Email security & deliverability in New Plymouth
Email is where most attacks start and where most business is still done. We filter out the phishing and fake invoices before staff see them, lock down your domain so nobody else can send as you, and fix the settings that send your own mail to clients' junk folders.
New Plymouth is supported remotely. Our technicians are based in Auckland and Hamilton, so onsite work here is planned project work, booked and quoted in advance.
Email security & deliverability for New Plymouth businesses
New Plymouth is Taranaki's main city, with an economy shaped by the energy sector, engineering and fabrication, dairy farming, the port and a growing professional and tourism base in the central city.
Engineering and energy service firms here handle large drawing files, safety records and client data, often with staff working on sites around the region. Secure remote access, managed laptops and dependable backups are the core needs, along with Wi-Fi for workshops and yards. Firms working in the energy sector are also commonly asked by clients to show their security controls before contracts are signed.
We put those records in place carefully. Every service that sends as you, such as your accounting package, website forms and newsletter tool, is found and included first, so tightening the policy doesn't block your own invoices. Then we add filtering for incoming mail and show staff how to report anything odd. Finally we keep watching the DMARC reports, so a new service sending as you, or someone trying to forge your address, is spotted and dealt with rather than discovered when a client complains.
We support New Plymouth businesses remotely for help desk, devices, security and Microsoft 365. Onsite visits are reserved for planned projects by arrangement and quoted in writing. Workshop Wi-Fi or cabling can be designed remotely for a local installer.
What's included
Phishing and malware filtering
Incoming mail scanned for malicious links, attachments and fake sign-in pages, with links checked again when they are clicked.
Report-a-scam button
A simple way for staff to send a suspicious email to us for checking, so problems get reported rather than quietly deleted.
Impersonation protection
Rules that flag mail pretending to come from your directors, your domain or lookalike domains with a letter swapped.
SPF records
One correct SPF record listing every service that legitimately sends for you, kept within the lookup limits that break many records.
DKIM signing
Microsoft 365 and your other sending services set to sign outgoing mail with your domain, so receivers can verify it.
DMARC rollout
A reporting-only policy first, then a gradual move to quarantine and reject once reports show all your genuine mail passes.
Is it right for your New Plymouth office?
Email security is worth a look if:
- Clients tell you your invoices or quotes end up in junk
- Someone received a fake invoice that appeared to come from your address
- Staff are getting convincing fake Microsoft sign-in emails
- You don't know whether your domain has SPF, DKIM or DMARC
- A large client or bank has asked you to set up DMARC
How getting started works
- Free IT health check. We look at your devices, accounts, backups and network and tell you what we find, in plain English.
- Clear proposal. A written monthly price per user and a list of any fixes, with nothing hidden.
- Handover. We collect admin access and documentation from your current provider and keep your team working.
- Day-one fixes. Security gaps, failed backups and urgent risks are dealt with first.
Email security & deliverability in New Plymouth: questions
Our engineers work at client sites. How do they get to large files?
With files in SharePoint or a suitable cloud store, synced to managed laptops, engineers can open drawings on site and changes sync back. We set that up to suit file sizes and connections.
Can you manage our workshop network remotely?
Yes. Business firewalls, switches and access points can be monitored and configured remotely. Physical changes are done by a local installer or on a planned visit.
Will turning on DMARC stop our own emails?
It can if it is rushed. That is why we start in reporting mode, find every service sending as you and only tighten the policy when the reports show your genuine mail passing.
What are SPF, DKIM and DMARC in plain English?
SPF is a list of who can send email for your domain. DKIM is a digital signature on each message. DMARC ties them together and tells receiving servers whether to accept, quarantine or reject mail that fails, and sends you reports about it.
Can someone really send email as us?
Without DMARC at a strict policy, yes, it is surprisingly easy. Once the policy is enforced, most receiving mail systems will refuse those forged messages.
Isn't Microsoft 365's built-in filtering enough?
It catches a lot, but the default settings are not as strict as they could be. We review and tighten them, and on the Managed and Complete plans add extra email security and phishing filtering.
More IT services in New Plymouth
- Managed IT
- IT support
- Cyber security
- Microsoft 365
- Backup & disaster recovery
- IT strategy & consulting
- Co-managed IT
- Security awareness training