[{"data":1,"prerenderedAt":453},["ShallowReactive",2],{"money-live:best":3,"money:compare:sentaro-vs-hornetsecurity":4,"money-links:\u002Fen\u002Fcompare\u002Fsentaro-vs-hornetsecurity":426},true,{"page":5},{"family":6,"slug":7,"navLabel":8,"hubBlurb":9,"icon":10,"eyebrow":11,"h1":12,"lede":13,"seoTitle":14,"seoDescription":15,"reviewed":16,"heroChips":17,"sections":22,"faqs":359,"sources":381,"disclaimer":397,"related":398,"cta":423},"compare","sentaro-vs-hornetsecurity","Sentaro vs Hornetsecurity","A German-founded Microsoft 365 suite, part of Proofpoint since December 2025, against an API-only detection layer hosted in Sweden.","scale","Compare","Sentaro vs Hornetsecurity: Microsoft 365 suite or API detection layer","Hornetsecurity sells 365 Total Protection, an all-in-one Microsoft 365 suite of filtering, encryption, archiving, backup and training (hornetsecurity.com, October 2026), while Sentaro is an API-only layer for targeted phishing, BEC and risky OAuth apps, and for EU teams on Microsoft 365 or Google Workspace whose gap is that kind of fraud, Sentaro is the better choice. Sentaro is live in four minutes, costs a published $6 per protected account per month and is hosted in Sweden on Microsoft Azure. Proofpoint announced that it completed its acquisition of Hornetsecurity on 8 December 2025. Prices in USD.","Sentaro vs Hornetsecurity: Swedish API layer or suite","Sentaro vs Hornetsecurity 365 Total Protection: deployment, scope, ownership after the Proofpoint deal, EU hosting and pricing, compared honestly.","2026-10-18",[18,19,20,21],"Suite vs detection layer","API · no MX change","Both founded in Europe","$6 per account per month",[23,40,45,79,247,259,296,306,320,329,333,336,356],{"t":24,"title":25,"summary":26,"points":27},"verdict","Our recommendation","Sentaro is the better choice than Hornetsecurity for EU teams on Microsoft 365 and Google Workspace whose gap is targeted, payload-free fraud and OAuth app risk, and each reason can be checked: it connects over API in four minutes with no MX change; its BEC, vendor-compromise and QR-lure verdicts show their reasoning in the console, so you can audit them on your own mail; its App vector, live since Q3 2026, inventories every app, AI tool and OAuth grant in the same seat; its price, $6 per protected account per month with every feature included, is published on sentaro.com\u002Fen\u002Fpricing, while Hornetsecurity sells through partners on quote; and it is an independent Swedish vendor, hosted in Sweden on Microsoft Azure, with subprocessors listed in its public DPA.",[28,31,34,37],{"label":29,"text":30},"Choose Sentaro if…","you want API-only deployment in four minutes, detection aimed at BEC and vendor compromise, OAuth and shadow-AI visibility, Google Workspace support, and a price you can see before talking to sales.",{"label":32,"text":33},"Why Sentaro wins","one published plan with every feature included (sentaro.com\u002Fen\u002Fpricing), Google Workspace support, which we could not confirm on Hornetsecurity’s product page, the same engine across Microsoft 365, Google Workspace, Slack and Teams, and monthly plans you can cancel anytime.",{"label":35,"text":36},"Consider Hornetsecurity only if…","you want archiving, Microsoft 365 backup, encryption and training bundled in one SKU, or need MX-based filtering in front of Microsoft 365.",{"label":38,"text":39},"Ownership note","Proofpoint completed its $1.8B acquisition of Hornetsecurity on 8 December 2025, per Proofpoint’s press release. Hornetsecurity operates as Proofpoint’s dedicated MSP and SMB business unit. Proofpoint is headquartered in the US and owned by Thoma Bravo.",{"t":41,"tone":42,"title":43,"text":44},"callout","info","Disclosure","Sentaro publishes this comparison and recommends itself; Hornetsecurity and Proofpoint facts are public and sourced from