We may earn a commission if you buy through links on this page. It never changes a score or a ranking. How we make money
The bottom line
A feature-rich email security option, but missing prices and limits complicate the buying decision.
Avanan protects email and collaboration apps with phishing and BEC detection, attachment and URL sandboxing, account takeover monitoring, data loss controls, and post-delivery remediation. The listed plans are Protect, Advanced Protect, and Complete Protect, each with a 14-day trial; prices, seat caps, and usage limits aren't published.
MSP users on Reddit praise Avanan's detection, while some describe management as clunky. One MSP discussion raises concerns about outbound email authentication, and another mentions friction around Microsoft's high-confidence phishing quarantines. With pricing and add-on costs unavailable, we can't make a confident value case before a switch.
Good fit if
- Teams seeking API-connected email security
- Organizations needing SaaS file and chat inspection
- Teams wanting post-delivery remediation
Skip it if
- Buyers requiring transparent upfront pricing
- Teams needing published seat or usage caps
- MSPs prioritizing simple centralized management
ScoresHow it rates
What works
- Covers phishing, BEC, malware, and account takeover
- Inspects attachments and URLs before delivery
- Includes data loss controls for messages and files
- Can remove malicious messages after delivery
- Offers a 14-day free trial
What doesn't
- Plan prices and limits aren't published
- Archiving, IRaaS, and DMARC add-on prices aren't published
- Some MSP users describe management as clunky
- One MSP raised outbound email-authentication concerns
- Reddit users mention friction with Microsoft phishing quarantines
01What Avanan actually does
Avanan is a cloud security platform for email and collaboration apps. It connects through native APIs and checks messages and files before they reach inboxes or shared folders, rather than requiring mail to be routed through changed MX records. The platform is designed to cover phishing, malware, data loss and account takeover across connected services.
Its feature set includes machine-learning and natural-language processing for impersonation, credential theft and spear-phishing; sandboxing for attachments and URLs; and monitoring for suspicious logins, user behavior and unauthorized mail rules. Avanan also scans messages and uploaded files for data loss risks, inspects chat and storage apps, and can find and remove malicious messages after delivery. Those are broad capabilities, but the available information does not specify which apps, integrations or policies are included in each plan. Buyers should confirm coverage for their particular email and collaboration setup before switching.
02Where Avanan is strong
Avanan’s main appeal is the breadth of protection around email and connected collaboration tools. Its listed capabilities include pre-delivery checks for phishing, malware and suspicious links, plus post-delivery removal and account-takeover monitoring. That gives security teams more to work with than a filter that only decides whether to block a message at the gateway. API-based inspection can also leave existing MX records in place, according to a Reddit discussion comparing Avanan with Proofpoint.
Detection is the feature users praise most. In one r/msp thread, commenters who said they had used both products described Avanan’s phishing detection and investigation detail favorably compared with Proofpoint. Those are individual reports, not independent test results, and another commenter stressed that no email security product is bulletproof. Still, the reports point to useful operational value: explanations for why a message was flagged and access to message details when investigating a false positive. Avanan’s post-delivery remediation and inspection of files and chat content may also help teams looking beyond inbox-only protection.
03Where it falls short
Buying costs are hard to assess. The available pricing information lists Protect, Advanced Protect and Complete Protect, but monthly and annual prices, billing units, seat limits and usage limits are not published. A 14-day free trial is listed; no free plan is listed. Archiving, Incident Response as a Service and DMARC are add-ons, with prices not published. The plan descriptions distinguish basic, advanced and complete email protection, but do not spell out which features separate them. That makes it difficult to compare tiers or calculate the cost of a migration before talking to sales.
There are also management and email-authentication questions to resolve. In an r/msp discussion, one poster described Avanan as potentially clunky to manage while considering Mesh Security. A separate MSP thread alleges problems with outbound mail and email authentication; it is a user report, not confirmation that every deployment has the issue. Ask Avanan or your reseller how outbound mail is handled, what setup changes are required, and which collaboration apps and controls your quoted plan covers. The published information does not publish plan caps, so get them in writing.
