Cyber security
Email security and anti-phishing
Email remains the main way in. Not because filters are weak, but because a well-written message sent at the right moment fools a busy person. Both sides need work.
What is included
Advanced filtering
Blocking dangerous messages before they reach the inbox, including links that turn malicious after delivery.
SPF, DKIM and DMARC
Configuring the domain correctly so nobody can send mail in your company's name. It also protects deliverability.
Fraud protection
Detecting messages that impersonate management or a supplier in order to obtain a payment or a change of bank details.
Team training
Short sessions and phishing simulations. People learn from concrete examples, not from slide decks.
Incident procedure
What someone who clicked should do. Speed of reaction matters more than blame.
Exposure report
How many messages were blocked, how the team responded to simulations, where attention is still needed.
Bank-details fraud
The most expensive attack type for small companies involves no malware at all. Someone watches a conversation, then sends an invoice with different bank details at just the right moment, from an address almost identical to the real supplier's.
Filters help, but the real defence is a simple procedure: any change of bank details is confirmed by phone, on a number known in advance. We agree it together and train for it.
Domain authentication
Without SPF, DKIM and DMARC configured correctly, anyone can send mail that appears to come from your company. Beyond the fraud risk, it damages your domain reputation and pushes legitimate mail into spam.
Frequently asked questions
01We have Microsoft 365, it already filters.
It does, and it is decent. What is usually missing is correct domain configuration, impersonation fraud protection and the training side. We check what you have and add only what is missing.
02Don't phishing simulations upset staff?
It depends how they are run. The point is not to catch someone out, but for people to recognise the pattern. Results are discussed in aggregate, not by name.
Let's work out exactly what you need.
We look at the current situation, tell you what is worth changing and what can wait, then you get a quote with clear figures.
Request a conversation
Write us a few lines about the situation in your company and we will come back with a concrete proposal.
Other services
We cover the whole chain, from infrastructure down to repairing a single device.
Cyber security
Managed protection for workstations, servers and accounts — with visibility into what is happening, not just an antivirus installed.
View service
Backup and disaster recovery
Backups on the 3-2-1 rule, with periodically tested restores — the one measure that holds when everything else gives way.
View service
IT security audit
An honest assessment of where you stand: what is exposed, how likely it is to be exploited, and what to fix first.
View service