By Zoha Ahmed · Oct 30, 2026
When IT admins and MSPs ask Reddit which email security tool to buy, the same handful of names come up. We read all 233 replies in 28 of those threads from r/msp, r/sysadmin and r/cybersecurity over the past year, counted one vote per person, and removed vendors posting about their own products.
Every quote below links back to the comment it came from, so you can read the full thread yourself.
The ranking
| Tool | Recommend | Complain | Threads | |
|---|---|---|---|---|
| 1 | 61 | 7 | 17 | |
| 2 | 25 | 5 | 14 | |
| 3 | 11 | 5 | 3 | |
| 4 | 9 | 0 | 7 | |
| 5 | 9 | 5 | 12 | |
| 6 | 8 | 11 | 13 | |
| 7 | 6 | 2 | 4 | |
| 8 | 4 | 8 | 9 | |
| 9 | 2 | 3 | 7 |
"Recommend" and "Complain" count different people, not comments. A tool named in only a handful of threads can rank high on a few strong opinions, so check the thread count too. Also mentioned, with too few opinions to rank: Hornetsecurity, Trustifi, SpamTitan, Mailprotector and Libraesva.
1. Check Point Harmony (Avanan)
Check Point Harmony (Avanan)
Best overall
The most recommended tool by a wide margin, especially among MSPs.
Why people recommend it
- Catches phishing and business email compromise that Microsoft Defender, Barracuda and INKY let through
- Quick to set up through the Microsoft 365 API, with no MX record change
- Easy to buy and manage for MSPs through distributors like Pax8
Common complaints
- Support quality varies, especially through resellers
- The cheaper Protect tier was retired in December 2025, so some customers saw a price increase
- One admin reported encrypted mail failing DMARC alignment at Google
What Redditors said
Avanan is the gold standard
Using Checkpoint Harmony and it works well.
I’ve found their support is pretty weak.
2. Abnormal Security
Abnormal Security
Best for BEC and vendor fraud
The favourite for catching payloadless scams like vendor fraud, but priced for larger teams.
Why people recommend it
- Behaviour-based detection that spots BEC and vendor fraud with no link or attachment
- Very few false positives and a fast setup
- Often chosen by teams replacing a secure email gateway or KnowBe4's email product
Common complaints
- Removes threats after delivery, so a message can briefly show up before it is pulled
- Expensive, and several commenters called the pricing out
- Not built for MSPs managing hundreds of small tenants
What Redditors said
Abnormal is the single best cybersecurity tool I've used.
Abnormal's behavioral approach specifically handles payloadless attacks where traditional tools fail.
I thought their pricing was bananas.
3. INKY
INKY
Best-loved by MSPs
Loved by the MSPs who use it. The Kaseya acquisition is the main worry.
Why people recommend it
- Users and admins report very few problems
- Good warning banners and greymail sorting
- Strong multi-tenant tools for MSPs
Common complaints
- Some MSPs are leaving after the Kaseya acquisition
- Reports of deliverability issues and slower support
What Redditors said
all the trials we did came up short compared to INKY
It's been fantastic, no real issues or complaints
I think Inky was acquired by the dark side.
4. Sublime Security
Sublime Security
Best Abnormal alternative
The newer name Reddit keeps suggesting as an Abnormal alternative. No complaints in our sample.
Why people recommend it
- Detection people compare to Abnormal's, at a lower price
- Open and configurable, with a rules language admins like
- Some teams are moving to it from Avanan and Ironscales
Common complaints
- None in our sample
What Redditors said
Personal experience, Sublime is by far the best email security solution on the market
I found Sublime to be about as good as detection as Abnormal while being much more open and configurable.
5. Mimecast
Mimecast
Best for long-time MSP programs
Solid and long-standing, with a good MSP program, but mixed reviews on pricing and Google Workspace.
Why people recommend it
- Reliable, with a long track record
- Decent MSP margins and a simple multi-tenant portal
Common complaints
- Pricing that varies a lot from deal to deal
- Weak Google Workspace integration
- Some admins say it generates the most user complaints
What Redditors said
Mimecast has been rock solid for us
mimecast has decent margins and their portal is pretty straightforward for managing multiple tenants
Mimecast I get the most complaints on.
6. Proofpoint
Proofpoint
Enterprise default
The enterprise default. Reddit mentions it constantly, but complaints outnumber recommendations.
Why people recommend it
- Mature detection and enterprise features
- Long-time Essentials customers report good results
Common complaints
- Phishing still getting through for some teams
- Proofpoint Essentials development has stopped, pushing small customers to migrate
- Running it alongside Microsoft means two quarantines to manage
What Redditors said
We have been using Proofpoint Essentials for around 6 years and have had great results with it.
ugh another phishing campaign getting past proofpoint
7. Ironscales
Ironscales
Best for Microsoft 365 only
A strong pick for Microsoft 365. Avoid it for Google Workspace.
Why people recommend it
- Works well on Microsoft 365 mailboxes
- Phishing remediation and responsive support
Common complaints
- Poor fit for Google Workspace clients
What Redditors said
the phishing remediation it does works incredibly well
Check Point and IronScales were the 2 most recommended with the least complaints
Don’t use Ironscales for Google clients.
8. Barracuda
Barracuda
Easiest to leave running
Easy to live with, but many say its detection has fallen behind API-based tools.
Why people recommend it
- Sensible defaults that need little babysitting
- Familiar to users
Common complaints
- Detection lags newer tools, especially on BEC
- More expensive than API-based options
What Redditors said
Barracuda has the sanest defaults if you don’t want to babysit it.
Barracuda is fine but their detection has lagged behind in my experience, especially on BEC stuff.
9. Microsoft Defender for Office 365
Microsoft Defender for Office 365
The baseline
Mostly mentioned as the baseline other tools are bought to cover.
Why people recommend it
- Already included for clients on Business Premium or E3
Common complaints
- Commenters say it misses BEC and account takeover attempts
What Redditors said
don't forget about Defender for Office 365 if all of your clients have Business Premium or at least E3
Defender for Office is garbage…it misses a lot, especially in the BEC and ATO space.
How we built this ranking
We pulled every Reddit thread from the past 12 months whose title asked for a recommendation, an alternative or a comparison in IT and security subreddits, then kept the threads about email security. An AI model read each comment that named a tool and labelled it as a recommendation, a complaint or a neutral mention, and we checked that every quote appears word for word in the original comment. Mentions of the same vendors' other products, like security awareness training or firewalls, were removed. We refresh the data regularly.
Sell email security?
Your buyers are in these threads right now, comparing you with your competitors. We run Reddit ads that put your brand in front of them.
See how Reddit ads work for SaaSEmail security tools FAQ
What is the best email security tool according to Reddit?
In our sample of 28 threads, Check Point Harmony Email (formerly Avanan) was recommended by the most people (61), followed by Abnormal Security (25). MSPs lean toward Harmony Email for price and multi-tenant management; larger in-house teams lean toward Abnormal for catching payloadless fraud.
Is Microsoft Defender for Office 365 enough on its own?
Most commenters in these threads did not think so. Defender comes with Business Premium and E3, and admins often layer an API-based tool on top because they say Defender misses business email compromise and account takeover.
What is a good alternative to Abnormal Security?
Sublime Security came up most often as an Abnormal alternative, with commenters saying its detection is comparable at a lower price. Check Point Harmony Email was the other common suggestion.
What do MSPs use for email security?
In r/msp, Check Point Harmony Email (Avanan), INKY, Mimecast and Proofpoint came up most, with MSPs weighing multi-tenant management, margins and distributor programs like Pax8 alongside detection quality.