Aikido Security publishes 2026 ranking of 10 email security platforms, led by its own Noon Security product
Aikido Security published a vendor comparison of ten email security platforms for 2026. It ranks its own workforce platform, Noon Security, first, followed by Proofpoint, Mimecast, Abnormal AI, Microsoft Defender for Office 365, Check Point, IRONSCALES, Barracuda, Sublime Security and KnowBe4 Defend. The article describes no specific incident, vulnerability or threat actor. It is product and marketing content, and the evaluation relies on vendor documentation plus Aikido's own hands-on view, so the ranking is not independent. It does name recurring gaps in email defenses: business email compromise (BEC) requests that carry no attachment or link, slow response and remediation, and follow-up attacks through other channels such as text, phone or software installation.
Detalhes técnicos
- BEC and supplier-fraud messages often have no malicious file or URL, so content-only filters have little to detect. The article says behavioral and relationship-aware detection addresses this better.
- Deployment models differ: secure email gateway (MX rerouting) versus API integration with Microsoft 365 or Google Workspace. An API integration may monitor only, block inline before delivery, or remove mail after delivery, depending on the product and configuration.
- Automated remediation, restoration of wrongly quarantined mail, and the handling of uncertain verdicts vary by product.
- Archiving, encryption, DLP and endpoint protection are often separate licenses or tiers and are not implied by an email product's name.
Remediação
- Match the deployment mode to your mail environment and confirm the enforcement mode (monitor, pre-delivery block or post-delivery removal).
- Test the vendor workflow with a suspicious invoice, a legitimate account-change request and a user-reported message, including how a false positive is reversed.
- Check licence tiers, and define owners for policy changes and disputed verdicts.
- Removing a malicious email does not reverse a fraudulent payment or revoke credentials already disclosed. These need separate response actions.
Linha do tempo
-
Aikido Security publishes 2026 ranking of 10 email security platforms, led by its own Noon Security product
ler a análise desta fonte ocultar
Aikido Security published a vendor comparison of ten email security platforms for 2026. It ranks its own workforce platform, Noon Security, first, followed by Proofpoint, Mimecast, Abnormal AI, Microsoft Defender for Office 365, Check Point, IRONSCALES, Barracuda, Sublime Security and KnowBe4 Defend. The article describes no specific incident, vulnerability or threat actor. It is product and marketing content, and the evaluation relies on vendor documentation plus Aikido's own hands-on view, so the ranking is not independent. It does name recurring gaps in email defenses: business email compromise (BEC) requests that carry no attachment or link, slow response and remediation, and follow-up attacks through other channels such as text, phone or software installation.
Technical Details
- BEC and supplier-fraud messages often have no malicious file or URL, so content-only filters have little to detect. The article says behavioral and relationship-aware detection addresses this better.
- Deployment models differ: secure email gateway (MX rerouting) versus API integration with Microsoft 365 or Google Workspace. An API integration may monitor only, block inline before delivery, or remove mail after delivery, depending on the product and configuration.
- Automated remediation, restoration of wrongly quarantined mail, and the handling of uncertain verdicts vary by product.
- Archiving, encryption, DLP and endpoint protection are often separate licenses or tiers and are not implied by an email product's name.
Remediation
- Match the deployment mode to your mail environment and confirm the enforcement mode (monitor, pre-delivery block or post-delivery removal).
- Test the vendor workflow with a suspicious invoice, a legitimate account-change request and a user-reported message, including how a false positive is reversed.
- Check licence tiers, and define owners for policy changes and disputed verdicts.
- Removing a malicious email does not reverse a fraudulent payment or revoke credentials already disclosed. These need separate response actions.