows up faster and clearer for your business. These simplified plans are structured around the needs, processes, and use cases its customers run every day: eDiscovery, investigations, DSARs, archiving and preservation, legal holds, and more. That is its baseline foundation. Sensitive data detection, continuous compliance monitoring, and supervision expand that foundation, and its business communication intelligence takes it even further. In the end, its customers choose the plan that matches their business needs - not the other way around. Introducing Backup & Recovery, a new addition to the Mimecast GCI suite. Governance has always meant more than archiving, retention, and holds. It now extends to governing the critical business information that guides an organization's decisions, processes, and outcomes, and that's why Mimecast Limited is excited to announce its new product, Backup & Recovery. For Mimecast Email Security customers, foundational mailbox backup protection is already part of select plans through Mailbox Backup & Recovery, the successor to Sync & Recover. For organizations that need more, including deeper retention, broader recovery, and the full weight of what Backup & Recovery can do, the complete product is available as an upgrade, built from the ground up to be bigger, faster, and more capable than anything Mimecast Limited has offered before. It delivers continuous, policy-driven backups that run automatically, several times a day, across an entire organization or a select group of users, all from a single policy. When a business critical trigger happens, such as an accidental deletion, a ransomware incident, or a departed employee's offboarding, recovery is fast and flexible, available at the item, folder, or mailbox level whenever it's needed. No infrastructure to provision. No per-TB costs that go up as your data volumes increase. Just predictable, fully managed protection. Backup & Recovery begins with support for Microsoft 365 data sources, with additional integrations added over time. Additional ways Mimecast Limited is enhancing the Mimecast GCI user experience. The evolution of GCI includes new products and structural changes, like Backup & Recovery and its new pricing plans, but that's not the whole story. Mimecast Limited is constantly working from customer feedback and insights, adding features and enhancements that make its customers' lives easier. Mimecast Limited recently delivered five such capabilities - some brand new, some product migration upgrades. Either way, Mimecast Limited want its customers to know Mimecast Limited is continually investing in all aspects of the Mimecast GCI suite. * Webex Messaging: Cisco Webex content is now connected, ingested, and reviewable natively on GCI. For customers running Webex alongside other collaboration tools, that's one less blind spot - a major workplace platform brought fully into view, with the same governance rigor as everything else you're already monitoring. * Workvivo: Mimecast GCI now supports Workvivo natively, and can restore years of a customer's history, not just data captured from this point forward. That matters most for organizations that have relied on Workvivo for a long time - governance coverage doesn't have to start from zero the day they decide to integrate. * Inline File & Document Preview: Reviewers can now view images, PDFs, and Office documents directly in the review panel, with no downloads required. Each download is a pause - a context switch, a moment of friction. Removing that friction, across attachments and reviews, adds up to real time back for review teams working through large volumes of data. * Dynamic Context Translation: Any reviewer can now translate a full flagged conversation into their own language, instantly, in place. Language has historically been one of the quiet points where global reviews slow down or stall entirely. This closes that gap - a flagged conversation gets reviewed at the same speed, no matter what language it's in. * Native File Redaction: Legal, compliance, and privacy teams often spend hours manually redacting sensitive content, such as SSNs, account numbers, and privileged material, before sharing data externally with outside counsel and service providers. Mimecast GCI Search & Discover now has native file redaction directly within the platform to solve this business challenge. Across DSARs, eDiscovery, investigations, and more, teams can now search, redact, and export deliberately, instead of relying on costly downstream processes handled by additional third parties. Looking ahead: what's next. This quarter's updates are proof of a mission in motion, not the end of it. Mimecast GCI will keep evolving the same way it always has: not by reacting once a governance or data boundary moves, but by building for where its customers are headed next. That's the real bet behind everything above. The organizations that win against risk aren't the ones who move fastest once something changes. They're the ones whose governance already expected the change.