Barracuda
Barracuda provides email security, backup, and network protection solutions. Their email security gateway filters spam, malware, and phishing attempts before they reach the firm's …
What is Barracuda?
Barracuda provides email security, backup, and network protection solutions. Their email security gateway filters spam, malware, and phishing attempts before they reach the firm's inbox.
Common Use Cases for Law Firms
- Filter spam and phishing emails targeting the firm's attorneys
- Block malware attachments before they reach user inboxes
- Archive emails for compliance and litigation hold requirements
- Protect against business email compromise (BEC) attacks
How We Detect It
Market Overview
Among personal injury law firms, Barracuda has been adopted by 925 firms (2.6% adoption rate) as a email security solution. Adopters score 41.9 SI on average, +13.6 points higher than firms without it, suggesting Barracuda correlates with broader technology investment. The heaviest adoption comes from the Conversion-Focused Firms segment (3.5%), followed by Minimalist Tech Users (1.9%). The most common co-occurring tools are Microsoft 365 (found on 81.6% of Barracuda adopters) and WordPress (65.4%).
Get connected
Request an introduction from Top Dog Law — we'll make the connection on your behalf.
Adoption by State
ME
—
VT
—
NH
—
WA
—
MT
—
ND
—
MN
—
WI
—
MI
—
NY
—
MA
—
RI
—
OR
—
ID
—
WY
—
SD
—
IA
—
IL
—
IN
—
OH
—
PA
—
NJ
—
CT
—
CA
—
NV
—
CO
—
NE
—
MO
—
KY
—
WV
—
VA
—
MD
—
DE
—
DC
—
AZ
—
UT
—
KS
—
AR
—
TN
—
NC
—
SC
—
NM
—
OK
—
LA
—
MS
—
AL
—
GA
—
AK
—
HI
—
TX
—
FL
—
0
—
Adoption by Segment
which segments use Barracuda most
Commonly Paired With
co-occurrence
Barracuda Best Practices
1
Configure Barracuda's email archiving with litigation hold before any active litigation requires it — not during. Barracuda Message Archiver creates a tamper-proof, indexed copy of all firm email independent of your mail server. The critical configuration step most firms skip: setting up legal hold policies that prevent any email matching a custodian or keyword set from being deleted. When opposing counsel issues a litigation hold or your firm faces a malpractice claim, you need to produce email records within days, not weeks. Doing this setup in response to a demand is too late — the archive only captures forward from deployment. The day you install Barracuda is the day your retention clock starts.
2
Enable Barracuda's Advanced Threat Protection (ATP) for attachment sandboxing, not just spam scoring. Barracuda's base configuration filters on reputation and signatures — known bad senders and known malware. ATP goes further: unknown attachments (PDFs, Word docs, executables) are detonated in a cloud sandbox and analyzed for behavior before delivery to your inbox. PI firms receive a constant stream of documents from unknown parties — medical providers, insurance companies, opposing firms. Any of these could carry a malicious macro or embedded exploit. ATP adds roughly $2-4/user/month to Barracuda's cost and is the difference between basic filtering and actual threat protection.
3
Set up Barracuda's outbound email filtering to prevent staff from accidentally sending sensitive data to the wrong address. Barracuda filters inbound threats, but outbound filtering catches a different risk category: accidental data leakage. Configure outbound policies to quarantine emails with Social Security numbers, medical record numbers, or large attachments going to personal email addresses (Gmail, Yahoo, Hotmail). A paralegal who misaddresses an email containing a client's medical history creates a breach notification obligation — and potentially a bar complaint. The outbound policy catches this before delivery.
4
Use Barracuda's spear phishing protection to train it on your firm's org chart and executive names. Spear phishing attacks targeting law firms typically impersonate managing partners, bookkeepers, or IT staff to authorize wire transfers or credential resets. Barracuda's Impersonation Protection can be configured with a list of your firm's executive names and email addresses so it flags any inbound email that spoofs those identities. Add your top 10 staff names to this list on day one. A bookkeeper who receives a wire transfer request appearing to come from the managing partner's name (but from an external domain) should see a prominent Barracuda warning banner, not a clean-looking email.
5
Schedule a monthly test of Barracuda's email continuity by actually using the backup webmail interface. Barracuda Email Continuity spools your email independently and provides a backup webmail interface when your primary mail system is down. This only saves you during an outage if your staff knows it exists and can access it. Create a simple one-page runcard: what URL to visit, how to log in, and how to send and receive during an outage. Send it to all staff when you deploy Barracuda and again annually. A tested business continuity plan is an asset; an untested one is a false sense of security.
Alternatives to Barracuda
1
Mimecast — Barracuda's closest feature-equivalent competitor, with particular strength in email continuity and large-file secure sending. Mimecast's brand is more prominent in enterprise security conversations, which can matter when demonstrating compliance posture to large referral partners or institutional clients. Mimecast's threat intelligence network is generally regarded as deeper. The trade-off: Mimecast typically prices higher than Barracuda, especially when archiving and continuity are factored in. For PI firms already using other Barracuda products (firewalls, backup), Barracuda's bundled pricing creates real cost advantages that Mimecast can't match.
