Mimecast announced on January 4, 2024, that it had acquired Elevate Security, a provider of human-risk-management technology. The companies did not disclose the purchase price. The strategic aim was to combine Elevate’s behavior-based risk insights with Mimecast’s security-awareness training so organizations could target interventions to users who may need them.
What Mimecast acquired
Mimecast described Elevate Security as an enterprise provider whose platform combines human-behavior and contextual data from multiple sources, then uses a risk-scoring algorithm to flag people it considers higher risk. Mimecast said those insights could be paired with products such as its Awareness Training to support more targeted training and other interventions. These are Mimecast’s descriptions of the technology and its intended benefits, not independent evidence that the scoring accurately predicts incidents or reduces risk.
The acquisition announcement did not disclose financial terms. SecurityWeek separately reported that Elevate had raised $18.3 million in venture-capital financing; that is a reported funding figure, not the acquisition price. SecurityWeek’s report and Mimecast’s announcement describe distinct figures and should not be conflated.
Why the deal mattered to Mimecast
The acquisition’s stated logic was to connect information about user behavior with security education and safeguards. Rather than treating awareness training as the same lesson for every employee, Mimecast said Elevate’s risk insights could help direct interventions toward people or situations it identifies as higher risk. Mimecast’s announcement also positioned this as part of a broader effort to manage human risk.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
#1 Best Overall
Mimecast Chief Technology and Product Officer David Raissipour said people “are historically the largest vulnerability in an organization but can also be the strongest line of defense if given the right tools and education.” That is the company’s rationale for the combination, not a measured result of the acquisition.
What happened to Elevate’s technology and customers
In January 2024, Mimecast said integration had begun and that it would maintain and support Elevate’s existing customer base. In July 2024, Mimecast described Mimecast Engage as its human-risk awareness-and-training offering resulting from integration of Elevate technology acquired in December 2023. The July announcement provides a later milestone in the integration story, but neither statement establishes the exact availability, packaging, or support status of every Elevate-derived capability in October 2026.
Elevate CEO and co-founder Robert Fly said the company had sought to help organizations identify high-risk people and automate responses and safeguards. His statement, like Mimecast’s announcement, reflects the companies’ account of the product and deal.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What the acquisition does—and does not—tell buyers
The deal signals Mimecast’s intention to link user-risk insights with awareness and training tools. It does not, by itself, establish how an organization should interpret a risk score, what data sources a current offering uses, or whether a particular feature is included in a buyer’s plan. Organizations evaluating Mimecast offerings should consult current product documentation and confirm availability, configuration, and support directly with Mimecast.
For the transaction itself, the clearest financial fact is that Mimecast did not disclose the purchase price. The $18.3 million figure reported by SecurityWeek refers to Elevate’s venture financing, not what Mimecast paid.
Quick Recap
Best Value
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
