A fixed, expert uplift of your Microsoft 365 tenant — built for law firms, mortgage brokers and IFAs who cannot afford a breach, a regulator's question, or a client who quietly loses faith.
"Hi — as discussed, please transfer the balance of £184,500 to account 40 21 66 / sort code 09 01 28 ahead of Friday. Let me know once it's away."
Most providers sell you a dashboard and call it security. We start by closing the gaps that actually let people in — misconfigured mailboxes, dormant admin rights, licences bought but never switched on. Only once the foundations are sound does monitoring mean anything at all.
Redirected completion funds and invoice fraud land on the firm, not the bank. The sums are rarely small.
The SRA, FCA and ICO all expect you to protect client data. “We assumed Microsoft handled it” is not an answer.
One compromised mailbox exposes years of privileged correspondence and sensitive personal data.
Referrals dry up quietly. Clients rarely say they left because of a breach — they just stop calling.
A twelve-partner practice came to us after a completion payment was redirected. The attacker had sat quietly in a mailbox for weeks, reading correspondence and waiting.
The tenant held licences for advanced protection that were paid for but never enabled.
A former contractor still held global admin rights nobody had reviewed in two years.
There was no alerting, so the intrusion went unnoticed until the money moved.
We rebuilt the tenant properly in days. The recovery had already taken months.
A one-off uplift that closes the gaps and hands the tenant back to you, documented.
Everything in Baseline, plus ongoing hardening as Microsoft and your firm change.
Managed plus monitoring, response and certification alignment — someone is watching the tenant so you don’t have to.
● Included ○ Not in this tier · Prices based on a 10-user organisation. The one-off uplift is fixed scope; L2/L3 add a monthly retainer on a 12-month term. Final figures confirmed after the review — no obligation.
If your setup is sound, we’ll say so and leave it alone. We’re not here to sell you things you don’t need.
This is about your Microsoft 365 tenant. No servers to buy, no five-year contracts, no vendor lock-in.
You’ll always get plain English and a written record a non-technical partner can read and act on.
General IT support keeps you working day to day; it rarely means someone has deliberately secured your Microsoft 365 tenant against a targeted attack. The two jobs are different, and we’re happy to work alongside your existing provider.
It has excellent security tools, but almost none of the important ones are switched on by default. We turn on and configure the protections you’re very likely already paying for in your licences.
The review is 30 minutes. The Baseline uplift is typically completed within a week or two, scheduled around your firm so there’s no disruption to fee-earners.
Almost never. Most changes happen behind the scenes. The main visible change is stronger sign-in, which we roll out with clear guidance so nobody is caught out.
Yes. The uplift directly supports the data-protection and confidentiality obligations those regulators expect, and the written summary gives you evidence of the steps you’ve taken.
The Baseline uplift is a fixed price per tenant, confirmed after the review. Managed and Full add a monthly retainer. We’ll give you exact figures on the call, with no obligation.
We'll look at your tenant with you, tell you plainly where the real gaps are, and leave you with a written summary — whether or not you go further with us.