Email security
Make the everyday inbox a harder target, on purpose.
Everyday security habits catch a lot. This is the technical layer behind them: filtering tuned past its defaults, sending domains authenticated, and quarantine reviewed as quiet recurring maintenance, so the inbox stays a harder target without turning every message into a decision someone has to make alone.
Stopping the message before it lands
Most everyday email risk is filtered out before anyone has to make a judgment call, as long as the filtering is tuned rather than left on its defaults.
Anti-phishing and anti-spoofing filtering
Inbound mail is screened for impersonation patterns, look-alike sending domains, and known-bad senders before it reaches an inbox, not only checked against a generic spam list.
Attachment and link inspection
Attachments and links are checked for malicious content, including at the moment a link is actually clicked, not only when the message first arrives.
Domain authentication: SPF, DKIM, DMARC
Your own sending domain is configured so other mail systems can verify a message genuinely came from you, cutting down on spoofed sender addresses that impersonate your business.
Quarantine review and the impersonation risk behind it
Filtering catches most of it. What happens next, and who is actually being targeted, is where firms handling money need a closer look.
Held messages, checked on request
Anyone can ask about a message held back by filtering as an ordinary support request, in either plan, so a legitimate email is not silently lost and a real attempt is not quietly ignored.
A verification habit, not a reflex
Releasing a quarantined message, or acting on one that requests a payment or account change, is a considered decision, confirmed through a second channel.
Look-alikes and repeat attempts, tracked
Domains that closely resemble your own, and repeated attempts against the same mailbox, are noted in your IT record as a pattern worth watching, not dismissed as unrelated noise.
Which plan covers it, and what is separate
Email protection is part of the Managed plan’s security baseline: the platform’s email-protection and sign-in settings configured and kept current. Incident response and formal security programs are planned separately.
On the Managed plan
Filtering, link and attachment inspection, and SPF, DKIM and DMARC on your domain configured and kept current. The Essential plan does not include them.
Incident response, when it is needed
A mailbox that has actually been compromised, or a successful fraud transfer, calls for a dedicated incident-response process, often with your bank or legal advisors involved.
Specialist security programs, quoted separately
Structured threat hunting, dark-web monitoring and formal security-operations engagements are specialist work, scoped and quoted separately from this recurring layer.
Before the first call
A useful first conversation starts with simple facts.
Bring what you already know. Nothing on this list needs a password.
Bring this to the first call
Rough answers are fine.
- Current filtering in place for the mailbox platform you use
- Whether SPF, DKIM, and DMARC are configured for your domain
- Who reviews quarantined mail today, and how often
- Any recent phishing, spoofing, or invoice-fraud attempts worth noting
- Mailboxes that handle payments or sensitive approvals
Tell us your team size and what keeps interrupting the work.
Managed plan: $89 CAD per user, per month.Essential, at $59, covers help desk and administration only.
Tell us about your firm.
Your team size, the systems you rely on, and the first thing you want handled. A few sentences is plenty.