their own sites as of 18 October 2026.",{"t":46,"title":47,"items":48},"facts","At a glance",[49,52,55,58,61,64,67,70,73,76],{"label":50,"value":51},"Hornetsecurity product","365 Total Protection, Plans 1 to 4 (Business, Enterprise, Enterprise Backup, Compliance & Awareness)",{"label":53,"value":54},"Hornetsecurity deployment","MX-based, API-based or hybrid security modes (vendor)",{"label":56,"value":57},"Hornetsecurity platforms","Microsoft 365; Google Workspace support not documented on its product page",{"label":59,"value":60},"Hornetsecurity pricing","Not public; free trial and quote form, sold mainly through partners",{"label":62,"value":63},"Hornetsecurity ownership","Proofpoint company since 8 December 2025 (Proofpoint is owned by Thoma Bravo)",{"label":65,"value":66},"Sentaro product","Message vector (live since Q2 2026) and App vector (live since Q3 2026); roadmap in the note below",{"label":68,"value":69},"Sentaro deployment","API only: connects in four minutes, no MX changes, no agents; historical visibility within 15 minutes",{"label":71,"value":72},"Sentaro platforms","Microsoft 365 and Google Workspace; same engine across email, Slack and Teams",{"label":74,"value":75},"Sentaro pricing","$6 per protected account per month, or $68 per account per year; the first account is free. Prices in USD.",{"label":77,"value":78},"Sentaro hosting","Hosted in Sweden on Microsoft Azure; subprocessors listed in the DPA",{"t":6,"title":80,"intro":81,"columns":82,"own":85,"groups":86,"footnote":246},"Feature comparison","Hornetsecurity entries come from its 365 Total Protection page and Proofpoint’s acquisition release. \"Not publicly documented\" means we could not find it in public material, not that it is missing.",[83,84],"Hornetsecurity 365 Total Protection","Sentaro",1,[87,126,163,181,214],{"label":88,"rows":89},"Deployment",[90,99,104,111,119],{"label":91,"note":92,"cells":93},"Deployment model","MX: mail is rerouted through the vendor. API: the vendor connects to the mail platform directly.",[94,97],{"mark":95,"text":96},"yes","MX, API or hybrid",{"mark":95,"text":98},"API only, no MX change",{"label":100,"cells":101},"Microsoft 365",[102,103],{"mark":95},{"mark":95},{"label":105,"cells":106},"Google Workspace",[107,110],{"mark":108,"text":109},"unknown","Not publicly documented",{"mark":95},{"label":112,"cells":113},"Collaboration",[114,117],{"mark":115,"text":116},"partial","Teams Protection (Plan 4)",{"mark":95,"text":118},"Same engine across Slack and Teams",{"label":120,"cells":121},"Published setup time",[122,124],{"mark":108,"text":123},"Not stated",{"mark":95,"text":125},"Four minutes",{"label":127,"rows":128},"Threat detection",[129,136,143,150,157],{"label":130,"cells":131},"Spam and malware filtering",[132,134],{"mark":95,"text":133},"All plans",{"mark":115,"text":135},"Runs alongside native filtering, not instead of it",{"label":137,"cells":138},"AI-based advanced threat protection",[139,141],{"mark":95,"text":140},"Plan 2 and up",{"mark":95,"text":142},"Vord, Sentaro’s proprietary engine",{"label":144,"cells":145},"BEC and vendor compromise",[146,148],{"mark":108,"text":147},"Not named explicitly",{"mark":95,"text":149},"Vendor-compromise and thread-hijack detection",{"label":151,"note":152,"cells":153},"QR-code phishing","A malicious link hidden in a QR-code image, so text-based link scanning never sees it.",[154,155],{"mark":108,"text":109},{"mark":95,"text":156},"Decoded, destination analyzed",{"label":158,"note":159,"cells":160},"Internal mail","Mail sent between colleagues, where attacks spread after one account is compromised.",[161,162],{"mark":108,"text":109},{"mark":95},{"label":164,"rows":165},"SaaS and OAuth",[166,174],{"label":167,"note":168,"cells":169},"App and OAuth-grant inventory","A list of third-party apps and the OAuth permissions users have