Cloud Accounts Review

Most small organizations live in one of two cloud suites, and most of them are still on the defaults. The defaults are built for getting started, not for staying safe: forwarding rules nobody reviews, admin accounts with no second factor, folders shared with 'anyone with the link' three years ago and forgotten.

The pattern behind most small-business fraud is an email account takeover — someone gets in, reads for a while, and eventually sends an invoice with a changed bank account number. The settings that stop that are not exotic. They are simply not on.

This is remote by nature, since the systems are, and it leaves you with a written record of what was changed — which is also what an insurer means when they ask whether you have 'implemented security controls'.

Prices reflect the time these engagements normally take. Where a service is priced by size, pick the tier matching whichever part of the description is larger for you — a small house with a great many devices belongs in the higher tier. If what we find on the day goes beyond the tier you picked, we will tell you before starting and agree any additional time with you first. We never bill for extra time you have not agreed to.

How it works

1. Access and inventory

   We work from an account you control, and start by listing every user, admin and shared resource — usually longer than expected.

2. Configuration

   Two-factor everywhere it matters, recovery settings, email protections, sharing permissions, and the audit logging that lets you find out what happened if something does.

3. Record

   A written list of what was changed and why, and what to check periodically so it stays that way.

Often added to this

When we confirm the details by email, mention any of these — or we will suggest one if it fits — and it goes on the same invoice as the main work.

• Extra time

  $150/hour

  When what we find goes past what was booked. Always agreed with you before it starts, never billed afterwards as a surprise.

• Follow-up check

  $150

  A remote session a month or two later to confirm what was set up is still in place, updates are landing, and nothing new has crept in.

• Staff briefing

  $225

  Thirty to forty-five minutes with your people at the end of a visit: what changed, what they need to do differently, and the scams aimed at businesses like yours.

The full list of add-ons