- 3
- records set and enforced: SPF, DKIM, DMARC
- Enforced
- DMARC, so strangers cannot send as you
- Filtered
- spam and phishing before the inbox
- Free
- training videos on spotting faked email
What is included.
What ALCO does for you under email security, in plain terms.
Spam and phishing filtering
The filtering built into Google Workspace and Microsoft 365, configured properly, tuned to your senders and reviewed. Most businesses never turn half of it on.
SPF, DKIM and DMARC
Published, aligned for every service that sends as you, including your CRM, invoicing and newsletter tools, then moved to enforcement so forged mail is rejected.
Deliverability
Your invoices and quotes land in the inbox, not spam. We watch the DMARC reports and fix the senders that drift.
Encryption where it matters
Transport encryption everywhere, and message-level encryption through your platform for the mail that carries health, financial or legal detail.
Account protection
MFA on every mailbox, sign-in alerts, and a sweep for the hidden forwarding rules and app passwords attackers leave behind.
Impersonation defences
Display-name and look-alike domain checks, external sender tagging, and rules for the gift-card and payroll-change scams that target small businesses.
Is this real?
Forward a suspicious message to the help desk and a person tells you, usually within minutes. No shame in asking; that is the point.
Training for your team
Free Learning Center videos on faked email and reading headers, plus phishing simulations if you want them.
Transactional mail done right
If your app or website sends mail, we put it on Mailgun or your platform with its own authenticated sending domain, so a bulk send never hurts your staff's reputation.
How it works.
Four steps, each one written down as we go.
- 1
Check the domain
We read your current SPF, DKIM and DMARC, your filtering settings and your mailbox security. You get a short written report.
- 2
Authenticate every sender
Each tool that sends as you is signed and aligned. DMARC starts in monitoring, so nothing legitimate breaks.
- 3
Enforce and tune
DMARC moves to reject, filtering is tuned to your senders, MFA is on everywhere, stray forwarding rules are gone.
- 4
Watch and answer
Reports reviewed, new senders added, and the help desk on call for "is this one real?"
Who this is for.
Anyone whose customers got a fake invoice "from" them
That is a missing or unenforced DMARC record. It is fixable, and quickly.
Firms handling money or health records
Payroll changes, wire instructions and patient details are what the scams are after. Encryption and impersonation rules close the easy doors.
Businesses whose mail lands in spam
Misaligned authentication is the usual cause. We find and fix it.
Questions people ask.
Do we need another filtering product?
Usually not. Google Workspace and Microsoft 365 both include strong filtering that is rarely configured well. We start there. If your risk calls for more, we will say so and why.
Will enforcing DMARC break our newsletters or invoices?
Not if it is done in order. We authenticate every sender first and watch the reports in monitoring mode before switching to reject. Nothing legitimate stops.
Can you tell if an email is fake?
Yes. Forward it to the help desk. We read the headers and the links and give you a straight answer. There is also a free Learning Center video on doing it yourself.
What about encryption?
Mail between major providers is already encrypted in transit. For content that must only be read by the recipient, we set up message-level encryption in your platform and show your team when to use it.
We are not on Workspace or 365.
We can still fix SPF, DKIM and DMARC and review your mailbox security. We will also tell you honestly whether staying on your current mail host is wise.
- The client area
Everything ALCO does for you, in one place.
Requests, your team, invoices, documents, shared credentials and sign-in security. One sign-in, any device. Take the tour.
Tour myALCO - New · Our work
See the sites we have built.
A newspaper rebuilt headless, a parts storefront, two Boise nonprofits and our own site. Every screenshot is the full page, scrolling live.
Browse our work
Clients we’ve worked with
We’ve worked with businesses, nonprofits and community organizations on managed hosting, website development and everyday IT support. These are some of the current and past clients we’ve supported, each with different systems, priorities and people. Explore their stories to see what working with ALCO looks like.
