Email-domain authentication
Identify legitimate sending services, review SPF and DKIM, and plan the appropriate DMARC policy. Test agreed changes so ordinary business mail continues to work.
Email protection and account security
Email and Microsoft 365 security for small businesses
A supplier payment, a customer invoice, or a shared document can become an opening for an impostor. We review the relevant email and account settings, explain the gaps, and implement the improvements you authorize.
Focused review or implementation. Price confirmed after scoping.
Choose the work you need
Protect the domain, the mailbox, and the account.
We select the controls around your environment and the problem you want addressed. Each area below can form part of an agreed project.
Microsoft 365 security assessment
Review MFA coverage, administrator roles, mailbox forwarding, inbox rules, sharing settings, and available audit records. Find out which settings need attention.
Agreed security improvements
Implement authorized settings, check the result, and document the handoff. Work can address sign-in protection, excessive access, forwarding, or sharing within the agreed scope.
What your business receives
Know what was checked and what changed.
- A defined list of accounts, domains, settings, and sending services reviewed
- Plain-English findings and priorities from the agreed review
- Configuration changes and verification results for implementation work
- A handoff identifying remaining actions and who is responsible
From request to handoff
A focused project with clear responsibilities.
Tell us what needs attention
Describe the payment, mailbox, domain, or account concern and the systems involved.
Confirm the scope and price
Agree the review, any implementation, required permissions, testing, and delivery schedule.
Carry out the authorized work
Our team performs the agreed checks or changes and coordinates with your email administrator.
Review the result
Receive findings or change records, verification results, and the remaining follow-up actions.
Support the people using the accounts
Give employees a clear way to verify requests.
Technical settings support the decisions staff make about payments, sign-ins, and documents. Pair a focused project with employee security awareness training or managed phishing simulations when your team needs practice.
For examples, read about Microsoft 365 device-code phishing and verifying freight payment changes.
Before you hire us
Email-security service questions
Can we hire you to make the changes?
Yes. We agree the settings, systems, permissions, testing, price, and handoff before implementing changes. You can also have your existing IT provider carry out the recommendations.
What does a Microsoft 365 security assessment cover?
The focused review can cover sign-in protection, administrator access, mailbox forwarding and inbox rules, external sharing, and available audit records. We confirm the selected controls and evidence before work starts. For a wider review including devices, backups, and incident readiness, choose the Business Security Baseline.
How much does email-security work cost?
We quote after confirming the domains, email-sending services, Microsoft 365 environment, and changes required. Review and implementation are priced explicitly so you can choose the work you need.
Will you need access to our accounts?
Internal checks and configuration work require agreed authorization and appropriate administrative access. We coordinate the access method with you or your IT provider before starting. The separate free Exposure Review uses public information only.
Does DMARC prevent every impersonation email?
DMARC helps receiving systems evaluate unauthorized use of your sending domain. Lookalike domains and messages from compromised real accounts need additional safeguards, including account protection and employee verification procedures.
Do we need to buy an assessment first?
A full Business Security Baseline is not required for a focused email-security project. We first confirm the environment and the issue you want addressed, then scope the appropriate review or implementation.
Put your email-security question in front of our team.
Tell us the environment and the work you want handled. We will confirm the appropriate scope and price.
Request an Email-Security Scope
For a first look at public signals, start the free Exposure Review.