Spam and virus filtering
Barracuda Email Protection privacy rating
Email security suite from Barracuda Networks that filters spam, phishing and malware through a cloud gateway or by API for Microsoft 365 and Google Workspace. It adds account takeover detection, encryption, archiving and backup.
Summary
Barracuda Email Protection scores 31 out of 100 (grade F) on the spam and virus filtering criteria. It meets 1 of 8 criteria: tells users about requests. It partly meets no ads or data sales, independent audit, transparency report and TLS configuration. It does not meet open source, no trackers or telemetry and security headers. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade B and Mozilla HTTP Observatory grade D-.
Score 31 out of 100. How scoring works
Criteria
- No
-
No
No trackers or telemetry Weight 3 of 3
Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?
The website loads Google Tag Manager, Adobe tags, Marketo and Demandbase, and the privacy notice describes cookies used for behavior-based advertising.
-
Partial
No ads or data sales Weight 2 of 3
Is the product funded without advertising, ad targeting or selling user data?
Paid business service with no ads, and Barracuda says it does not sell personal data for money, but website data is shared with advertising networks for targeted advertising.
-
Partial
Independent audit Weight 2 of 3
Has an independent security or privacy audit been published within the last three years?
Barracuda offers SOC 2 reports on request and holds ISO 27001 certification for Cloud-to-Cloud Backup, but no audit report is public and Email Protection is not named in scope.
-
Partial
Transparency report Weight 2 of 3
Does the provider regularly publish how many government and legal requests it receives and how it responds?
Legal process guidelines require a search warrant for US requests for customer data and describe challenges to overbroad requests, but no request counts are published.
-
Yes
Tells users about requests Weight 1 of 3
Does the provider promise to tell users about requests for their data, unless a court forbids it?
Barracuda states it notifies customers when their data is sought by legal process, unless notice is prohibited by law or a court order or would create a risk of harm.
Automated tests
-
Partial
TLS configuration Weight 2 of 3
Does the website pass the Qualys SSL Labs test with a grade of A or better?
Grade B
-
No
Security headers Weight 1 of 3
Does the website pass the Mozilla HTTP Observatory test with a grade of A or better?
Grade D- (25/100+)
-
Not tested yet
Modern web standards Weight 1 of 3
Does the website score 90% or higher on the Internet.nl website test?
Not tested yet.