Stop spoofed email
$2,250
SPF, DKIM, DMARC toward quarantine or reject. Up to three sending domains.
PT-BAS-01 · Evidence, not a CISO
A monthly scorecard your insurer can file.
Baseline is hygiene and evidence for firms that need proof every month — not a 40-hour-a-week hire. $1,250 per month. About 15 public IPs and 150 mailboxes.
What arrives each month
- External attack surface: ports, vulns, TLS, SPF / DKIM / DMARC
- Microsoft 365 / identity hygiene score
- Credential-leak watch on company domains
- One-page traffic-light scorecard, insurance-shaped
- 20-minute readout — not a working session
- Quarterly phishing simulation for training proof
Baseline is not a security owner, not 24/7 monitoring, and not a penetration test. Over the cap, we quote or move you to Advisor.
External scanning infrastructureM365 / identityEmail authentication
Sample one-pager
MFA on email and remote access
EDR coverage
SPF / DKIM / DMARC
External vulns past SLA
Credential exposures
Phishing program this quarter
Illustration only. Your first scorecard is built from your stack.
When the scorecard is red
Turn MFA on and close the old logins
$2,750
Enforced MFA on email, remote access, and privileged accounts. One tenant.