Grow your security business by delivering comprehensive cybersecurity-as-a-service to your customers.
Keep your email, users, and data safe with Barracuda Email Protection, the industry’s most comprehensive email-security platform.
Protect your users and business from volumetric threats, such as malware and spam, as well as advanced threats, including ransomware and zero-day attacks.Protect your users and business from volumetric threats, such as malware and spam, as well as advanced threats, including ransomware and zero-day attacks.
Keep your users safe with real-time analysis of inbound URLs and attachments and block access to malicious content.
Protect your data from corruption and deletion with full cloud backup and recovery of every email and file. Keep sensitive data safe with data leak prevention and encryption.
Barracuda’s advanced machine learning models detect and filter unwanted messages by continuously adapting to new spam tactics, reducing your organization's risk from scams, extortion, and phishing. These algorithms identify and block malicious emails before they reach your users' inboxes, ensuring robust email protection and superior detection efficacy. The classifiers in Email Gateway Defense are frequently retrained, minimizing false positives and ensuring only the right emails are delivered.
Barracuda quickly filters and sanitizes every email before it’s delivered to your mail server to protect you from email-borne threats. Using virus scanning, spam scoring, real-time intent analysis, URL link protection, reputation checks, and other techniques, Barracuda provides you with the best possible level of protection.
Barracuda Central, our global 24x7 threat operations center, constantly monitors the internet for new threats across all attack vectors and feeds this intelligence into email filtering technology.
Some of the most dangerous advanced threats are designed to evade email filters. Barracuda leverages Advanced Threat Protection, a cloud-based service that defends against ransomware and other malware, including zero-day attacks and advanced threats.
We don’t believe this level of security has to come at the price of performance. Barracuda uses multiple, layered analytic engines, including behavioral analytics, static analysis, and CPU-emulation sandboxing to detect unknown and evasive threats.
Hackers and spammers include links in emails that trick people into giving up sensitive information or take them to a malicious site that could spread malware. Organizations can protect their users from accessing this malicious content with Barracuda link protection.
Barracuda automatically rewrites an inbound deceptive URL in an email message and performs real-time analysis of URLs and domains at time-of-click. Users are safely redirected to a valid domain or to a Barracuda domain warning of the fraud. Rewritten URLs do not expire and function indefinitely.
Employees can inadvertently cause internal systems to become a source for spam or other malicious mail. Outbound filtering stops outbound attacks originating from inside the network, which protects your partners and customers and also keeps you from being added to spam-block lists.
Barracuda data-loss protection and email encryption keeps sensitive data — such as credit card numbers, Social Security numbers, HIPAA data, and more — from leaving your organization. Content policies can automatically encrypt, quarantine, or block certain outbound emails based on their content, sender, or recipient.
In the event of a mail server outage or loss of connectivity, Barracuda Email Continuity ensures that email operations continue by failing over to our cloud-based email service. An emergency mailbox lets users continue to send and receive emails, staying productive until your primary servers are back online.
Barracuda's Advanced Threat Protection (ATP) combines behavioral, heuristic, and sandboxing technologies to protect against zero-hour and targeted attacks. ATP automatically scans email attachments in real time; suspicious attachments are detonated in a sandbox environment to observe behavior. In addition to blocking the attachment, the results are integrated into Barracuda Real-Time System providing protection for all other customers.
The Barracuda combats phishing attempts by combining anti-fraud intelligence, behavioral and heuristic detection, protection against sender spoofing (i.e., spammers spoofing valid email addresses), along with domain name validation to detect and block phishing attempts.
For protection against social engineering attacks, review our Impersonation Protection.
Barracuda leverages the cloud for dynamic, real-time threat analysis, attachment sandboxing, and URL protection to prevent malware from affecting email users.
A popular method that attackers use to deliver malware relies on URLs that contain malicious code, which can be invisibly downloaded and can trigger a much larger attack. Link Protection automatically rewrites these URLs so that Barracuda can sandbox the request at click time to block malicious links. Rewritten URLs do not expire and function indefinitely.
More sophisticated attackers make clever modifications to URLs so they look genuine, but are not. The most common technique is omitting letters or using convincing “typos” that even users who check URLs before clicking often miss. Barracuda’s Link Protection includes typosquatting detection, which automatically identifies and redirects these URLs to our sandbox at click time to block malicious activity.
With a long-standing heritage in spam protection, Barracuda remains the leader in identifying and blocking spam. A comprehensive set of security layers ensures that organizations remain productive in the face of evolving threats.
Barracuda identifies email from known spammers and determines whether domains embedded in email lead to known spam or malware domains. It leverages industry-leading techniques that protect against attempts to embed text inside images with the intent of hiding content from traditional spam filters.
As virus attacks become more sophisticated and complex, email infrastructure requires advanced virus protection. The potential for the destruction and release of information or the disruption of a network severely impacts productivity and can lead to financial loss.
Barracuda scans email and incoming files using three powerful layers of polymorphic virus scanning technologies. It also decompresses archives for complete protection. Powerful virus definitions are automatically updated to maintain the most up-to-date protection against email-borne viruses.
Not every attack is focused on planting a virus or getting users to send their credit card number or to click on a malicious link. Often, the objective of the attack is focused on disabling a network or mitigating its effectiveness. As a cloud-based service Barracuda Email Protection is positioned to stop spammers before they overload an email server.
Outbound filtering prevents organizations from being put on spam block lists and prevents outbound attacks originating from inside the network. Employees can inadvertently cause internal systems to become a source for botnet spam. Using a subset of its defense layers, Barracuda’s outbound filtering stops outbound spam and viruses.
Barracuda Email Continuity Service ensures that email operations continue by failing over to a cloud-based email service in the event primary email services become unavailable. During email server outages, an emergency mailbox allows users to continue sending, receiving, reading, and responding to email.
Barracuda Email Protection is integrated with the Barracuda Cloud Control web-based management portal, which leverages Barracuda’s global cloud infrastructure and provides a global view to centrally manage all of Barracuda’s solutions through a “single pane of glass” interface. Barracuda Cloud Control also allows administrators to centrally manage policies and configuration. The simple interface makes it easy for organizations to implement and manage the service with minimal IT overhead.
Our email protection leverages Barracuda Central to identify email from known spammers and determine whether domains embedded in email lead to known spam or malware domains, and it is continually updated with intelligence on the latest threats across all threat vectors. Barracuda Central is our 24x7 centralized threat intelligence gathering organization, where the latest threats across all vectors are analyzed and added to our extensive databases. Over 200,000 organizations worldwide provide intelligence to Barracuda Central, and our email security is updated on a continuous basis.
Spam, Malware, and Advanced Threat Protection are included in Barracuda Email Protection.

