Mimecast has promoted its product and technology chief, Ranjan Singh, to CEO. The company that helped define the secure email gateway now sells human, data and AI risk, and the appointment says a lot about where enterprise email infrastructure is heading.
Mimecast has named Ranjan Singh as its chief executive, effective immediately, promoting the company’s chief product and technology officer to lead what it calls its next phase of platform-led growth. The appointment, announced on 25 June 2026, sees Singh succeed Marc van Zadelhoff, who moves to a board advisory role. Van Zadelhoff is credited with taking the London-based company, long known for email security, well beyond it, into what Mimecast now describes as a unified human, data and AI risk platform.
Singh is an internal pick. He joined Mimecast in April 2025 as chief product and technology officer, after about three years as chief product officer at the IT management firm Kaseya, and he now takes a board seat as well. The board chair who confirmed the move, Michail Zekkos, is also a senior technology figure at Permira, the private equity firm that took Mimecast private in 2022. By its own account, Mimecast was founded in 2003, is headquartered in London, and serves more than 42,000 organisations and 27 million users.
The most telling part of the announcement is not the name. It is the language. Mimecast now bills itself as a company that secures humans, data and AI, and the succession story is built around how far it has travelled from email security. A firm that helped define the secure email gateway no longer leads with email. For the email industry, that framing is a marker in itself.
Promoting the product and technology chief, rather than a sales or security leader, points to the kind of next phase Mimecast has in mind. The work now is integration: welding acquired parts into a single platform and shipping quickly. During Singh’s time as CPTO, Mimecast says it merged its product and engineering teams, released more than 100 products and enhancements, and folded in acquisitions spanning data security, compliance and collaboration. One of those was Code42, the insider-risk firm bought in 2024, whose former chief technology officer, Rob Juncker, has since stepped into the chief product and technology officer seat that Singh vacated on the way up. The bet is product velocity paired with platform breadth.
Private equity is the engine underneath. Mimecast is Permira-owned, its board is chaired by a Permira technology partner, and the talk of platform-led growth and commercial scale is the private-equity platform playbook. It is not alone. Proofpoint, the other big name in email security, went private under Thoma Bravo in 2021. Enterprise email security has become a private-equity platform game, run for breadth and an eventual exit.
Here is the part for those in email to consider. Mimecast’s value increasingly comes from scoring human risk and governing AI, but the behavioural data underneath that comes in large part from email. Email is not dying as infrastructure. It is seemingly however being demoted from the product to the sensor. The biggest real clue came back in May, when Mimecast extended the archiving, eDiscovery and legal-hold tooling it built for email to cover enterprise AI conversations, ingesting Claude Enterprise chat content through the Claude Compliance API, Anthropic’s read-only feed into that content.
It was one of 28 security and compliance vendors that plugged into the same feed, so this is an industry pattern rather than a Mimecast exclusive. Proofpoint is on that list too. The two biggest gateway names, both now private-equity owned, are wiring the same AI chat logs into the same compliance plumbing and the point really is the plumbing. Infrastructure designed for email is being pointed at AI chat logs, and email telemetry is becoming the substrate for a much larger risk platform.
Does any of this mean the secure email gateway is dead? Not quite, and any obituaries are extremely premature. The standalone gateway category is under real pressure as Microsoft and Google build more security into their own email platforms and API-based challengers augment what they ship. But the function does not vanish. It gets absorbed, either into broader risk platforms like Mimecast’s or into the cloud email providers themselves.
The Singh appointment is a vote for the first answer. And the surface keeps widening, with Mimecast now mapping risk across email, human behaviour, endpoints, AI agents and data. The old email-security vendor is squarely in the AI and agent risk business.
So a product chief takes the top job at a company that helped invent the secure email gateway, and that company now sells human, data and AI risk under private-equity ownership. For the email industry the signal is clean enough. Enterprise email security is being absorbed into wider risk platforms, run for scale, with the inbox repositioned from the product to the data layer that feeds them. Email is not going anywhere, it may well however stop being the headline though, even at companies built on email.
