- Home
- Architecture & Hardening
- Email security
Close the inbox to impostors,
and make reporting easy.
SPF, DKIM and DMARC taken all the way to enforcement, gateway and mailbox controls tuned against modern phishing, business email compromise defences, and a reporting loop your staff will actually use.
Email is still where most attacks start.
Phishing, credential theft and business email compromise all arrive in the inbox. Some spoof your domain to your customers and suppliers. Some come from a real supplier's account that has already been taken over. Some carry no malware at all, just a convincing request to change bank details.
We harden every layer. Domain authentication stops others sending as you. Gateway and mailbox controls catch more of what gets through. Finance and approval workflows stop a convincing email from moving money on its own. And a simple reporting path turns your staff into sensors, with reported messages triaged quickly so they see that reporting matters.
- SPF, DKIM and DMARC deployed and taken from monitoring to enforcement, including subdomains and parked domains
- A secure email gateway and mailbox security review, tuned against impersonation and phishing
- Business email compromise controls: mailbox audit logging, forwarding-rule detection, MFA and sign-in alerting
- Payment and vendor-change verification workflows for finance teams
- A user reporting button and triage process, with feedback to the reporter
- A compromised-mailbox response runbook
Four steps, from review to enforced.
Review
We assess domain authentication, gateway and mailbox settings, forwarding rules, audit logging and how reported messages are handled today.
Authenticate your domains
We inventory every service that sends as you, fix SPF and DKIM, and move DMARC from monitoring to enforcement in stages, watching reports at each step.
Tune the defences
Gateway and mailbox protections are tuned for impersonation, malicious links and attachments, and external sender warnings. BEC controls go in alongside.
Close the loop
A one-click reporting path, a triage process, finance verification workflows and a runbook for when a mailbox is compromised.
Four layers of email defence.
Authentication
SPF, DKIM and DMARC enforcement, subdomain and parked-domain protection, report monitoring.
Gateway and mailbox
Anti-phishing and anti-impersonation policy, link and attachment protection, post-delivery removal, quarantine handling.
Business email compromise
Suspicious sign-in and forwarding-rule detection, mailbox auditing, payment verification workflows.
People
Easy reporting, fast triage and feedback, backed by phishing simulation and awareness training.
Who it is for
Any organization that moves money on email instructions, has had its domain spoofed, or has DMARC published in monitoring mode and never enforced. Especially finance, legal and professional services teams who deal with many suppliers.
- Phishing simulation, measure how staff respond
- SKULD security awareness, training that changes behaviour
- MSOC, round-the-clock triage of reported and suspicious mail
- Microsoft security assessment, the full Microsoft 365 tenant reviewed
From real engagements.
Suspected BEC, correctly cleared
A suspected business email compromise was investigated and correctly cleared by MSOC.
Client identities withheld pending permission. Named references and logos available on request.
What buyers ask.
We already have a secure email gateway.
A gateway is one layer. Business email compromise often has no malware or link to catch, and comes from a real, compromised supplier account. That is why verification workflows and mailbox monitoring sit alongside it.
We published DMARC years ago.
In monitoring mode, most likely. Monitoring tells you who is spoofing you; it does not stop them. We take it to enforcement in stages, without blocking your own legitimate mail.
Will enforcing DMARC break our legitimate email?
Not if every sending service is found first. We inventory the marketing platforms, ticketing systems and other services that send as you, fix them, and only then tighten the policy.
Our staff already do phishing training.
Training helps people spot a bad email. What matters next is how easily they can report it and how quickly someone acts. We build that reporting loop.
Stop others sending as you.
Put an engineer on a call to scope an email security review. No charge, no commitment.