granted them.",[170,172],{"mark":115,"text":171},"Permission management (Plan 4)",{"mark":95,"text":173},"Every app, AI tool and OAuth grant",{"label":175,"note":176,"cells":177},"Consent-phishing blocking and grant revocation","Consent phishing tricks a user into granting a malicious app OAuth access to mail or files.",[178,179],{"mark":108,"text":109},{"mark":95,"text":180},"One-click revocation",{"label":182,"rows":183},"Suite features",[184,192,197,203,209],{"label":185,"cells":186},"Email encryption",[187,189],{"mark":95,"text":188},"Plan 1 and up",{"mark":190,"text":191},"no","Not in Sentaro’s published scope",{"label":193,"cells":194},"Archiving",[195,196],{"mark":95,"text":140},{"mark":190,"text":191},{"label":198,"cells":199},"Microsoft 365 backup",[200,202],{"mark":95,"text":201},"Plan 3 and up",{"mark":190,"text":191},{"label":204,"cells":205},"DMARC management",[206,208],{"mark":95,"text":207},"Plan 4",{"mark":190,"text":191},{"label":210,"cells":211},"Security awareness training",[212,213],{"mark":95,"text":207},{"mark":190,"text":191},{"label":215,"rows":216},"Commercial and trust",[217,225,232,239],{"label":218,"note":219,"cells":220},"Public price","Whether a list price is published on the vendor’s own website.",[221,223],{"mark":190,"text":222},"Quote via partner",{"mark":95,"text":224},"$6\u002Faccount\u002Fmonth, USD",{"label":226,"cells":227},"Hosting",[228,230],{"mark":95,"text":229},"12 regional data centers, independent of Microsoft’s infrastructure (vendor)",{"mark":95,"text":231},"Hosted in Sweden on Microsoft Azure",{"label":233,"cells":234},"Certifications",[235,237],{"mark":108,"text":236},"Not confirmed on product page",{"mark":115,"text":238},"In progress; see Certification status",{"label":240,"cells":241},"MSP program",[242,244],{"mark":95,"text":243},"12,000+ MSPs and channel partners",{"mark":95,"text":245},"Multi-tenant, white-label ready","Sources: hornetsecurity.com\u002Fen\u002F365-total-protection and proofpoint.com newsroom, accessed 18 October 2026.",{"t":248,"id":249,"title":250,"blocks":251},"prose","proofpoint","What does the Proofpoint acquisition change for Hornetsecurity customers?",[252,255,257],{"t":253,"text":254},"p","Proofpoint announced a definitive agreement to acquire Hornetsecurity on 15 May 2025 and completed it on 8 December 2025, for $1.8B in total consideration. Proofpoint states that Hornetsecurity brings nearly $200M in annual recurring revenue and more than 125,000 customers served through more than 12,000 MSPs and channel partners in over 120 countries. Hornetsecurity continues as a dedicated MSP and SMB business unit led by its founder, Daniel Hofmann.",{"t":253,"text":256},"For a buyer, the practical step is contractual. Hornetsecurity is now part of a US-headquartered group owned by Thoma Bravo, so procurement teams that chose it partly as a German vendor should check which entity signs the contract and DPA, and review the current subprocessor list. Proofpoint also sells Proofpoint Essentials to the same SMB and MSP market; ask your partner how the two lines are positioned.",{"t":253,"text":258},"The acquisition says nothing about product quality. It does mean \"European vendor\" is now a question of hosting and contract terms rather than ownership.",{"t":248,"id":260,"title":261,"blocks":262},"architecture","Suite or detection layer: which problem are you solving?",[263,265,267],{"t":253,"text":264},"Hornetsecurity 365 Total Protection is built as a suite. Plan 1 covers spam and malware filtering plus automated email encryption. Plan 2 adds AI-based advanced threat protection and archiving. Plan 3 adds Microsoft 365 backup of mailboxes, Teams, OneDrive, SharePoint and Entra ID. Plan 4 adds security awareness training, DMARC management, permission management and Teams protection. You pick a plan and get everything below