Services
Three services, and what they actually do
Each is described in full: what it covers, what it does not, how long it takes and what access it needs. The guides published on this site show the work itself.
01
Email authentication audit and remediation
The audit establishes the state of your SPF, DKIM and DMARC records, draws up the complete list of services sending email in your name, fixes what is missing, then moves DMARC to rejection in stages. Two to three weeks, most of it on my side: for you it is one scoping call and a handful of DNS changes.
Duration · Two to three weeks
02
Continuous monitoring and monthly report
Once the configuration is live, mail servers around the world send back a daily XML account of what was sent in your name. Monitoring means collecting them, reading them, and sending you a monthly summary in plain language: who tried to impersonate your domain, what was rejected, and what needs adjusting when you change tools.
Duration · Monthly, with no minimum term
03
Phishing awareness training for your staff
No technical control stops an employee replying to a message from a domain that merely looks like yours. This service is a measured simulation campaign, then a short session with no jargon: the three checks to make before approving a transfer or typing a password. The point is vigilance, not blame.
Duration · Three to four weeks, of which an hour and a half is your team's time
Fifteen minutes on the phone is enough to establish whether your domain is exposed, and the call commits you to nothing. Or check your domain yourself