Security
Security for Brisbane businesses. Check it free, fix it at a fixed price.
I’m Ewan. The usual ways into a small business are not clever. A spoofed invoice. A leaked password that was reused. An admin account with no MFA. Run the free checks below. If they find something, each fix has a written scope and a price before I start.
- 10 Google reviews
- 5.0★
- Microsoft endpoint and Microsoft 365
- 15+ yrs
- offshore or outsourced helpdesk
- 0
- business-hours callback target
- 2 business hours
Two checks you can run right now.
Enter your business domain. No signup, no login, and no access to Microsoft 365 or Google Workspace. Both run the same scan from the outside. Each one leads with a different part of the result.
- Domain scan.
- Email authentication, transport encryption and SSL in one graded report.
- Spoofing test.
- Whether your SPF, DKIM and DMARC records stop someone sending email as you.
How exposed is your domain overall?
Email authentication, transport encryption and SSL, graded A to F.
Can someone send email as your business?
Leads with your DMARC policy, SPF and DKIM.
What the free scan cannot see
It looks at your domain from the outside only. It does not see inside Microsoft 365 or Google Workspace, your devices or your backups. That is what the packs below are for.
Fixed-price security packs
Four one-off jobs. Pick the one that matches what you found. Every pack page lists what is included, what is not, and what you need ready before I start.
one-off
Domain Lockdown
Stop anyone sending email as your business.
from $295+ GST
1 - 2 hours · fixed scope
Pick this when: The spoofing test says your domain can be impersonated.
Full scope and price →
one-off
Microsoft 365 Security Hardening
Lock down Microsoft 365 or Google Workspace so only the right people get in.
from $690+ GST
Typically half a day · fixed scope
Pick this when: Nobody has checked who can sign in to your Microsoft 365, or from where.
Full scope and price →
one-off
Cyber Insurance Readiness Review
Pass the insurer's questionnaire - with evidence.
from $390+ GST
Mapped to insurer / Essential Eight requirements
Pick this when: Your insurer's questionnaire or renewal form is on your desk.
Full scope and price →
one-off
Security Deep-Dive Audit
The paid, thorough version of the free scan.
$290+ GST
Full report + fix plan + a call
Pick this when: You want every finding from the free scan checked by hand, with a fix plan.
Full scope and price →
The insurance check and the audit find and document gaps. Fixing what they find is quoted separately, in writing, before any work starts.
Security Watch: the free scan, on a schedule.
Daily monitoring of your staff logins against known data breaches, weekly checks that your email and website security (SPF, DKIM, DMARC, SSL) haven't drifted, and a monthly plain-English report. When something is found, you get a clear alert and what to do about it. No lock-in.
- Fixes are quoted separately. Does not monitor inside Microsoft 365 or Google Workspace, devices, or include incident response.
- It is a standalone subscription. You do not need a managed plan.
- On Secure+, breach and dark-web monitoring is already part of the plan.
What it watches
- Daily
- Staff logins checked against known data breaches.
- Weekly
- SPF, DKIM, DMARC and SSL checked for drift.
- Monthly
- A plain-English report of what was checked and found.
$29+ GST
per month · per business domain
Secure Stripe checkout.
“Ewan from Ewan Me IT has provided outstanding IT support, consulting, and cybersecurity solutions for MTS over many years. … When we needed to structure and set up new premises, Ewan was the first person we called, and his expertise ensured everything ran smoothly.”
Related reading
- The Standard →
The 17 controls I run on managed plans, including MFA, conditional access and email authentication, and which plan runs each one.
- Cyber insurance readiness →
What insurers ask about before they write or renew cover, and how I document the evidence.
- The Essential Eight, in plain English →
The ACSC's eight baseline controls, why insurers ask about them and where to start.
Something is happening right now?
A suspicious login, a spoofed invoice already sent, or email that has stopped working. Do not wait for a scan. New urgent requests in business hours have a callback target of 2 business hours. After-hours help is not guaranteed.
Not sure which of these you need?
Book a free 15-minute chat. I will look at what the scan found and tell you what to fix first, and what can wait.