2
Proofpoint Essentials — Proofpoint's SMB tier is often considered the strongest pure-play email security option at this price point, with superior targeted attack detection. Where Barracuda is an all-in-one email management platform (security + archiving + continuity), Proofpoint Essentials focuses narrowly on threat protection. If your firm already has separate archiving and backup infrastructure and just needs best-in-class filtering, Proofpoint is worth evaluating. If you need the full stack in one vendor, Barracuda's integration wins.
3
Microsoft Defender for Office 365 — For firms on Microsoft 365 Business Premium, Defender for Office 365 Plan 1 is included and covers Safe Links, Safe Attachments, and anti-phishing. It's not as deep as Barracuda on archiving and continuity, but it eliminates the cost of a separate email security vendor for firms that have adequately tiered Microsoft licensing. The decision point: if you're paying for Microsoft 365 Business Basic or Standard, you're not getting Defender's advanced protection — in which case Barracuda fills a real gap.
4
SpamTitan (TitanHQ) — A cloud-based email filtering solution that targets small-to-mid-size businesses with straightforward pricing (typically $1-2/user/month) and no hardware requirements. SpamTitan lacks Barracuda's archiving and continuity features but provides solid filtering for firms that only need spam and malware protection. Frequently sold through MSPs (managed service providers) as a white-labeled product. If your IT support is an MSP, ask whether they offer SpamTitan or a comparable product in their managed security bundle before paying for Barracuda separately.
Barracuda Power Moves
1
Use Barracuda's email archiving search capability to instantly produce billing records during fee disputes. Attorneys who use Barracuda's archive as a searchable communication log can pull every email between a specific attorney and a client in minutes, with timestamps. This is invaluable during fee disputes, bar complaints, or client termination situations where the question of "what did we tell the client" arises. Train your managing partner and office manager to use the archive search portal directly — this doesn't need to go through IT every time someone needs to reconstruct a communication history.
2
Set up Barracuda's DMARC reporting to detect when someone is spoofing your firm's domain to attack your clients. Barracuda's outbound email authentication tools support DMARC enforcement. Once you've configured SPF, DKIM, and DMARC for your firm's domain, the DMARC aggregate reports show you who is sending email using your domain — including attackers who spoof your domain to phish your clients or referral partners. A PI firm's clients are high-value phishing targets (they're expecting communications about settlements and legal fees). Finding out that your domain is being spoofed before a client calls complaining about a fake wire transfer request is significantly better than finding out after.
3
Configure Barracuda to automatically quarantine any email containing a competing firm's case management credentials pattern. This sounds exotic but is practical: phishing campaigns targeting law firm staff frequently ask them to re-enter their Clio, MyCase, or Filevine credentials by spoofing a system notification. Create a Barracuda content filter that quarantines emails containing phrases like "verify your Clio account," "your MyCase password has expired," or "confirm your Filevine login" sent from external domains. Your staff will never receive a legitimate password reset from these platforms via email asking for credentials — it's always phishing.
4
Export your Barracuda threat block logs to include in your cyber liability insurance application. Cyber insurers increasingly require evidence of active email security controls before issuing or renewing policies. Barracuda's reporting dashboard can generate threat summary reports (blocked phishing, blocked malware, ATP detonations) over any date range. Run a 12-month threat summary, save it as a PDF, and include it in your next insurance renewal. Documented security controls correlate with lower premiums and broader coverage terms — the 5 minutes to run this report can save hundreds of dollars per year.
Is your firm using Barracuda?
Claim your firm profile to verify your tech stack and access premium competitive intelligence. Not listed yet? Apply to get added.
Top Firms Using Barracuda
by sophistication index
| # | Firm | Segment | Attorneys | SI Score | Grade |
|---|---|---|---|---|---|
| 1 |
|
Conversion-Focused Firms | 147 | 93.894 | A+ |
| 2 |
|
Retention Innovators | 38 | 93.093 | A+ |
| 3 |
|
Retention Innovators | 1 | 92.893 | A+ |
| 4 |
|
Retention Innovators | 1 | 92.893 | A+ |
| 5 |
|
Retention Innovators | 33 | 92.092 | A+ |
| 6 |
|
Retention Innovators | 12 | 92.092 | A+ |
| 7 |
|
Retention Innovators | 29 | 92.092 | A+ |
| 8 |
|
Conversion-Focused Firms | 20 | 92.092 | A+ |
| 9 |
|
Retention Innovators | 5 | 91.892 | A+ |
| 10 |
|
Retention Innovators | 22 | 91.892 | A+ |
| 11 |
|
Retention Innovators | 1 | 91.091 | A+ |
| 12 |
|
Retention Innovators | 12 | 91.091 | A+ |
| 13 |
|
Retention Innovators | 64 | 91.091 | A+ |
| 14 |
|
Retention Innovators | 1 | 91.091 | A+ |
| 15 |
|
Retention Innovators | 1 | 90.891 | A+ |
| 16 |
|
Retention Innovators | 9 | 90.090 | A+ |
| 17 |
|
Retention Innovators | 8 | 90.090 | A+ |
| 18 |
|
Retention Innovators | 1 | 88.088 | A+ |
| 19 |
|
Retention Innovators | 1 | 86.586 | A+ |
| 20 |
|
Conversion-Focused Firms | 17 | 86.386 | A+ |
