Microsoft 365 security for UK businesses

Secure Microsoft 365, from the inbox to every login.

Fixed-price email and identity security for growing UK businesses, from former Microsoft escalations engineers. Plain English. A written report your team can act on.

Check your domain free
Or book a 15-minute call

Free. Takes about 30 seconds. No sign-up to see your result.

  • Former Microsoft escalations engineers
  • 250+ single sign-on applications configured in the financial sector
  • 500+ domains taken through DMARC enforcement and monitoring in the financial sector

DMARC is the setting that tells inboxes what to do with email that fakes your domain.

Two doors, one team

Attackers get into a business through two doors. We secure both.

Email protection

  • Stop people sending email as your company.
  • Get your genuine email delivered, not sent to junk.
  • Meet Google, Yahoo and Microsoft sender requirements.
For your IT team
  • SPF (the list of servers allowed to send for your domain), DKIM (a digital signature on each email) and DMARC for every domain and subdomain
  • Staged DMARC enforcement to p=reject, where fake email is blocked
  • DNS, mail routing and BIMI readiness (your logo in the inbox)
  • Every platform that sends for you: Microsoft 365, Google Workspace, CRM, marketing and transactional tools
  • Sender reputation and blocklists

Identity and access

  • Make a stolen password useless.
  • Cut standing admin rights.
  • Know who and what can sign in to your Microsoft 365.
For your IT team
  • Read-only review of Microsoft Entra ID (Microsoft's sign-in system for Microsoft 365) and Exchange Online
  • Conditional Access design and gaps; MFA (a second check at sign-in) coverage and methods
  • Privileged roles, Global Admin sprawl, emergency access accounts and PIM (admin rights switched on only when needed)
  • Stale accounts, guests, app registrations, consent and legacy authentication
  • Mailbox forwarding, inbox rules, transport rules and connectors
Book a 15-minute call
One thing broken?

You don't need a full review to get started.

Name the one problem, such as a DMARC record, a gap in your sign-in rules (Conditional Access) or a rollout of sign-in checks (MFA) for a small team. We fix it for a fixed price and send a one-page summary of what changed.

Book a 15-minute call
How it works

Fixed scope. Written, plain-English results.

1

A 15-minute call

Tell us your domains or tenant size and the one thing worrying you.

2

A fixed scope and price, the same day

In writing, with delivery time and payment terms.

3

Delivered around your team

Work is asynchronous. You get a written report in plain English, with technical detail on request.

4

Keep it secure

After a project, optional monthly monitoring.

Book a 15-minute call
Who is behind it

Two former Microsoft escalations engineers.

Rosa Castillo Manuel is a former Microsoft escalations engineer. In the financial sector she owned email in Exchange Online, configured 250+ single sign-on applications and took 500+ domains through DMARC enforcement and monitoring. Her co-founder is also a former Microsoft escalations engineer, with deep expertise across Microsoft Entra.

FAQ

Questions we get asked

Do you need access to our systems?

The identity assessment is read-only. The email audit needs read access to your DNS records and a list of what sends email for you.

Will you change anything without asking?

No. Assessments change nothing. Fixes are scoped and agreed in writing first.

How much does it cost?

Fixed price, agreed after a 15-minute call, once we know your domains, sending platforms and number of users. No surprise invoices.

How long does it take?

Audits and assessments take 5 to 10 working days. A DMARC enforcement project takes about 30 days. A single named fix takes 2 to 3 working days.

Do you work with MSPs?

Yes. We take on email security and identity work as a white-label, fixed-price partner, delivered asynchronously. Book a call and we'll talk it through.

We're a small business. Is this relevant?

Yes. If one thing is broken, a single named fix is the quickest way to start. Larger tenants and multiple domains are scoped on the call.

Tell us the one thing that's worrying you.

We'll tell you straight whether we can help, and send a fixed scope the same day.

Book a 15-minute call

Fixed price. No surprise invoices.