Recent engagements where one practice handled strategy, implementation, and operations. Identifying details have been omitted or altered; technical specifics are representative.
Identified and documented a coordinated BEC attempt targeting a planned vendor payment. Traced the compromise to a third-party consultant's breached credentials. Performed domain forensics on lookalike domains, analyzed SPF, DKIM, and DMARC gaps, and completed a Google Workspace security audit. Delivered abuse reports to the registrar and to Google and hardened org-wide email controls.
No funds were lost in that transaction.
A small-business client running Google Workspace had legitimate inquiries landing in spam, and the public website had been injected with hidden SEO spam pointing at malicious sites. Engagement: enforced DMARC, routed contact-form mail through a dedicated sender, and coordinated removal of the injected content.
Google Postmaster Tools showed a 0.00% spam rate across the monitored window following remediation, with a restored search reputation.
Client's outbound email stopped functioning entirely after a DNS migration between providers. Diagnosed a missing SPF record and a misplaced DKIM configuration, which caused the existing DMARC quarantine policy to reject all legitimate outbound mail. Corrected DNS records and verified propagation.
Full email functionality was restored the same day.
Outcomes describe past engagements and are not predictive of results in any other matter.
Most engagements start with an IT Operations Review.
Schedule a consultation