Stay secure · Email domain security
Stop criminals sending email as you.
We find every service that sends email on your behalf, lock your domain down so it can't be spoofed, and manage the gateway that filters what comes in.
- DMARC taken all the way to reject
- SPF, DKIM, DMARC, BIMI and MTA-STS
- Mimecast or Microsoft Defender for Office 365
- Monthly reviews and reporting
What you get
Fewer impersonation attacks
Shut the door on business email compromise, executive impersonation and payment diversion that use your own domain.
Email people can trust
Genuine email lands in the inbox, and with BIMI your logo can appear next to it.
Evidence for boards and insurers
A measurable reduction in phishing and impersonation risk, documented in line with ISO 27001.
What is included
- Discovery of every legitimate sending service
- SPF and DKIM set up and aligned
- Phased DMARC enforcement: monitor, quarantine, then reject
- BIMI, so your logo shows in recipients’ inboxes
- MTA-STS, so incoming email is always encrypted in transit
- Managed secure email gateway: audit, hardening and monitoring
- Monthly configuration reviews and reports
- Twice-yearly health checks for Mimecast
Who it is for
Any organisation that sends invoices, payment details or sensitive information by email, and especially those whose DMARC has been stuck at monitor.
How it works
- 1
Discover
We find every service that legitimately sends email for you.
- 2
Align
SPF and DKIM are set up so genuine email passes every check.
- 3
Enforce
DMARC moves in stages from monitor to reject, without disrupting genuine mail.
- 4
Manage
Ongoing monitoring, monthly reviews and changes as your services change.
Independently verified, continuously.
ISO 27001 certified since 2016, Cyber Essentials Plus, CREST-certified testers and an Assurix Trusted MSP.
See how we are verifiedQuestions we are often asked
What is DMARC?
Domain-based Message Authentication, Reporting and Conformance tells receiving servers what to do with email that claims to be from you but fails authentication. At its strictest setting, reject, spoofed email is blocked.
Why do so many organisations get stuck at monitor?
Most send email from dozens of services, and teams worry that enforcing DMARC will block something genuine. We do the discovery and alignment for you, then move to enforcement in safe stages.
Do you install a new email gateway?
Setting up a new gateway is a separate project for our professional services team. Email domain security then manages it day to day.
Often paired with
Talk to us.
A short, no-obligation conversation about what this would look like for your organisation.