Microsoft 365
Exchange Online & Email Security
Email is still how the money moves and how the attacks arrive. Two separate problems live here: your mail reaching the people you send it to, and nobody else being able to send mail as you.
The problem
Anyone can send email as your business, and you would not know
Without SPF, DKIM and an enforced DMARC policy, there is nothing stopping a stranger sending an invoice that appears to come from your domain, to your own customers. Our own survey of Ocala business domains found the majority exposed; the figures and the method are published in the research section of this site. The same gaps also send your genuine mail to spam, which most owners notice first and misdiagnose as a problem with their provider.
Our approach
Authentication published, enforced, and monitored
SPF, DKIM and DMARC published correctly, moved from monitoring to enforcement once the reports show nothing legitimate is being caught, and kept under review. On the receiving side, mail flow and Defender policies tuned so phishing is caught without quarantining the quotes you are waiting on.
What you get
Included as standard
Not an upsell list. These are the things that make the difference between a service you pay for and a service that works.
- SPF, DKIM and DMARC published and enforced, not just present
- DMARC reports monitored so enforcement does not break legitimate senders
- Your marketing, invoicing and CRM senders authorised properly
- External sender warnings for staff
- Anti-phishing and impersonation protection tuned to your named executives
- Mailbox forwarding and transport rules audited
- Shared mailboxes and distribution groups tidied
- Deliverability improved as a side effect of doing it correctly
How we work
What actually happens
- 1
Measure
Read the DNS as it stands and score it. This is the same check the free tool on this site runs.
- 2
Publish
Records added for every legitimate sender, starting in monitoring mode so nothing breaks silently.
- 3
Watch
Read the DMARC reports for a period. This is the step most people skip, and it is the one that stops enforcement blocking your own invoices.
- 4
Enforce
Move to quarantine, then reject, once the evidence says it is safe.
Technologies
What we build on
Vendor-neutral where it matters. We will tell you when the cheaper option is the right one.
- Exchange Online
- SPF, DKIM and DMARC
- Exchange Online Protection
- Microsoft Defender for Office 365
- Mail flow and transport rules
Questions
Exchange Online questions
How do we know whether we are exposed right now?
Put your domain into the free email-security check on this site. It reads the same public DNS records every mail server on the internet reads, tells you what is missing, and costs nothing. If it comes back clean, you do not need us for this.
Will enforcing DMARC stop our newsletters or invoicing system sending?
It will if you enforce before checking, which is why enforcement is never the first step. The records go up in monitoring mode, the reports are read to find every legitimate sender, and only then does the policy tighten. Skipping that middle step is the usual cause of the horror stories.
Our email keeps going to customers' spam folders. Is this the same problem?
Very often, yes. Missing or broken authentication is one of the first things a receiving mail server holds against you. Fixing it for security reasons tends to fix deliverability at the same time.
Related
Often paired with
Microsoft 365 Security
The tenant settings that decide whether a stolen password becomes an incident — reviewed, tightened and documented.
Learn moreCybersecurity Services
Layered defence built around how small businesses actually get breached: email, credentials and unpatched endpoints.
Learn moreMicrosoft 365 Management
Licensing, hardening and day-to-day administration of Microsoft 365 — including the security settings that ship switched off.
Learn more
Ready to secure your business?
A free assessment: we review your network, backups, Microsoft 365 settings and exposure, then hand you the findings in writing — whether or not you hire us.