Security operationsAnalysis
What became of the 15 products this blog listed in June 2022, and what 14 email filters in TechBag’s guide show about API, on-premises and Indian hosting, as of September 2026.
In June 2022 this blog published a list of fifteen email security products, from SpamTitan to the Forcepoint Trusted Mail System, with a paragraph on each. It did not say which to buy, or why. Four years on, the useful question for an Indian IT head renewing an email filter is a sharper one: how much of that market is still standing, what has replaced the gateway model the list assumed, and what is worth paying for once Microsoft’s own protection is counted. This rewrite answers those three, with the facts as they stood in September 2026.
We checked each product on the 2022 list against its vendor’s current site and TechBag’s own intel pages. Six are unchanged: Proofpoint Email Protection, Forcepoint Email Security, Fortinet FortiMail, the Paubox Email Suite, ESET PROTECT Complete and DuoCircle’s filtering.189 Four are the same product under a new owner. TitanHQ, maker of SpamTitan, ArcTitan and EncryptTitan, was sold in June 2025 to Redstor, a Bregal Milestone portfolio company, and the two now trade together as CyberSentriq.2 Barracuda passed from Thoma Bravo to KKR in August 2022, two months after the list was published.3
Three were renamed or moved. Trend Micro’s Email Security is now Vision One Email and Collaboration Security, and the company markets its email line, ScanMail included, under the TrendAI name.4 The Forcepoint Trusted Mail System went with Forcepoint’s federal business when TPG carved it out; that business was renamed Everfox in January 2024 and still lists the Trusted Mail System among its cross-domain products.56 Two are no longer listed at all under their 2022 names: Comodo’s site now offers a single “Secure Email Gateway” and names neither Dome Antispam nor KoruMail.7
Nine of the fifteen products listed in 2022 changed owner, name or listing within four years
Status of the 15 products on the June 2022 list, by vendor site and TechBag intel page, September 2026
| Value (products) | Share | |
|---|---|---|
| Same product, new owner | 4 | 27% |
| Renamed or moved to another company | 3 | 20% |
| No longer listed under the 2022 name | 2 | 13% |
| Same product, same owner | 6 | 40% |
Source: Vendor sites; TechBag Barracuda and Xcitium hubs; TitanHQ; Washington Technology; TechBag count · as of 30 September 2026 · new owner: SpamTitan, ArcTitan, EncryptTitan, Barracuda; renamed or moved: Trend Email Security, ScanMail, Trusted Mail; unlisted: Dome Antispam, KoruMail; unchanged: Proofpoint, Forcepoint, FortiMail, Paubox, ESET, DuoCircle
The churn is not confined to the old list. Cloudflare Email Security, one of the 14 filters in the guide, still carries its former brand, Area 1, in TechBag’s record of it.1 Email security is a category that private equity and platform vendors buy into, and a buyer signing a three-year term should expect the owner, the roadmap or the support desk to change before it ends.
The 2022 list closed by calling every entry a gateway: mail is routed through the vendor by changing the domain’s MX record, scanned, and passed on. That model still exists. But a second one has grown up beside it, in which the product connects to Microsoft 365 or Google Workspace through the provider’s API, reads mail after Microsoft or Google has filtered it, and pulls back a message that turns out to be malicious after delivery.
TechBag’s guide records the deployment model of each filter from the vendor’s documentation. Three are gateway only: N-able Mail Assure, FortiMail and Forcepoint. Seven offer both, including Proofpoint, Mimecast, Barracuda and Sophos. Three work only through the API: Abnormal, Check Point and Coro.1
Ten of 14 filters can now work inside the mailbox through an API; three work no other way
Deployment model documented by the vendor, count of the 14 email filters in TechBag's guide, September 2026
Source: TechBag email & collaboration security guide, deployment field; TechBag count · as of 30 September 2026 · One filter (Bitdefender) does not document its deployment model
Microsoft announced in February 2026 that Defender for Office 365 Plan 1, its own anti-phishing, Safe Links and Safe Attachments layer, would be added to Microsoft 365 E3 and Office 365 E3, with the rollout complete by 1 August 2026.10 An Indian company on E3 now owns a layer it used to buy separately. That does not make a third-party filter redundant, but it changes what one is for: the case for buying is now the detection Microsoft does not do well, and the evidence for it should come from a trial on your own mail, not a feature list.
The 2022 list compared features every filter has; the 2026 shortlist turns on four questions it did not ask
What the June 2022 list described for each product, against what TechBag's guide records, September 2026
What the 2022 list described
What decides a shortlist now
Source: TechBag email & collaboration security guide · as of 30 September 2026
The trial is cheaper than it used to be. An API-mode product can be connected to a Microsoft 365 tenant in read-only mode, without touching the MX record, and left to report what it would have caught behind Defender for a month. Ask each shortlisted vendor for that report on your own mail: how many messages it flagged that Microsoft delivered, how many of those were payload-free requests for money or credentials, and how many were false alarms. A gateway product cannot be trialled this way without rerouting mail, which is itself a fair point to weigh against it.
An email filter reads every message the company receives. For a regulated Indian firm, where that reading happens is a procurement question before it is a technical one, and the guide’s answers are thin. Five of the 14 filters can run on the customer’s own hardware or virtual machines: Proofpoint, Barracuda, FortiMail, Forcepoint and Kaspersky. Only two document an Indian data centre for mail: Proofpoint, which opened one in 2025, and Sophos, through its Mumbai region. Five cover collaboration stores such as Teams or SharePoint as well as the inbox.111
Five filters can run on your own hardware; only two document an Indian data centre
Count of the 14 email filters in TechBag's guide meeting each test, vendor documentation, September 2026
5 of 14
Can run on-premises or as your own virtual appliance
TechBag count
2 of 14
Document an Indian data centre for mail
Proofpoint, Sophos
5 of 14
Cover Teams or SharePoint as well as the inbox
TechBag count
Source: TechBag email & collaboration security guide; TechBag count · as of 30 September 2026 · Not documented is not the same as absent; ask the vendor in writing
Sources
Related on TechBag: the email security guide holds the 14 filters counted here, each with one stated limitation; the Proofpoint Email Protection page covers the one filter that publishes a price and documents an Indian data centre.
Disclosure. TechBag is a software reseller: it earns a margin when a reader buys through it, including from vendors named here. The analysis is TechBag’s own; no vendor paid for or saw this piece before publication. Facts are labelled reported, TechBag count or our view.