Case studies

Costa Group Migrates Email Security from Proofpoint to Microsoft Defender for Office 365

Costa Group is Australia’s largest grower, packer, and marketer of fresh fruit and vegetables, operating a Microsoft 365 environment with more than 1,700 identity and mailbox objects across the business. Following a recent licensing uplift from Microsoft 365 E3 to E5, Costa set a vision to become cloud-native on Microsoft security tooling — consolidating onto a single-vendor model.

Challenges

Costa Group’s recent licensing uplift from Microsoft 365 E3 to E5 unlocked Microsoft Defender for Office 365 (MDO) as part of the E5 entitlement — capability that fully overlapped with Costa’s existing Proofpoint Enterprise Email Security investment, costing approximately AUD $500,000 per year in third-party licensing. Continuing to run both products created cost duplication with no incremental security benefit.

Threat protection was also split across multiple consoles, limiting visibility of malicious links, clicks, and end-user reported incidents and forcing investigators to correlate data across two separate platforms. With more than 1,700 mailboxes in the environment, any migration approach would also need to safely retire Proofpoint without disrupting mail flow for the business.

Solution

Oreta designed a tailored email security migration from Proofpoint to Microsoft Defender for Office 365, with a phased cutover protecting more than 1,700 identity and mailbox objects. The full MDO threat-policy stack was configured — anti-phishing, anti-spam, anti-malware, Safe Links, and Safe Attachments — and tuned to Costa’s risk profile and mail-flow requirements.

Attack Simulation Training was enabled to build user resilience to phishing, and Costa’s IT team was upskilled on policy tuning, phishing awareness, and incident triage from a single Defender console. Following a successful cutover, Proofpoint was decommissioned and email threat protection was consolidated into the Microsoft 365 E5 estate as a single-vendor, cloud-native security model.

Outcome

  • Approximately AUD $500,000 in annual savings from retiring Proofpoint Enterprise Email Security licensing.
  • 1,700+ mailboxes migrated to MDO with zero mail-flow disruption.
  • Single-vendor, cloud-native email security model aligned to Microsoft 365 E5.
  • Unified threat-protection visibility across email, identity, endpoint, and cloud apps in one Defender console.

Other Case Studies

Let's talk