Email & collaboration
Email is still the center of most businesses and the most common way in for attackers. Our team has run email since the first Exchange releases. Today that means Microsoft 365 and Google Workspace tenants, self-hosted mail servers, migrations, and the authentication records that decide whether mail arrives.
Our team has run email since the early Exchange releases, including a very large multi-region platform for an email provider. We apply that experience to Microsoft 365 and Google Workspace tenants, self-hosted servers, migrations and the authentication records that keep mail out of spam folders. The track record page describes the platform in detail.
The work includes hardening as well as operation. We set sender authentication, retention, sharing limits and multi-factor sign-in, and test the result. "SPF, DKIM and DMARC" covers mail authentication, and "Windows 10 End of Support and Microsoft 365 Hardening" covers the tenant settings we review with CISA's baselines.
What we do
- Microsoft 365 and Google Workspace tenant setup and hardening
- Mail migrations between platforms with minimal disruption
- SPF, DKIM and DMARC deployment and monitoring
- Anti-phishing and inbound filtering configuration
- Self-hosted mail servers with failover
- Mail archiving and retention policies
- Custom routing and rules for specific workflows
- Shared mailbox, calendar and Teams structure
We add filtering, archiving, and custom routing when a business needs mail to do more than land in an inbox. We have built large multi-region Exchange platforms with failover, and we apply the same discipline to a ten-person office.
Email connects to our Managed IT, Cybersecurity and Cyber Automation services. Authentication, phishing defense and mailbox protection come from security; routing rules and AI-assisted triage come from automation.
Leading platforms we work with
- Proofpoint
- Mimecast
- Microsoft 365
- Google Workspace
- Postfix
- Zoom
- Slack
Platforms and practices
- Microsoft Exchange (4.0 to Subscription Edition)
- Dovecot
- SPF · DKIM · DMARC
- Microsoft Teams
- Custom email routing
References
- Proofpoint: Leader, 2025 Gartner Magic Quadrant for Email Security (vendor blog; report dated Dec 1, 2025)
- Mimecast: Leader, December 2025 Gartner Magic Quadrant for Email Security (vendor page)
Sources last checked .
Product names are trademarks of their owners and are listed to describe our experience; they do not imply endorsement or partnership.
Mail that keeps flowing
Incoming mail is authenticated and scanned before it reaches anyone, mailboxes are copied across three regions so a server failure goes unnoticed, and outgoing mail leaves signed and encrypted.
DMARC: from watching to rejecting
Share of mail claiming the domain that passes DMARC (SPF or DKIM aligned), week by week. In the monitoring phase (p=none) reports reveal forgotten senders; each one gets SPF and DKIM fixed. Quarantine sends failures to spam, reject refuses them at the receiving server. Illustrative figures.
How we use Email & collaboration for clients
Frequently asked questions
Direct answers to the questions we hear most. Something else on your mind?
Send us a messageCan you run or migrate our email, including Microsoft 365 and Exchange?
Yes. Our team has run Microsoft Exchange from version 4.0 through Subscription Edition, including large hybrid and multi-region platforms, and works with Microsoft 365. We also work with Dovecot-based mail.
Can you add email filtering such as Proofpoint or Mimecast?
Yes, we have experience with both and can integrate them with your mail flow. They are trademarks of their owners and are listed as experience, not partnership.
How do you migrate email without losing messages?
We copy mailboxes in advance, then run a final sync at cutover and change the MX records, so only the last differences move during the switch. We verify counts and sample folders per user, and keep the old system readable until you confirm. Calendars, shared mailboxes and mobile profiles are planned as part of the move.
What is the right SPF, DKIM and DMARC order?
Publish SPF and DKIM for every system that sends as your domain, then DMARC with a monitoring policy (p=none) to see who sends. Fix legitimate senders from the reports, then move to quarantine and reject. Skipping the monitoring stage is how legitimate invoices and newsletters get blocked.
Is it better to host email ourselves?
For most businesses, Microsoft 365 or Google Workspace is better: security, uptime and mobile support are handled for you. Self-hosting suits specific needs such as data location, custom routing or an existing investment, and it requires patching, deliverability work and monitoring. We have operated both and will say which fits.
How do you stop phishing from reaching staff?
Layers: authentication records on your own domain, inbound filtering with link and attachment inspection, MFA on every mailbox, and rules that flag external mail and block automatic forwarding. Staff reporting suspicious messages is the last layer. No filter catches everything, so we also monitor for mailbox rules and unusual sign-ins.