Ireland, UK & EU · Remote delivery
Microsoft 365 Security
for Small Business
Four focused services. Fixed scope. You'll know exactly what's included before we start, and exactly what you'll have when we're done.
No contract. Pay per engagement.
Scope agreed before any work starts
Remote delivery. No on-site needed.
Direct access. No helpdesk or account managers.
"Our email is sending spam. An account has been accessed from somewhere unusual. We need help now."
When a Microsoft 365 account is compromised, the clock is running. The longer it continues, the more damage is done to your reputation, your clients, and your data. This service stops the active threat first, then works through what happened, how to clean it up, and what needs to be put in place afterwards.
What's included
- Immediate containment: stop active abuse and lock compromised access
- Investigate sign-in logs, audit trail, and how access was obtained
- Find and remove mailbox rules, forwarding, and anything left behind
- Secure affected accounts and restore normal access
- Clear explanation of what happened, written in plain English
- Hardening steps to close the gaps that allowed it
How it works
- Contact via email or the form below
- Include a brief description of what you're seeing
- Containment is prioritised before anything else
- Temporary admin access may be needed
- Investigation and cleanup follow once the account is stabilised
Good for
Active or recent Microsoft 365 compromise. Mailbox sending spam, suspicious sign-ins, or phishing sent from an internal account.
Same-day response for active incidents.
"We've been on Microsoft 365 for years, but nobody has ever actually checked the security settings."
A structured review of how your Microsoft 365 tenant is configured. We check for the gaps that most small businesses don't know exist until something goes wrong. You get a plain-English written summary of what was found, what it means in practice, and what to prioritise.
This is a review and reporting service. Implementation of any changes found is separate. Either your own team handles it from the written steps, or it gets scoped as a follow-on hardening engagement.
What's included
- Check email authentication: SPF, DKIM, and DMARC
- Review sign-in policies, MFA, and admin access
- Look for mailbox rules, forwarding, and permissions that shouldn't be there
- Check security defaults against Microsoft's recommendations
- Written summary of findings, risk level, and prioritised next steps
How it works
- Remote only. No software or agents to install.
- Global Reader access is usually enough to begin
- Conducted in a single session for standard tenants
- Written findings delivered after the session
- Implementation is quoted separately if needed
Good for
Standard Microsoft 365 tenants (Business Basic, Standard, or Premium) with a single primary domain. If you have multiple domains, a hybrid Exchange setup, or complex mail routing, get in touch first and we can confirm scope before you book.
1–2 hour session · Written findings within 48 hours.
"We had an incident. I want to make sure it doesn't happen again, but I don't know what to fix or where to start."
What can actually be hardened depends on your Microsoft 365 licensing, tenant size, and current configuration. Business Standard and Business Basic tenants have a different set of available controls than tenants with Business Premium or Entra ID P1. This service works with what you have. Where additional licensing would meaningfully improve your security posture, that gets explained clearly before any recommendation is made.
Scope and price are agreed before any work begins. Some tenants are a single session; others require phased work.
What's included
- Reduce the risk of account takeover through stronger sign-in protections
- Reduce unnecessary privileged access
- Harden Exchange Online, shared mailboxes, and delegation settings
- Configure admin and security alert notifications appropriately
- Review and apply available protections within your licence tier
- Recommend additional Microsoft licensing where it's genuinely justified
How it works
- Scope is assessed first, based on your licensing, tenant size, and current state
- What can and can't be implemented is explained clearly upfront
- Changes agreed before anything is touched
- Carried out remotely. No on-site needed.
- If you already completed a review, only outstanding changes are implemented
- Phased delivery available for more complex environments
Good for
Businesses that have completed a review, recently had an incident, or want to close known gaps in their Microsoft 365 configuration. Pricing depends on licensing tier, number of users, and what's already in place. Smaller tenants on standard licensing typically fall at the lower end.
Most standard tenants completed within 1–3 days.
"Someone told us we need DMARC. We've no idea if we have it or what it does."
Stop attackers sending fake emails that appear to come from your business. Without DMARC, anyone can send emails using your domain name — a technique behind most invoice fraud targeting Irish businesses. A spoofed email from your address asks a client or supplier to change payment details, and your domain gets the blame.
SPF, DKIM, and DMARC are the three DNS records that prevent this. This service configures all three correctly for your Microsoft 365 environment, tested and verified before handover. Pricing is for standard Microsoft 365 setups with a single domain and no third-party mail services.
What's included
- Review your current SPF, DKIM, and DMARC records
- Configure or correct all three for Microsoft 365
- Set DMARC to enforcement, not just monitoring
- Test and verify everything before we finish
- Plain-English explanation of what was done and why
How it works
- Remote. Access to your DNS records is needed.
- Usually completed within a single 60–90 minute session
- No agents or software to install
- Fixed price for standard environments
Good for
Businesses on Microsoft 365 with a single primary domain and standard mail routing. If your setup includes multiple domains, third-party mail filtering (such as Mimecast or Proofpoint), marketing platforms, CRM senders, or hybrid Exchange, get in touch first. These environments need additional scoping before a fixed price can be confirmed.
Want to check your own setup first? The M365 Email Security Starter Kit walks you through SPF, DKIM, and DMARC for €49.
Issues commonly found during reviews
- MFA enabled but weak authentication methods still allowed
- Silent mailbox forwarding configured to external addresses
- Unused admin accounts still active
- Missing SPF, DKIM or DMARC configuration
- Excessive permissions assigned to standard users