Home / Email spoofing protection
Email securityMake it hard to fake email from your office.
If your domain has no DMARC record, or one set to monitor only, other mail servers are not told to stop email that fakes your address. We set up the records that tell them to reject those fakes.
What email spoofing is
Email was built without proof of who sent a message. Spoofing uses that gap.
The trick
Your name in the From line
A criminal sends a message that shows your office's email address, without ever getting into your accounts.
The target
People who trust you
Patients, clients and vendors get an invoice, a payment change or a link that seems to come from you.
The gap
Missing or monitor-only DMARC
Without a DMARC policy of quarantine or reject, receiving servers are not told to stop email that fails the checks.
The fix
Three DNS records
SPF, DKIM and DMARC, set up so your real email keeps arriving and receiving servers are told to turn fakes away.
What we fix
For one domain and the services that send email as you.
- SPF: we list the services allowed to send as your domain, such as Microsoft 365, Google Workspace or your billing software.
- DKIM: we turn on message signing for your mail host and each in-scope sending service.
- DMARC to enforcement: we start with reporting, review the reports over 2 to 4 weeks, then raise the policy to quarantine or reject once your legitimate email passes. We never weaken protection you already have.
- Monitoring: after setup, the Managed Cybersecurity plans include ongoing report review, so a new sending service or a change does not quietly break your protection.
Price and limits
From $500 one time
One-time setup covers one domain and up to three sending services. Moving mailboxes, fixing a third-party service's own setup, and monitoring after setup are separate. This reduces spoofing of your exact domain; it does not stop look-alike domains or every form of phishing.
Who it's for
Connecticut offices whose clients act on email from them.
Dental
Dental practices
Patients get appointment reminders, billing and forms from your address.
Medical
Medical offices
Patients and insurers rely on messages that carry your practice's name.
Legal
Law firms
Clients trust your email with settlement details, wire instructions and documents.
Accounting
CPA and tax firms
Clients send tax documents and payments based on email from your firm.
Questions
Anything else, ask on the call.
We already use Microsoft 365. Aren't we covered?
Not by default. Microsoft 365 can sign your email, but the DMARC policy that tells other servers to reject fakes is a record on your own domain, and many offices never set it.
Will this stop our real email from arriving?
That is why we start with reporting and only raise enforcement once every legitimate sender passes.
How do I know if my domain is exposed?
Run the free email security check. It reads your public DNS records in your browser and shows whether DMARC is missing or monitor-only.
What happens on the call?
We look at your domain's records together, explain what we see in plain words, and quote any fix in writing. The call is free.
Talk to a Connecticut AI, IT and security team.
A free 30-minute consultation about your tools, your risks and the rules you answer to. You leave with a clear next step.