Microsoft 365, locked down.
You pay for Microsoft 365. We make sure its security is actually switched on, so one stolen password doesn’t hand over your email, files and contacts.
Your email account is the master key.
Password resets for your bank, suppliers and website all land in your inbox. If someone gets into Microsoft 365, they can read everything, send invoices as you and quietly set up forwarding rules so they keep seeing your mail even after you change the password.
Covered, step by step.
Two-step login (MFA)
Switched on for every user, including the accounts people forget about, rolled out one person at a time.
Admin accounts
Separate admin accounts, the fewest people possible with full control, and no shared logins.
Mailbox rules & forwarding
We hunt for hidden forwarding rules and suspicious sign-ins, a common sign of a past break-in.
Sharing settings
OneDrive and SharePoint files shared with "anyone with the link" brought back under control.
Secure Score
We work through Microsoft’s own Secure Score recommendations and explain each one.
Backup & leavers
Your mail and files backed up separately, and a simple checklist for when staff leave.
At the end, you have:
- Every user on two-step login
- A clean list of who has access to what
- No unknown forwarding rules or old accounts
- Your Secure Score before and after
- A one-page summary you can keep
Common questions
Will my staff be locked out?
No. We switch on two-step login with each person, show them the app and set up a backup method, so nobody is stuck.
We only have three people. Is it worth it?
Yes. Small teams are often the least protected, and a single compromised mailbox can cost far more than the fix.
Do you need our passwords?
No. We work with an admin account you control, or alongside you on a screen share. We never ask you to email passwords.