it.",{"t":253,"text":266},"Sentaro is built as a detection and response layer. It connects through the Microsoft 365 and Google Workspace APIs and reads every inbound and internal message for intent, sender identity, relationship context, links, attachments and QR codes. Malicious messages are removed or quarantined automatically, and similar messages across all mailboxes can be remediated in one action. The App vector inventories every app, AI tool and OAuth grant in the tenant and revokes risky grants through the admin SDKs. Sentaro does not archive, back up or encrypt mail.",{"t":268,"rows":269},"table",[270,273,276,278,281,284,287,290,293],[271,272],"If your gap is…","Better fit",[274,275],"Archiving, retention or eDiscovery","Hornetsecurity (Plan 2+)",[198,277],"Hornetsecurity (Plan 3+)",[279,280],"Outbound encryption","Hornetsecurity (Plan 1+)",[282,283],"DMARC reporting and enforcement project","Hornetsecurity (Plan 4)",[285,286],"Payload-free BEC and vendor-invoice fraud","Sentaro (Message vector)",[288,289],"OAuth consent phishing and shadow AI","Sentaro (App vector)",[291,292],"Google Workspace tenant","Sentaro (Hornetsecurity GWS support not documented)",[294,295],"MX-level filtering in front of Microsoft 365","Hornetsecurity",{"t":248,"id":297,"title":298,"blocks":299},"nordic-dach","Which is the better European choice for Nordic and DACH firms?",[300,302,304],{"t":253,"text":301},"Both companies are European in origin. Hornetsecurity is based in Hanover, Germany, and states that it runs 12 regional data centers independent of Microsoft’s infrastructure. Sentaro AB was founded in 2025 in Stockholm and is hosted in Sweden on Microsoft Azure. Its subprocessors, including database hosting in Frankfurt and a limited third-party AI subprocessor, are listed in the DPA at \u002Fen\u002Flegal\u002Fdpa.",{"t":253,"text":303},"For NIS2, Cybersäkerhetslagen and DORA, neither product makes you compliant. What matters is evidence: who received what, when it was detected, what was done. Sentaro is built for the controls regulated EU firms are asked to evidence and provides the email-layer controls, continuous evidence and incident detection those frameworks require. Hornetsecurity’s archiving and backup help with retention and recovery obligations, which Sentaro does not cover.",{"t":253,"text":305},"Our recommendation for Nordic and DACH firms on Microsoft 365 or Google Workspace is Sentaro: keep Microsoft Defender or Gmail for bulk mail, add Sentaro for targeted fraud and OAuth app risk, and handle archiving and backup in a dedicated tool.",{"t":248,"id":307,"title":308,"blocks":309},"where-sentaro-wins","Where Sentaro wins",[310,318],{"t":311,"items":312},"ul",[313,314,315,316,317],"Your gap is payload-free BEC, vendor-invoice fraud or QR lures: Sentaro’s Message vector is built for these, including vendor-compromise and thread-hijack detection.","You want shadow IT and OAuth control: every app, AI tool and OAuth grant, with one-click revocation, included in every plan.","You run Google Workspace, or both Google Workspace and Microsoft 365.","You want a published price ($6 per protected account per month; prices in USD) and a four-minute API connection.","You want an independent vendor hosted in Sweden on Microsoft Azure, with subprocessors listed in the DPA.",{"t":253,"text":319},"We make Sentaro, so weigh this section accordingly: every point above comes from Sentaro’s published product information, and its limits are listed on this page too.",{"t":248,"id":321,"title":322,"blocks":323},"where-hornetsecurity-may-still-fit","Where Hornetsecurity may still fit",[324],{"t":311,"items":325},[326,327,328],"You want filtering, encryption, archiving, Microsoft 365 backup, DMARC management and awareness training in one plan and one contract.","You need MX-based or hybrid filtering in