TrustLayer as a Barracuda alternative.
Barracuda does mid-market security well, and we're not going to pretend otherwise. This page is for UK public sector, healthcare, education and regulated finance buyers, where the vendor's country is a requirement rather than a preference. And for anyone who wants four layers built as one platform, bought on a contract they already have.
Four real differences.
Barracuda sells email protection, web filtering, SASE, a WAF, backup, and managed XDR, and has brought them under the BarracudaONE platform with a single console. That's a genuine consolidation and we're not going to claim otherwise.
The difference is shape. TrustLayer is four layers built to be four layers: Mail, Browse, Users and Posture, one policy model, priced per user per layer. Add a layer and the platform already knows about it. You are not assembling products that used to be separate; you are switching on more of the same one.
Whether that matters depends on how much of the estate you're buying. For one layer, it doesn't. For three, it does.
Barracuda is a US company owned by a US private equity firm, with UK offices and a global 24/7 support organisation. TrustLayer is a UK company, our platform is built here, and our primary support team is UK-based, with international customers covered out of hours through a separate team.
For some buyers that's sentiment. For public sector, healthcare, education and regulated finance buyers it's a procurement requirement.
Through BT, an MSP or a reseller, on the account and invoice you already have. Indicative per-user pricing is published, all at 750+ users, billed annually.
Barracuda publishes a US list price for its Advanced email tier through an online configurator. Premium and Premium Plus are quoted. UK reseller pricing on G-Cloud runs from £5.30 to £13.20 per user per month, September 2026.
Indefinite retention by default, configurable shorter, with four-eyes approval on retention changes and real-time audit of any non-party access. Export as .eml, .pst or .pdf, by any user from their own archive or by a privileged user across the whole archive. Leaving us is a supported operation, not a support ticket.
Seven rows that decide it.
Both deploy by API in minutes, both include impersonation protection, and both do web filtering and cloud app control. Barracuda wins on backup, network security and a managed SOC. The top four rows are where it is decided.
Where Barracuda is the better choice.
The 2023 Email Security Gateway compromise.
In May 2023 Barracuda disclosed CVE-2023-2868, a critical vulnerability in its Email Security Gateway appliances, exploited since at least October 2022 by a China-nexus espionage group tracked as UNC4841. Barracuda's guidance was to replace compromised appliances rather than patch them, and in August 2023 the FBI stated the patches had been ineffective. A second exploited vulnerability followed in December 2023.
Barracuda has published no ESG security advisory since January 2024, and its current products are SaaS rather than the appliances involved. We mention it because it illustrates a structural point: appliances have a failure mode that device-enforced cloud services don't, and the ESG line is where that played out.
