Email & Domain Protection

Summary. Cut phishing, spoofing, and brand abuse—protect mailboxes and your domain. We manage DMARC/SPF/DKIM posture, inbound filtering checks, and monitoring.

Who it's for. SMEs using Microsoft 365 or Google Workspace who want to reduce phishing and spoofing, reach DMARC enforcement safely, and maintain a healthy filtering posture.

Business Outcomes

DMARC enforcement (p=reject) achieved safely with source inventory and phased rollout
Inbound filtering posture tuned to reduce malicious mail and false positives
Domain monitoring and leadership-friendly reporting

What’s Included

Scope	Description
Core Inclusions	DMARC/SPF/DKIM policy management; enforcement path and sender/source inventory Inbound filtering posture reviews and tuning (impersonation, malware, phishing, BEC signals) Domain monitoring, reporting, and sender onboarding checks MTA-STS and TLS-RPT publishing/monitoring (where supported) Optional: BIMI readiness guidance (logo, VMC prerequisites)
Optional Add‑Ons	After-hours support or 24×7 P1 coverage (per Annex) Server & firewall device care (per device, see Annex for rates) EDR rollout and uplift pilots for under-protected devices

Onboarding & Steady‑State

Note: timelines depend on size and current tooling.

Phase	Activities	Deliverables	Indicative Duration
01 — Baseline	Assessment and domain/source inventory Align filtering & policies	Sender/source inventory DMARC plan to enforcement Initial filtering posture	0.5–1 week
02 — Stabilise	Policy staging & monitoring False-positive handling playbook	Stable enforcement with low false-positive rate Exception register with expiries	1–2 weeks
03 — Operate	Monthly reporting & tuning	Monthly DMARC/SPF/DKIM & filtering KPIs with action/owner register	Ongoing

Service Levels (Summary)

Plan	Coverage	Response / Restore	Governance
Bronze	Business hours (Mon–Fri 08:00–17:00 NZT, except Public Holidays)	P1: 2h / NBD • P2: 4h / 2BD	Email support • Monthly summary
Silver	Extended hours (Mon–Fri 07:00–19:00 NZT, except Public Holidays)	P1: 1h / Same day • P2: 2h / NBD	Weekly check‑in • Exceptions log
Gold	Business + after‑hours (24×7 P1 only)	P1: 30m / ASAP • P2: 1h / Same day	Exec summary • CAB-ready notes

For pricing, terms and conditions see the Pricing Annex.

Success Criteria (from our perspective)

DMARC at enforcement (p=reject) achieved safely with documented sender inventory and exceptions
SPF/DKIM pass rate ≥ 98% for sanctioned senders; no critical deliverability regressions
Phishing and spoofing volume measurably reduced; false-positive rate kept within agreed threshold
Mean time to onboard or adjust a sender within SLA (e.g., ≤ 2 business days)

Prerequisites

Admin or delegated access to tenant (M365/Google) and domain DNS
Postmaster/abuse mailboxes monitored; DMARC aggregate reports mailbox available
Change window for DNS records and filtering policy updates

Assumptions

Sanctioned outbound senders can be identified and adjusted (SPF includes/DKIM selectors)
Third-party senders (marketing platforms, CRM, invoicing) will cooperate for DNS/DKIM changes
Low-risk, scheduled changes with rollback plan; CAB for Gold tier

Risks & Mitigations

Third-party sender breakage: staged DMARC (p=none → quarantine → reject), exception register with expiries
False positives: weekly tuning and allowlist workflow; report and adjust within SLA
Deliverability dips: monitor SPF/DKIM alignment and feedback loops; escalate to sender platforms

Out of Scope

Mail platform migrations or MX cutovers (project or pilot)
Org-wide awareness programme beyond targeted simulations
Custom tooling or content pipelines beyond standard platform features

Get started

Book an Assessment Request Managed Service Request Custom Package Talk to us

Prefer to stabilise first? Run a short pilot to establish a clean baseline; then roll into this managed service.

Business Outcomes

What’s Included

Onboarding & Steady‑State

Service Levels (Summary)

Success Criteria (from our perspective)

Prerequisites

Assumptions

Risks & Mitigations

Out of Scope

Get started

Related Resources