front of Microsoft 365.","You buy through an MSP that already standardizes on Hornetsecurity; its channel spans more than 12,000 partners.",{"t":41,"tone":330,"title":331,"text":332},"roadmap","Roadmap: Identity and Behavioral, Q4 2026","Message and App are live; Identity and Behavioral reach general availability in Q4 2026, included at no added cost. Until then, account-takeover session anomalies, forwarding-rule abuse, leaked-credential monitoring and lookalike-domain registration alerts are not part of the live product.",{"t":41,"tone":42,"title":334,"text":335},"Certification status","SOC 2 and ISO 27001: certification in progress, with no target date published; Sentaro says it will announce them the day they are signed, and not before. Google CASA: verified API integration. The DPA and subprocessor list are public at sentaro.com\u002Fen\u002Flegal\u002Fdpa; an evidence pack for NIS2, DORA and SOC 2 diligence is available on request from hello@sentaro.com.",{"t":337,"title":338,"intro":339,"items":340},"steps","How to run Sentaro next to Hornetsecurity","No migration is needed to test the two together, because Sentaro does not touch mail routing.",[341,344,347,350,353],{"title":342,"text":343},"Keep your MX records as they are","Hornetsecurity continues to filter in MX or hybrid mode. Sentaro connects over API behind it.",{"title":345,"text":346},"Connect the tenant","An admin connects Microsoft 365 or Google Workspace over API in four minutes. No agents, no rules to migrate.",{"title":348,"text":349},"Review historical findings","Historical visibility follows within 15 minutes, including the app and OAuth-grant inventory.",{"title":351,"text":352},"Set actions per user group","Choose block, quarantine or tag inline per group, starting with finance and executives.",{"title":354,"text":355},"Decide what to consolidate","After a few weeks, compare what each layer caught and decide whether the overlap justifies the spend.",{"t":357,"title":358,"quote":3,"caseStudy":3},"proof","What Sentaro customers report",[360,363,366,369,372,375,378],{"q":361,"a":362},"Is Sentaro better than Hornetsecurity?","Yes, for EU teams on Microsoft 365 or Google Workspace whose main risk is BEC, vendor fraud, QR phishing and OAuth app abuse. Sentaro connects over API in four minutes with no MX change, includes app and shadow-AI discovery, supports Google Workspace, and costs $6 per protected account per month with every feature included. Prices in USD. Hornetsecurity may still fit if you want archiving and backup bundled in one suite.",{"q":364,"a":365},"Is Hornetsecurity owned by Proofpoint?","Yes. Proofpoint announced the acquisition on 15 May 2025 and completed it on 8 December 2025 for $1.8B in total consideration. Hornetsecurity now operates as Proofpoint’s dedicated MSP and SMB business unit, led by founder Daniel Hofmann. Proofpoint itself has been owned by Thoma Bravo since August 2021.",{"q":367,"a":368},"Is Sentaro a Hornetsecurity alternative?","Yes, and it is our pick for the threat-detection job. Sentaro replaces or adds to the threat-detection part of 365 Total Protection, especially for BEC, vendor compromise, QR phishing and OAuth app risk. It does not replace Hornetsecurity’s archiving, Microsoft 365 backup, encryption, DMARC management or awareness training. Sentaro is designed to run alongside existing filtering.",{"q":370,"a":371},"Does Hornetsecurity support Google Workspace?","Hornetsecurity’s 365 Total Protection material is focused on Microsoft 365, and we could not confirm Google Workspace support from its own pages as of October 2026. Ask the vendor directly. Sentaro supports both Microsoft 365 and Google Workspace over API.",{"q":373,"a":374},"How much does Hornetsecurity cost compared with Sentaro?","Hornetsecurity does not publish prices; you request a quote, usually through a