Is someone quietly reading our email?
We look for hidden forwarding and inbox rules, unfamiliar mailbox delegation and OAuth apps with mailbox access — the classic signs of a compromise nobody noticed.
Email security for Australian businesses
Email security audits for Google Workspace and Microsoft 365
Find out who can read, send as, or redirect your business email — before someone else does. Fixed price from $99, results in 3 business days, run personally by Neil Frick (CISSP).
- Plain-English findings report with severity ratings
- Prioritised fix list you or your IT provider can action
- Australian compliance and cyber-insurance evidence
- Read-only — no settings are changed in your tenant
The questions the audit answers
Could an invoice payment be redirected?
Business Email Compromise (BEC) usually starts with a spoofable domain and weak sign-in controls. We check SPF, DKIM and DMARC alignment and how easily your domain can be impersonated.
Is multi-factor authentication actually on for everyone?
We report real MFA coverage per user, admin accounts without strong factors, and legacy authentication paths that bypass MFA entirely.
Can we prove due diligence to an insurer or client?
Findings are mapped to Australian obligations — Privacy Act APPs, Notifiable Data Breaches, TPB, APRA CPS 234, RACGP — and the ACSC Essential Eight.