Code42

Code42 was acquired by Mimecast and its core product, Incydr, now operates as Mimecast’s insider risk management offering. The platform addresses a specific operational problem: employees, particularly those departing an organization, routinely move sensitive files to personal cloud storage, USB drives, or unsanctioned AI tools, and most security stacks have no reliable way to detect it. Incydr monitors all file movement across work channels without requiring pre-built policies, surfacing risk from day one rather than after weeks of configuration.

For a family office COO or IT lead evaluating whether this belongs in the security stack, the relevant capabilities include:

• AI-driven detection that analyzes billions of signals to prioritize exfiltration events involving PII, PCI, and proprietary data
• Monitoring of shadow AI tool usage, including detection of files uploaded to unsanctioned generative AI platforms
• Adaptive controls that can block actions, deliver targeted user education, or temporarily allow flagged behavior depending on context
• Integration with CrowdStrike, Palo Alto Cortex XSOAR, CyberArk, and 30-plus additional tools for coordinated incident response
• A Human Risk Command Center that maps incidents across communication channels into a single risk view

The platform claims investigation time for high-risk incidents drops by 50 percent compared to traditional DLP and CASB approaches, and deployment requires less than four hours of weekly admin time once live. That profile suits a lean security function, which is typical of a family office environment. Pricing is not disclosed publicly, and the product is marketed primarily at mid-to-large enterprises rather than small family offices. Firms without a dedicated security function or incident response workflow may find the platform more capable than their operating model requires.