A pattern I noticed in testing was that Cyren was good at finding cases of unique spam or spam that the other checks didn't find. It missed some of the most obvious cases of spam that thankfully the other checks were catching. This might be the "zero hour" behavior of Cyren, good at catching *new* stuff. We did some testing and noticed MS and Cyren trading blows on what they were finding. Plenty of cases where each found spam that the other didn't. I believe we have some Cyren stuff being announced soon that Tim teased in another thread, so keep your eyes out for that.
As far as delivery delay goes, it should have no impact on the checks. It's there to give the file a chance to sit on the disk before we touch it with checks giving the chance for AV's and the OS to touch the file in whatever ways it wants. We do the delay and nothing else and then afterwards each check is done one at a time.
It's easy to say just buy both, but based on the research I did, having both MS and Cyren does indeed provide a bigger net that catches more than each individually.
Matt Petty
Senior Software Developer
SmarterTools Inc.
www.smartertools.com