shouldiuse.io

New check

Categories

VERDICT

Should I use Proofpoint?

Protects people, data and devices against advanced threats - proofpoint.com

Depends. Buy Proofpoint if you're a large, regulated organization with dedicated security staff and budget for quote-based enterprise pricing. Skip it if you're a small team — simpler, cheaper email security tools exist and sysadmins actively shop for them.

Confidence

Medium. Based on 50+ public sources; most review snippets were truncated, so granular ratings numbers are limited.

Ratings

  • Value for money
  • Ease of useNo direct user evidence in sources
  • Feature depth
  • Support qualityNo direct user evidence in sources
  • Security posture

Pricing

Not disclosed

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed

Best for

  • Large regulated enterprises
  • Orgs with dedicated security teams
  • High-compliance industries (finance, healthcare, government)
  • Microsoft 365 estates at scale

Not for

  • Small businesses needing simple spam filtering
  • Startups without dedicated security staff
  • Buyers wanting transparent, self-serve pricing
  • Teams without admin bandwidth to tune and manage it

Gotchas - check before you buy

high

Proofpoint's cloud (Salesforce) instances were accessed in the 2025 Drift supply-chain attack.

medium

Quote-based pricing; resellers price Essentials differently, so identical deals vary. Negotiate hard.

medium

CVE-2024-3676 published against a Proofpoint product (May 2024).

medium

Guess: migrations off Proofpoint are painful; plan exit costs before signing multi-year deals.

Pros and cons

Pros

  • Broad suite: email security, awareness training, governance, threat intel.
  • 1,328 G2 reviews signal a large, active install base.
  • Named Gartner Peer Insights Customers' Choice (Nov 2025).
  • Proven at large institutions incl. Columbia and University of Hawaii.
  • Deep in-house threat research and public security advisory program.

Cons

  • MSPs report it 'isn't cutting it' and hunt replacements.
  • Opaque, quote-based pricing via partners; no public list prices.
  • Named victim in 2025 Salesloft Drift third-party breach.
  • Users report email delivery issues with Proofpoint.

Sources & method

Analyzed 9/26/2026 - 14 sources - Mature vendor with a published advisory program; one 2025 third-party breach and one 2024 CVE on record.

official x2review x7security x2news x3
  • Salesloft Drift third-party breach (2025), Attackers accessed Proofpoint's Salesforce cloud instances via the Drift supply-chain compromise; Proofpoint confirmed and published incident response.
  • CVE-2024-3676 (May 2024), Proofpoint vulnerability listed on NIST NVD; see entry for affected product details.
  • Email routing flaw reportedly exploited, Sysadmins discussed an article describing exploitation of a Proofpoint email routing flaw.

Key stats

  • Value for money: 2/5

    Rating

  • Not disclosed

    Starting price

  • 14

    Sources

  • Analyzed

  • Value for money: 2/5. MSPs publicly shopping for cheaper replacements
  • Ease of use. No direct user evidence in sources
  • Feature depth: 4/5. Huge suite; '800lb gorilla' per sysadmins
  • Support quality. No direct user evidence in sources
  • Security posture: 3/5. 2025 Drift breach exposure; 2024 CVE on record
  • 1,328 G2 reviews across Proofpoint products
  • 620 Core Email Protection reviews on G2 alone
  • Thoma Bravo Ownership $12B take-private deal
  • Customers' Choice Recognition Gartner Peer Insights, Nov 2025

Pricing

Not disclosed

Security

Mature vendor with a published advisory program; one 2025 third-party breach and one 2024 CVE on record.

  • Salesloft Drift third-party breach (2025)Attackers accessed Proofpoint's Salesforce cloud instances via the Drift supply-chain compromise; Proofpoint confirmed and published incident response.⁶
  • CVE-2024-3676 (May 2024)Proofpoint vulnerability listed on NIST NVD; see entry for affected product details.⁵
  • Email routing flaw reportedly exploitedSysadmins discussed an article describing exploitation of a Proofpoint email routing flaw.

What users say

Sysadmins and MSPs respect Proofpoint's detection depth but frequently debate replacing it, citing cost and complexity.

“Proofpoint Isn't Cutting It, What's Better?”
Reddit, r/msp
“Keep Proofpoint or replace it?”
Reddit, r/sysadmin
“Mimecast, ProofPoint - Rough cost?”
Reddit, r/sysadmin

Alternatives

Compare Proofpoint with each alternative.

Companies that use it

  • University of Hawaii11
  • Columbia University12
Full analysis

Based on 50+ public sources; most review snippets were truncated, so granular ratings numbers are limited.

Enterprise-grade email security: powerful and deep, but priced and built for big orgs. Small teams: look elsewhere.

Methodology

Based on 50+ public sources; most review snippets were truncated, so granular ratings numbers are limited.

Sources

  1. Proofpoint Products — G2 Reviews (1,328)g2.com
    review
  2. Proofpoint Reviews — Gartner Peer Insightsgartner.com
    review
  3. Proofpoint Isn't Cutting It, What's Better? — r/mspreddit.com
    review
  4. Keep Proofpoint or replace it? — r/sysadminreddit.com
    review
  5. CVE-2024-3676 — NIST NVDnvd.nist.gov
    security
  6. Cloudflare, Proofpoint say hackers gained access to Salesforce instancescybersecuritydive.com
    news
  7. More Cybersecurity Firms Hit by Salesforce-Salesloft Drift Breachsecurityweek.com
    news
  8. Proofpoint: The $12B Deal — Thoma Bravothomabravo.com
    news
  9. Proofpoint Pricing and Costs Guide 2025underdefense.com
    review
  10. Proofpoint Essentials Licensing, Pricing, Renewalsspambrella.com
    review
  11. Improving Email Security with Proofpoint at University of Hawaiier.educause.edu
    review
  12. Email Protection with Proofpoint — Columbia Universitycuit.columbia.edu
    official
  13. Proofpoint Security Advisoriesproofpoint.com
    security
  14. Proofpoint main siteproofpoint.com
    official

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.