04Avanan pricing: what you'll actually pay
Avanan’s prices are not published, so we can’t give you a starting cost or calculate the jump between tiers. The available pricing data lists Protect for teams seeking email protection, Advanced Protect for teams needing advanced email protection, and Complete Protect for teams seeking complete email protection. It does not list monthly or annual prices, per-seat rates, or seat and usage limits. The data is marked low confidence, so confirm current terms with Avanan before budgeting.
A 14-day free trial is listed for each plan; there is no free plan listed. Add-ons include Archiving, Incident Response as a Service (IRaaS), and DMARC, but their prices are also unpublished. The billing note says monthly and annual prices are not published; it does not establish which billing options are available. Ask for a written quote that breaks out the base plan, add-ons, billing term, and any minimums. Without those details, comparing tiers or estimating renewal costs is guesswork.
05Switching to (or from) Avanan
Avanan connects through native APIs and checks email and collaboration traffic before delivery, according to the published product description. That makes connected apps, permissions, and policy setup the obvious items to clarify during onboarding. The available material does not document migration steps, supported connectors, setup time, or how existing security policies transfer, so we can’t estimate the effort more precisely.
Lock-in is hard to assess from the published details here. Data export options, retention terms, and what happens to quarantined or archived data after cancellation are not specified. Get those answers in writing before switching, especially if you plan to use Archiving or need records for compliance.
We don’t have Reddit posts or comments in the published material, so we can’t responsibly report why users leave Avanan. Ask the vendor how to export data and remove API access, and confirm how protection behaves during cutover and after cancellation. Those are the practical exit questions the available information leaves open.
From the threadsWhat users say
Reddit users in these threads mostly praise Avanan’s phishing detection and the detail it gives when flagging messages. The same discussions mention clunky management and an outbound-mail authentication concern; these are user reports, not independently verified results.
Avanan's phishing and advanced attack detection is significantly better
Being able to see the body of the email in the console is very useful for the rare false positive
Avanan has great detection, but can be a little clunky to manage
Avanan is not truly API based for outbound mail which causes Email Authentication failures
Questions people ask
Is Avanan legit?
The published product information describes Avanan as a cloud security platform for email and collaboration apps, with phishing, malware, account takeover, and data-loss protections. Reddit users in the Reddit threads we read praise its detection, but also report management friction and an outbound-mail authentication concern. Those comments are user accounts, not independent verification.
How does Avanan work?
Avanan connects to SaaS apps through native APIs and checks messages before they reach inboxes or shared folders, according to the published product information. It can inspect email, files, and chat content, and can remove malicious messages after delivery. One Reddit post alleges problems with outbound email authentication, so buyers should check how outbound mail is handled in their setup.
Is Avanan owned by Check Point?
Yes. The published product information identifies the product as Avanan (Check Point), and a Reddit commenter refers to Check Point’s acquisition and its ThreatCloud data lake. The published sources do not give the acquisition date or further ownership details.
How much does Avanan cost?
The available pricing information lists Protect, Advanced Protect, and Complete Protect, but monthly and annual prices are not published. Seat and usage limits are also not published. It lists a 14-day free trial and says pricing for Archiving, Incident Response as a Service, and DMARC is not published.
What is Avanan Click?
The published product information and Reddit discussions do not explain a feature or product called “Avanan Click.” They describe Avanan’s email and collaboration security, including phishing protection and URL checks, but do not say whether “Click” refers to a separate feature. We can’t identify it more precisely from these sources.
Sources
- Avanan homepage
- Avanan pricing, compiled via web search from chartingcyber.com, topadvisor.com, aicentralresources.com, checkpoint.com, saasworthy.com
- Reddit: Avanan vs. Proofpoint
- Reddit: Avanan is not truly API based for outbound mail which causes Email Authentication failures
- Reddit: Email Security: Avanan vs Mesh
- Reddit: Any insights into Avanan / Checkpoint?
