Melbourne CBD, Victoria · Operating Australia wide
Email security and MFA setup for small business
Email is the front door of your business and the way most small businesses get compromised. We configure the protections that matter — email authentication so your domain can't be easily impersonated, MFA so a stolen password isn't enough, and the quiet checks (forwarding rules, app access) that catch compromises early.
Who this is for
- Businesses on Microsoft 365 or Google Workspace set up in a hurry and never reviewed
- Teams without MFA enforced, or with 'optional' MFA nobody turned on
- Businesses whose clients act on emailed invoices and instructions
What's included
- SPF, DKIM, and DMARC configured with a staged rollout that doesn't break legitimate mail
- MFA enforced across mailboxes, starting with owners, admins, and finance
- Admin account separation and stale-access cleanup
- Mailbox forwarding rule and third-party app access audit
- Password manager rollout for the team
- Recovery settings verified and documented
What's not included
- Email platform subscription costs (paid directly to Microsoft/Google)
- Ongoing mailbox administration (see Ongoing Support)
- Spam filter products (recommended only where genuinely needed)
Pricing
Password manager & MFA setup from $450–$1,500; full email security work within the 14-Day Sprint ($7,500) or Microsoft 365 / Google Workspace setup (from $750).
Prices are in AUD. GST treatment to be confirmed; your written quote states the exact amount payable.
Get a written quoteCommon questions
Will DMARC break our email?
Not when staged properly. We start in monitoring mode (p=none), fix anything legitimate that fails, and only then move towards quarantine — so real mail keeps flowing while impersonation gets harder.
Is SMS-based MFA good enough?
An authenticator app or passkey is stronger, but any MFA beats none. We set up the strongest factor each platform and team can practically use, prioritising email, accounting, and admin accounts.
We use an IT provider — will you clash with them?
No. We work alongside IT providers regularly: we identify and prioritise, they implement where preferred, and you get independent verification that it's done.
Secure your email
Book a free 20-minute discovery call with Sam, or start with a 48-hour Quick Cyber Risk Review. No fear-based sales pressure, no inflated reports.
Or call Sam directly on 0435 315 894.