Inbox Protection

Protect the Inbox Before Threats Reach Users.

Email security support combining mailbox configuration, filtering, authentication records, user guidance and incident handling to reduce phishing risk.

01Stronger domain and mailbox protection
02A clearer suspicious-email reporting route
03Better visibility of forwarding, login and delivery risk
Microsoft 365Google WorkspaceSPFDKIMDMARCSecure GatewaysMFA
Not sure whether this is the right service?Share the current environment and business impact before committing to a solution.
Start assessment →
SHELLRACK SERVICE BLUEPRINT business context, operational controls and visible outcomes Mail protectionlayered OPERATING CONTEXTwhat the service depends onDomain identityMail flow andusersThreat andincident MAILEmail Security ServicesAuthenticateFilterRespond SERVICE OUTCOMESwhat remains visibleLess spoofingSafer inboxesClear response DELIVERY WORKFLOWcontrolled change and documented handoverDiscoverPrioritizeDesignDeliverDocument
Operating Context

Mailbox protection across identity, delivery and user behavior.

Email security combines authentication records, filtering, mailbox hardening, reporting, migration planning and incident response so protection is not limited to a spam filter.

The final scope, response model, commercial terms and exclusions are confirmed in the approved proposal, service agreement or statement of work.
Expected Outcomes

What this service is designed to make visible

01

Stronger domain and mailbox protection

Tracked through agreed checks, documentation and handover.

02

A clearer suspicious-email reporting route

Tracked through agreed checks, documentation and handover.

03

Better visibility of forwarding, login and delivery risk

Tracked through agreed checks, documentation and handover.

Service Capabilities

Coverage built around the work your environment actually needs

These capabilities remain editable from the ShellRack Services Manager.

01

Anti-phishing controls

Review impersonation, suspicious links, malicious attachments and lookalike domain policies.

02

Email authentication

Configure SPF, DKIM and DMARC records with reporting so spoofing risk is easier to manage.

03

Spam and malware filtering

Tune filtering rules, quarantine workflows and attachment scanning for business-friendly protection.

04

Mailbox hardening

Strengthen MFA, forwarding rules, login reviews, recovery options and admin privileges.

05

User reporting workflow

Create a clear process for employees to report suspicious emails and get quick guidance.

06

Incident assistance

Investigate compromised mailbox indicators, suspicious rules, login activity and message traces.

07

Business email migration

Move mailboxes between providers with DNS, aliases, backup guidance and user cutover planning.

08

Customer-payable licence clarity

Clearly separate email support from Microsoft 365, Google Workspace, hosting or security licence charges.

Delivery Workflow

A controlled path from current state to documented handover

The workflow can be edited for each service in the plugin.

STEP 01

Discover

Review the current environment, users, dependencies and business impact.

STEP 02

Prioritize

Separate urgent risks, recurring issues and planned improvements.

STEP 03

Design

Agree scope, ownership, access, timing, validation and rollback needs.

STEP 04

Deliver

Complete the approved work with controlled change and progress visibility.

STEP 05

Document

Record the outcome, handover, exclusions and next improvement actions.

Scope Clarity

What is included and what is quoted separately

Clear boundaries reduce confusion around support, hardware, software, hosting, licences, visits and project work.

Included in email security support

  • SPF, DKIM, DMARC and mailbox hardening guidance
  • Spam/phishing rule review and suspicious mailbox investigation
  • MFA, forwarding rule and admin access review
  • User reporting workflow and DNS record documentation
  • Scope clarification before work starts

Email-related payable items

  • Microsoft 365, Google Workspace, mailbox and security licences
  • Email gateway subscriptions, archiving and backup tools
  • Domain, DNS, hosting, SSL and provider renewal charges
  • Large mailbox migration or data import/export project work
  • New hardware, replacement parts, consumables and physical repairs

Common issues this service addresses

  • Phishing emails reaching users
  • Spoofed company domains
  • Mailbox forwarding abuse
  • Spam overload
  • Unclear quarantine and release process
  • Email migration risk
  • Unclear mailbox and security licence billing

Deliverables and useful outputs

  • Email security review
  • DNS authentication checklist
  • Mailbox hardening notes
  • Quarantine workflow
  • User reporting guide
  • DNS record summary
  • Mailbox migration checklist

Technology and platform coverage

Microsoft 365Google WorkspaceSPFDKIMDMARCSecure GatewaysMFAMessage TraceBusiness Email HostingMX RecordsAliases and Groups

Best fit for

  • Organizations using Microsoft 365 or Google Workspace
  • Businesses seeing phishing, spoofing or mailbox compromise attempts
  • Teams planning a mailbox or domain migration
Service FAQs

Questions to clarify before the engagement begins

Can we begin with a focused scope?
Yes. ShellRack can start with one service, one site, one workload or one defined issue before expanding the engagement.
How is the final scope confirmed?
The final scope, responsibilities, assumptions, exclusions, timelines and customer-payable items are documented before work begins.
Can ShellRack work with our existing vendors?
Yes. Vendor coordination can be included where it supports the agreed service and the responsibilities are clearly assigned.
How are changes and outcomes recorded?
Relevant checks, changes, test results, handover notes and follow-up actions are documented according to the agreed engagement.

Start with the current environment and the business outcome.

ShellRack can help confirm whether this service, a related service or a focused assessment is the right next step.