Stop phishing, spoofing and malware before it reaches your team's inboxes.
Email is the most common way attackers get in, phishing, spoofing, business email compromise and malware all arrive in the inbox.
WhizzIT layers advanced email security over Microsoft 365 and Google Workspace, filtering threats, protecting against impersonation and keeping your inboxes safe.
Back to Cyber SecurityWhat's included
The training example everyone remembers is a badly spelled email from a stranger with an obvious link. Almost nothing looks like that now.
A genuine SharePoint or Dropbox share notification, sent from the real platform, pointing at a document that happens to be malicious. Because the notification really did come from the platform, it passes every check a filter can reasonably make.
A QR code in an attachment, because it moves the attack onto a phone where there is no filtering and no visible address bar. The message itself carries no link for anything to inspect.
A reply inserted into an email thread that has been running for weeks, from a supplier whose mailbox was compromised last month, so it has real history above it. Nothing about the conversation looks new or unusual.
The one that catches the most people. An attacker with a stolen password sits between you and Microsoft using a proxy page that looks exactly right. You type the code, and they capture the session token rather than the password. Multi-factor authentication still matters enormously, but on its own it is not the finish line people assume.
Filtering deals with volume. What it will not do is make a convincing message from a real supplier account look wrong, which is why authentication, monitoring and a team that knows to check unusual requests all sit alongside it.
Layers we put in place
The most costly email attacks we deal with do not carry a payload. Someone gets into a mailbox with a working password, sits quietly and reads. They learn how your invoices are worded, who signs things off, when your finance person is on holiday. Then they send one message asking for bank details to be updated, from a real internal account, in the house style.
There is nothing for antivirus to find, because nothing was installed. The usual tell is a mailbox rule the attacker added to hide their tracks, quietly moving replies into an obscure folder so the real owner never sees the conversation happening in their name. That is why alerting on new forwarding and filing rules matters more than it sounds.
The other half of the answer is not technical. Any request to change bank details gets verified on a phone number you already had, never one supplied in the email itself. It is a dull control that defeats a very profitable attack.
Three records that decide whether anyone can send email pretending to be you.
Lists the servers allowed to send mail for your domain. If a message arrives from somewhere not on the list, the receiver has grounds to be suspicious. It breaks quietly when you add a new sending tool, such as a mailing platform or a booking system, and nobody updates the record.
Signs your outgoing mail cryptographically so the receiver can confirm it genuinely came from you and was not altered on the way. It answers the question SPF cannot, which is whether the message itself is authentic rather than just the route it took.
Ties the two together and tells receivers what to do when a message fails. This is where most businesses stop too early. A DMARC record set to none is monitoring only, and does nothing to stop spoofing. Moving carefully to quarantine and then reject is what actually protects your domain, and it is exactly what we manage for you.
Independently assessed against the UK government-backed scheme, so our security fundamentals are verified rather than simply claimed. We help clients certify too.
How Cyber Essentials helps you
A direct partnership with Microsoft. We license, deploy and support Microsoft 365 and Azure for you, with escalation straight to Microsoft when it is needed.
Our Microsoft cloud servicesCyber Essentials is a UK government scheme run by the National Cyber Security Centre, delivered by IASME. You can verify what the certification covers at source.
Describe the problem in a sentence. We'll respond the same working day, with no obligation.
Boris Carozzi, Procurement Manager, BF International · see all 15 reviewsHave been using this company for a few months and I couldn't be happier. Very professional and reliable.
Threats are caught before they reach the inbox.
We configure SPF, DKIM and DMARC to stop spoofing of your domain.
We monitor continuously and tune protection as threats evolve.
We hold partner status with the vendors behind the tools we deploy, so your licensing, support and escalation come direct from the source rather than through a reseller chain.
Book a free consultation and we'll tailor it to your business.