CompTIA A+, Network+ & Security+ certified
Security // network · company · email
Security for small businesses — your network, your company and your email.
Attackers go after small businesses because they're easier targets: flat networks, shared passwords, email nobody configured. I find the gaps, close them and keep checking they stay closed — with every change explained in plain English.
Certified // CompTIA
The reality
Most attacks on small businesses aren't sophisticated.
They're a phishing email, a reused password, an unpatched router, a guest Wi-Fi on the same network as the front-desk PC, or a spoofed invoice that looks exactly like a real vendor. Ordinary gaps — and fixable ones.
GAP 01
Phishing & spoofing
Fake emails that look like you, your bank or your vendors.
GAP 02
Weak accounts
Shared or reused passwords and no multi-factor sign-in.
GAP 03
Flat networks
One infected device can reach every computer and server.
GAP 04
Untested backups
Backups nobody has ever restored — until ransomware day.
When small offices usually call me
Sound familiar?
Cyber-insurance renewal
Your insurer's renewal form asks about MFA everywhere, endpoint protection and tested offsite backups — and you're not sure what to answer.
A fake-invoice scare
Someone received a spoofed email pretending to be you or a vendor, or billing almost paid an invoice that wasn't real.
Someone left
A key employee left and you realized half the office shares the same passwords or admin logins.
One flat network
Guest Wi-Fi, card machines, printers and the computers holding client records all sit on the same network.
01 // Network security
A network that's segmented, filtered and watched.
Your firewall is the front door — but only if it's configured. I harden firewalls, split the network so devices only reach what they need, and make remote access safe.
- Firewall configuration & hardening — Cisco Meraki MX and OPNsense: least-privilege rules, admin access locked down and firmware kept current.
- Intrusion prevention & malware blocking — IPS and malware protection on the firewall, tuned so it blocks threats without breaking the office.
- Geo & content filtering — block malicious, phishing and unwanted categories — and whole countries your business never deals with.
- Segmentation & VLANs — staff, guest Wi-Fi, printers and cameras, and sensitive systems each on their own network.
- Secure Wi-Fi — strong encryption, isolated guest networks and no shared passwords taped to the wall.
- VPN & secure remote access — WireGuard and Tailscale VPNs and zero-trust tunnels with multi-factor sign-in — no open remote-desktop ports.
- Monitoring & alerts — automated hourly health checks and reports so problems get flagged early (automated checks, not a staffed 24/7 center).
02 // Company security
Accounts, devices, data and people — covered.
Security isn't one product. It's dozens of everyday settings and habits. I put the right ones in place, document them and keep them that way.
- Multi-factor authentication everywhere — email, Microsoft 365, banking, remote access and admin accounts.
- Password manager rollout — a company-wide password manager, so staff have a safe, easy way to store and share logins instead of reusing weak passwords.
- Microsoft 365 & Active Directory hardening — admin-account cleanup, least privilege, audit logging and sign-in alerts.
- Patching & endpoint protection — Windows, Macs and servers kept updated and protected, with status you can see.
- Backups & ransomware recovery — the 3-2-1 approach with offsite copies — and restore tests, so recovery is proven.
- Onboarding & offboarding — access granted properly and removed the day someone leaves.
- Policies & incident plan — plain-English acceptable-use rules, an asset inventory and a written plan for a bad day.
- Staff security training — short, practical sessions on phishing, passwords and fake-invoice scams.
- Medical, dental, legal & financial offices — the practical safeguards HIPAA-minded practices and cyber-insurers look for — segmentation, unique logins, MFA, encrypted backups with tested restores, audit logging and patching — and I sign HIPAA Business Associate Agreements (BAAs) with medical clients.
03 // Email security
Protection against spoofing, phishing and fake-invoice fraud.
Email is where most attacks start — and where the most expensive ones finish, with a wire transfer to a criminal. I lock down your domain and mailboxes so your email can be trusted, coming and going.
- SPF, DKIM & DMARC — set up correctly, monitored, and moved to enforcement so it's far harder for criminals to send email as your domain.
- Anti-phishing & spam filtering — Microsoft 365 and Google Workspace protection tuned for malicious links, attachments and impersonation.
- Business email compromise prevention — MFA on every mailbox, alerts on suspicious sign-ins and a verification process for payment changes.
- Mailbox monitoring — checks for hidden forwarding rules and unusual activity — the classic signs a mailbox has been taken over.
- Deliverability — get your legitimate email out of customers' spam folders with the right DNS records and sending setup.
- Sensitive information — safer ways to send confidential documents than a plain attachment.
60-second self-check
Eight questions every office should be able to answer “yes” to.
Any “no” or “not sure” is a gap worth closing. That's exactly what an assessment looks at.
- If an employee left today, could you remove all of their access within minutes?
- Is multi-factor sign-in turned on for every email account and admin login?
- Has anyone actually restored a backup in the last 90 days?
- Can a guest on your Wi-Fi see your office computers or printers?
- Does your domain publish SPF, DKIM and a DMARC policy?
- Would someone notice a hidden forwarding rule on a mailbox?
- Are office computers and the firewall getting updates automatically?
- Is there a written plan for what to do if ransomware hits?
How it starts
A security assessment, in four steps
No scare tactics and no jargon — just a clear picture of where you stand and what to fix first. Want a quick start? Include your domain and my first reply checks your public email security (SPF, DKIM, DMARC) and SSL at no charge.
01
Discover
An inventory of your accounts, devices, network, email domain and backups — what you have and who can reach it.
02
Assess
A configuration review of your firewall, Wi-Fi, Microsoft 365 or Google Workspace, email DNS records and backups.
03
Report
A plain-English list of what I found, ranked by risk, with what each fix involves.
04
Fix & monitor
I make the changes with you, document them and keep checking — so the gaps stay closed.
Next step
Find out where your gaps are.
Tell me a little about your office, network and email setup. I'll reply personally with the next step for a security assessment.