Hardening Guides

10th March 2022

Gmail vs Outlook for Business Email Security

Gmail vs Outlook We recently had this exchange regarding email security with a client: Client (Microsoft user): We got acquired and now our parent company wants us to move from Microsoft Office 365 to Google Workspace. vCISO and me: Oof, that sounds like a lot of work! But frankly, we’re a little relieved to hear…

9th December 2021

What are the best Google Workspace security settings?

Which of these scenarios sounds scarier: If you’re a Google business, hopefully you picked the second option! While business email compromises are always bad, Google Workspace’s functionality as an online office suite and document storage solution puts a lot more data at risk. Email, file storage, document collaboration, calendar, sites, even video conferencing – if…

8th July 2021

Microsoft Office 365 email security defaults are bad, so fix them!

An email server with weak security settings is like a castle without a wall. The bad guys will walk right in! Unfortunately, Microsoft Office 365 email security leaves much to be desired. Frankly, their default settings are horrible! Email security is important because it is the most common attack vector for attackers looking to gain…

29th April 2021

Prevent Email Spoofing with EmailSpoofTest

Your email provider runs the equivalent of a border checkpoint. It must do this to filter the real emails from the malicious ones. Every person (message) that wants to enter the country (server) must have its documentation in order. One of the best ways through for a malicious actor? Spoofed documentation (email spoofing). Email spoofing…

29th March 2020

G Suite Access Control Audit Tip

Here’s a G Suite tip that will save you lots of time figuring out who your administrators are. From the admin console go to Reports > Users > Account Activity. Admin Status will tell you who is a “Super Admin,” “Admin” or “None.” Hey Google, “Can you make this easier to find?”