Email security for small businessNW / DNS lab
Enforcement

Signed. Sealed. Yours.

SPF, DKIM and DMARC, set up in stages so inboxes that check DMARC refuse mail faking your domain, while your real mail keeps passing.

2 to 4 weeksNo passwordsFixed price
Check Your Domain See How It Works

$149 USDDone for you. Free report first.

Explore the fix
The problem

Anyone Can Sign Your Name.

Nobody breaks into anything. They send mail with your name on it, and nothing on your domain tells inboxes to refuse it.

Inbox
Your Business Billing <billing@yourbusiness.com>Not sent by you
To: alex.patient@gmail.com
Subject: Your balance is overdue

Payment reminder

Hi Alex, our records show an unpaid balance from your last visit. Please settle it today to avoid a late fee.

Amount due$240.00Invoice#4471
Pay Now
  • 01

    Fake invoices to your customers

    The ones who pay lose money. The rest start wondering if you were hacked.

  • 02

    Fake bank details to your suppliers

    “We’ve changed banks, use this account.” One transfer can cost thousands.

  • 03

    Your real mail lands in spam

    Inboxes trust unauthenticated domains less, so real quotes and invoices go to junk.

The process

Five Steps. Built So Your Real Mail Keeps Working.

Protection goes on in stages while every service that sends as you is watched. Blocking only starts once your real mail passes.

  1. Check

    About 1 day

    Your DNS gets backed up and every record read from public DNS.

  2. Senders

    Same day

    Workspace, forms, Mailchimp, invoicing: every service that sends as you.

  3. Signing

    Same day

    One clean SPF record and DKIM keys for each sender.

  4. Enforcement

    2 to 4 weeks

    DMARC moves from watching, to the spam folder, to refusing fakes.

  5. Monitoring

    Optional

    Reports read every month. Alerts when something breaks.

Your DMARC policy, week 4_dmarc.yourbusiness.com v=DMARC1; p=reject; sp=reject

Inboxes that check DMARC refuse the fakes. Your real mail keeps passing.

Access

Never Your Password.

You hand over the least access the job needs, for one domain, and remove it when the work is done.

  • Cloudflare tokenDNS edit, one zone, 14 daysAsked
  • Registrar delegateGoDaddy or NamecheapAsked
  • Screen share30 minutes, you clickOptional
  • Email passwordNot email, hosting or registrarNever
  • Inbox accessDNS records onlyNever
  • After the jobYou revoke the tokenYours
Pricing

Choose Your Fix.

The free report has every step to fix it yourself. Paying is optional, and you can use anyone you like.

Choose a plan

Done for you, $149. Full refund if work hasn’t started.

Book the Fix

Prices in USD. The $39 kit is bought on Payhip and is final once delivered. Done for you is invoiced by PayPal after we confirm scope.

Sample report

What the Report Shows.

One page per domain. Every finding comes with a way to check it yourself and the exact fix.

example-bakery.comPublic DNS

Read the Full Sample Report

About NW

Reviewed by a Person.

Only public DNS lookups, the same ones every mail server makes. No scans, no probing, no logins. Calm, factual findings with no deadlines and no scare tactics.

NW is run by a security learner with three years of hands on study and practice in email security, Active Directory and reverse engineering. No big claims: every finding comes with a way to check it yourself.

01Will my email stop working?

It’s built not to. Enforcement goes on in stages. DMARC starts in watch mode, the reports show every service sending as you, and blocking only starts once your real mail passes.

02Do you need my password?

No. You create a token that can only edit DNS on your one domain, add delegate access at your registrar, or share your screen for 30 minutes.

03Does it work with Google Workspace or Microsoft 365?

Yes. Both support SPF, DKIM and DMARC, and every other service that sends as you gets set up too.

04Is my business too small to be targeted?

Impersonation doesn’t need a big target. It needs a domain with no DMARC, and most small business domains have none.

05What’s the refund policy?

Full refund on Done for you if work hasn’t started. The $39 kit is final once delivered.

Free report

Get the Free Report.

One page for your domain: what’s missing, how to check it and how to fix it. Replies come from contact@nwcybersecurity.co within 2 business days.

Done for you

Book the Fix.

Tell us about your domain. You get a reply from contact@nwcybersecurity.co within 2 business days to confirm scope, then a PayPal invoice. Nothing is charged until then.

  • Done for you$149
  • Monitoring, optional$19 a month