Protect users from all email threat types with secure email gateway combined with artificial intelligence.

Includes everything from Advanced.
Add automated post-delivery email incident response to your email security to save resources and secure your users mailboxes.

Includes everything from Premium.
Get comprehensive protection for Microsoft 365 by improving your resiliency with user training, data protection, email archiving, and zero trust access.
| Capabilities | Advanced | Premium | Premium Plus |
|---|---|---|---|
| PREVENT THREATS | |||
| Spam and Malware Protection Identify and block spam, viruses, and malware delivered via email messages. Using virus scanning, spam scoring, real-time intent analysis, URL link protection, reputation checks, and other techniques, Barracuda scans email messages and files. |
|||
| Attachment Protection Barracuda combines behavioral, heuristic, and sandboxing technologies to protect against zero-hour and targeted attacks. A sandbox environment is used to detonate and observe behavior of suspicious attachments. |
|||
| Link Protection Link Protection automatically rewrites URLs so that Barracuda can sandbox the request at click time to block malicious links. |
|||
| Email Continuity In the event of a mail server outage or loss of connectivity, an emergency mailbox lets users continue to send and receive emails, staying productive until your primary servers are back online. |
|||
| Phishing and Impersonation Protection Automatically detect and prevent impersonation, business email compromise, and other targeted attacks. Barracuda’s AI engine learns each organization's unique communication patterns and leverages these patterns to identify anomalies and prevent socially engineered attacks in real time. |
|||
| Account Takeover Protection Stop phishing attacks used to harvest credentials for account takeover. AI detects anomalous email behavior and alerts IT, then finds and removes all fraud emails sent from compromised accounts. |
|||
| Domain Fraud Protection Prevent email domain fraud with DMARC reporting and analysis. Barracuda provides granular visibility and analysis of DMARC reports and helps you minimize false positives, protect legitimate email, and prevent spoofing. |
|||
| Web Security Protect users from accessing malicious web content with advanced DNS and URL filtering. |
|||
| Zero Trust Access for Microsoft 365 Mitigate breach risks for remote employees and contractors and reduce your exposure to lateral attacks on Microsoft 365 applications by deploying continuous verification of user and device identity and trust. |
|||
| DETECT AND RESPOND | |||
| Automatic Remediation All user-reported messages are automatically scanned for malicious URLs or attachments. When a threat is detected, all matching emails are automatically moved from users' mailboxes into their junk folders. |
|||
| SIEM/SOAR/XDR Integration Orchestrate incident response cross-product with RESTful API (beta) and syslog integrations. Remotely administer and configure incident response capabilities and store your event data for tracking, analysis, and troubleshooting. |
|||
| Threat Hunting and Response Quickly identify and efficiently remediate post-delivery threats by automating investigative workflows and enabling direct removal of malicious emails. |
|||
| Automated Workflows Build custom playbooks to completely automate your incident response process. Admins at any technical level can create a workflow by defining a trigger, determining conditions, and assigning the desired actions through a simple user interface. |
|||
| Attack Simulation Simulated phishing attacks are constantly updated to reflect the most recent and most common threats. Simulations are not limited to email, but also include voice, SMS, and portable-media (USB stick) attacks. |
|||
| Security Awareness Training Get access to advanced, automated education technology that includes simulation-based training, continuous testing, powerful reporting for administrators, and active incident-response awareness. |
|||
| SECURE DATA, ENSURE COMPLIANCE | |||
| Email Encryption Secures your mail by encrypting it during transport to the Barracuda Message Center, encrypting it at rest for storage in the cloud, and providing secure retrieval by your recipients through HTTPS web access. Create a policy to automatically encrypt emails based on their sender, content, and other criteria. |
|||
| Data Loss Prevention Create and enforce content policies to prevent sensitive data, including credit card numbers, Social Security numbers, HIPAA data, customer lists, and other private information, from being sent by email. Policies can automatically encrypt, quarantine, or block certain outbound emails based on their content, sender, or recipient. |
|||
| Cloud Archiving A cloud-based, indexed archive allows for granular retention policies, extensive search, role-based auditing/permissions, legal hold, and export. Easily comply with e-discovery requests and regulatory or policy-retention requirements. |
|||
| Cloud-to-Cloud Backup Get data protection and cloud backup for Office 365 data, including Exchange Online mailboxes, SharePoint Online, OneDrive for Business, and Teams. Fast point-in-time recovery in the event of accidental or malicious deletion. |
|||
| Data Inspector Automatically scan your OneDrive for Business and SharePoint data for sensitive information and malicious files containing malware. Use it to develop policies that comply with GDPR, CCPA, and other data privacy regulations. |
|||