Email Security Fix-in-a-Day
Stop scammers sending email that looks like it comes from your business. We set up SPF, DKIM and DMARC properly, then take the policy to full enforcement in safe steps so your real email never gets lost.
One fixed price per email domain. Both follow-up steps are included. No monthly fee and no contract.
- One email domain, plus a free lock-down of up to 3 parked domains in the same DNS account
- A full list of every system that sends email as you: mailboxes, website forms, invoicing, scheduling, newsletters
- One correct SPF record, and DKIM signing switched on for your mailbox provider and up to 3 other senders
- A DMARC record with reporting, taken from watch-only to quarantine to reject in safe steps
- A before-and-after page, a log of every DNS change, and a rollback snapshot
Request the fix
Tell us your domain and who hosts your email, if you know. We reply within one business day with next steps. Nothing is charged until you approve a written scope.
How it works
Four to six hours on our side, usually about 30 minutes of yours to grant access. We list every sender, fix SPF, switch on DKIM, publish DMARC in watch-only mode, test, and document.
We read the reports. If every real sender passes, we move the policy to quarantine: fake email starts landing in spam.
We read the reports again and move to reject: fake email is refused. You get the final before-and-after page.
We ran these same steps on our own domain before offering them to anyone else.
Fair questions
Why does full protection take a few weeks if the work is one day?
Because jumping straight to a strict policy can block your own real email if one sender was missed. The hands-on work is one day. Then we watch the reports and tighten the policy in two short follow-ups. Both follow-ups are included in the price.
What access do you need?
Temporary access to your DNS (where your domain is managed) and admin access to your email system to switch on signing. We use the least access that gets the job done, log every change, and you can remove our access the moment we finish.
What is not included?
More than 3 third-party senders, senders that need their vendor's support to enable signing, rebuilding a website form that sends email the wrong way, copier or scanner scan-to-email changes, spam-filter tuning, and moving to a different email provider. We tell you up front if any of these apply and quote them separately.
Will this stop all phishing?
No, and anyone who says so is overselling. It stops other people sending email that uses your exact domain. It does not stop look-alike domains or scam emails sent to your staff. Those need training, two-step login and filtering, which we cover in managed IT.
Can you do this if we are not in Pennsylvania?
Yes. The whole job is done remotely, so we do it for businesses anywhere in the United States.