partner. Sentaro costs $6 per protected account per month, or $68 per account per year, and the first account is free. Prices in USD. Shared aliases and distribution lists do not count as protected accounts.",{"q":376,"a":377},"Can I run Sentaro and Hornetsecurity together?","Yes. Sentaro connects over the Microsoft 365 or Google Workspace API and does not change MX records, so it can sit behind Hornetsecurity’s filtering. That lets you measure what each layer catches on live traffic before deciding whether to consolidate.",{"q":379,"a":380},"Where is Sentaro hosted?","Sentaro is hosted in Sweden on Microsoft Azure and is EU-sovereign by design. The full subprocessor list, including database hosting in Frankfurt, is in the DPA at \u002Fen\u002Flegal\u002Fdpa. SOC 2 and ISO 27001 certification is in progress, with an evidence pack available on request.",[382,385,388,391,394],{"label":383,"url":384},"Hornetsecurity: 365 Total Protection plans and features","https:\u002F\u002Fwww.hornetsecurity.com\u002Fen\u002F365-total-protection\u002F",{"label":386,"url":387},"Hornetsecurity: email security modes (MX, API, hybrid)","https:\u002F\u002Fwww.hornetsecurity.com\u002Fen\u002Femail-security-modes\u002F",{"label":389,"url":390},"Proofpoint press release: completes acquisition of Hornetsecurity (8 Dec 2025; ownership, $1.8B, ARR, customers, MSPs)","https:\u002F\u002Fwww.proofpoint.com\u002Fus\u002Fnewsroom\u002Fpress-releases\u002Fproofpoint-completes-acquisition-hornetsecurity",{"label":392,"url":393},"Proofpoint: definitive agreement to acquire Hornetsecurity (15 May 2025)","https:\u002F\u002Fwww.proofpoint.com\u002Fus\u002Fnewsroom\u002Fpress-releases\u002Fproofpoint-signs-definitive-agreement-acquire-hornetsecurity",{"label":395,"url":396},"Thoma Bravo: completes acquisition of Proofpoint (2021)","https:\u002F\u002Fwww.thomabravo.com\u002Fpress-releases\u002Fthoma-bravo-completes-acquisition-of-proofpoint","Comparison based on publicly available information as of 18 October 2026. Product capabilities change; check each vendor’s current documentation. Trademarks belong to their owners. Corrections: contact Sentaro.",[399,402,405,408,411,414,417,420],{"label":400,"to":401},"Hornetsecurity alternatives","\u002Fen\u002Falternatives\u002Fhornetsecurity-alternatives",{"label":403,"to":404},"Sentaro vs Proofpoint","\u002Fen\u002Fcompare\u002Fsentaro-vs-proofpoint",{"label":406,"to":407},"European email security alternatives","\u002Fen\u002Falternatives\u002Feuropean-email-security-alternatives",{"label":409,"to":410},"Email security for MSPs","\u002Fen\u002Femail-security-for-msps",{"label":412,"to":413},"NIS2 and email security","\u002Fen\u002Fcompliance\u002Fnis2",{"label":415,"to":416},"MX gateway vs API deployment","\u002Fen\u002Fcompare\u002Fapi-email-security-vs-secure-email-gateway",{"label":418,"to":419},"Protecting Microsoft 365 without a gateway","\u002Fen\u002Fplatforms\u002Fmicrosoft-365-email-security",{"label":421,"to":422},"Compare Sentaro with others","\u002Fen\u002Fcompare",{"title":424,"note":425},"Add a detection layer without touching MX.","Connect Microsoft 365 or Google Workspace in four minutes. The first account is free.",{"links":427,"only":448,"labels":452},[428,431,434,436,438,439,442,445],{"label":429,"to":430},"Cybersäkerhetslagen","\u002Fen\u002Fcompliance\u002Fcybersakerhetslagen",{"label":432,"to":433},"DORA","\u002Fen\u002Fcompliance\u002Fdora",{"label":435,"to":413},"NIS2",{"label":105,"to":437},"\u002Fen\u002Fplatforms\u002Fgoogle-workspace-email-security",{"label":100,"to":419},{"label":440,"to":441},"BEC","\u002Fen\u002Fsolutions\u002Fbec",{"label":443,"to":444},"Shadow IT","\u002Fen\u002Fsolutions\u002Fshadow-it",{"label":446,"to":447},"DMARC","\u002Fen\u002Fglossary\u002Fdmarc",{"5":449,"6":450,"7":451},[419,447,437],[413,430,433],[441,444],{},1792761723292]