Proofpoint Core Email Protection is the vendor's enterprise email security product (formerly Targeted Attack Protection), sold by Proofpoint for Microsoft 365 and Google Workspace environments. It deploys either via the Microsoft Graph API, which Proofpoint says takes 48 hours, or inline as a secure email gateway, and protects messages before delivery, in the mailbox, after delivery and at click time using behavioral AI and threat intelligence.
The vendor does not publish pricing for Proofpoint Core Email Protection. Contact the vendor directly for a quote. Vendor website: https://www.proofpoint.com/us/products/email-protection
Proofpoint does not publicly itemize costs beyond the subscription. Third-party pricing commentary notes that broader bundles such as Collaboration Security Prime, which extends protection to messaging tools, cloud apps and supplier risk, may be needed for collaboration coverage and add to the cost. Implementation and training effort should also be factored in, but no vendor-published figures are available.
It is an enterprise email security product for organizations using Microsoft 365 or Google Workspace, positioned as a defense-in-depth layer on top of built-in protections such as Microsoft Exchange Online Protection. Proofpoint targets it at organizations that need deeper detection of novel and AI-generated phishing, business email compromise and account takeover than native cloud email security provides.
Proofpoint's own comparison page names Microsoft (Defender for Office 365, native to Microsoft 365), Abnormal Security (API-based behavioral AI), Mimecast (SEG-based with continuity and archiving), Cisco (SEG integrated with its security portfolio), Symantec (separate cloud and on-premises gateways) and Check Point Harmony (API-first with optional inline deployment). Proofpoint differs by offering multi-model behavioral AI deployed via API, secure email gateway, or both.
For the API-based deployment with Microsoft 365, Proofpoint states deployment via the Microsoft Graph API takes about 48 hours. After setup, each new user goes through a one-time historical learning phase, a 12-month historical sync of past email that trains Proofpoint's machine learning models, before live syncing takes over. Gateway (inline) deployment timing is not publicly disclosed.
Publicly available detail is limited. Proofpoint describes a modern, intuitive console for security analysts, and third-party commentary notes that SOC analysts can view detections directly in the Microsoft 365 console. API-based deployment requires no MX record changes and does not replace existing mail infrastructure, which reduces setup friction.
It integrates with Microsoft 365 via the Microsoft Graph API (including a 12-month historical sync during onboarding) and supports Google Workspace. It can be deployed API-based, inline as a secure email gateway, or both together. Optional Collaboration Security Prime extends coverage to messaging tools, cloud apps and supplier risk.
Not publicly disclosed. Proofpoint's product pages do not detail which support tiers are included with a Core Email Protection subscription or which services cost extra; buyers must request this information through Proofpoint's sales or demo process.
Last reviewed: October 27, 2026