HomeServices › Email Security

Productized security

Nearly every breach of a business your size starts in an inbox.

Not sophisticated malware — a convincing email. A fake invoice, a login page that looks right, a message that appears to come from your own finance director. The defences for this are largely included in what you already pay Microsoft, and largely switched off.

Included from the tier shown below. Month to month, cancel any time.

ResistCyber guide

What we actually do

Threat policies configured properly

Anti-phishing with impersonation protection for your executives and finance staff, safe attachment scanning, and link checking at the moment of click rather than only on delivery.

SPF, DKIM and DMARC

The records that stop someone sending mail as you. Deployed carefully — we inventory every legitimate sender first, then move through monitoring to quarantine to reject in stages.

Account compromise detection

Impossible-travel sign-ins, suspicious forwarding rules, mailbox delegation changes. Attackers frequently set a quiet forwarding rule and wait for an invoice worth intercepting.

Legacy protocol lockdown

Old mail protocols bypass modern authentication entirely. They stay on by default in most tenants and are a standard route in.

A person stays in the loop. A suspicious sign-in becomes a call from us, not a log entry. Business email compromise is caught by someone noticing, and noticing is a job.
What you need to have. Microsoft Defender for Office 365 Plan 1 is now included with Microsoft 365 Business Premium and E3. Attack simulation training and threat explorer require Plan 2. You keep your own Microsoft licensing — we do not resell it, and we will always tell you what you already own before suggesting you buy anything.

Which package includes it

PackageEmail Security
MonitorIncluded
ProtectIncluded
Resist 365Included
CompleteIncluded

Common questions

We already have spam filtering. Is this the same?

No. Spam filtering keeps junk out of the inbox. This is targeted fraud, impersonation and credential theft — mail that is designed to look completely legitimate and often does.

Will DMARC stop our invoices sending?

It can, if it is rushed. That is exactly why we inventory every system that sends mail as you before enforcing anything, and move in stages over weeks.

Can you stop someone clicking a link?

Not entirely, and anyone claiming otherwise is overselling. We reduce what arrives, check links at click time, limit what a compromised account can reach, and detect the compromise quickly when it happens.

Ready when you are.

Every package includes this. Pick the tier that fits.

See packages

Other services

RMMRemote monitoring and management for visibility, maintenan… Endpoint ProtectionManaged protection for devices, users, and business endpoi… Patch ManagementSecurity updates and maintenance without relying on manual… EDR / MDRSupport for stronger detection, response, and threat visib… Cloud BackupBackup readiness and recovery planning for business contin… Microsoft 365Support for accounts, access, collaboration, and security… Microsoft Defender XDRUnified endpoint, identity, email, and cloud protection ac…