Email is where your company gets attacked, and where your invoices get missed.
Microsoft 365 and Exchange, migration, anti-phishing, and the SPF, DKIM and DMARC records that decide whether your mail reaches the inbox or the junk folder.
Engineering offices in Egypt, delivering on site across Egypt and Saudi Arabia, and supporting clients remotely across the Gulf, Africa, Europe and the United States.
Most people call. It is faster, and you speak to an engineer, not a form.
What a free email health check looks at
How email causes real damage
Two different problems wear the same clothes: mail that should not arrive does, and mail that should arrive does not. Both cost money.
Invoice fraud
An attacker sits in a mailbox, watches a real conversation, then sends amended bank details at exactly the right moment. It reads perfectly, because it is the real thread.
One password, no second factor
Credentials phished or reused, and nothing else standing in the way. From there the attacker has your mail, your files and your identity with suppliers and clients.
Your mail lands in junk
SPF missing or wrong, DKIM unsigned, DMARC absent. Quotes and invoices quietly do not arrive, and nobody finds out until a client asks why you never replied.
Somebody else can send as you
Without a DMARC policy, anyone can put your domain in the From field. Your clients get the phishing email, and your name is on it.
What we set up and then keep working
Whether you are moving to Microsoft 365, cleaning up what you have, or recovering from an incident, the work runs in this order.
Health check and domain records
The cheapest fix in email, and the one most often missing. It is usually a day of work with a disproportionate effect.
- SPF, DKIM and DMARC published correctly for every sending source
- DMARC moved from monitoring to enforcement, in stages
- Reports read, so you can see who is sending as your domain
- MX, autodiscover and legacy records tidied and documented
- Reputation and blocklist status checked and cleared
- Marketing tools and applications that send mail included
If your quotes are landing in junk, this is almost always where the answer is.
Migration to Microsoft 365 or Exchange
Moving mail without losing anything and without a day where nobody can work.
- Pilot group first, then waves: never everybody at once
- Mail, calendars, contacts and shared mailboxes moved together
- Public folders, distribution lists and permissions carried over
- Cutover planned with timings, owners and a rollback
- Mobile devices and desktop clients reconfigured, with guidance
- Hypercare while people settle in, in English or Arabic
Wider cloud work sits in Cloud Solutions.
Identity and access
Email security is mostly identity security. This is the part that stops the account takeover.
- Multi-factor authentication enforced, including for admins
- Legacy authentication protocols switched off
- Conditional access by location, device and risk
- Admin accounts separated from day-to-day accounts
- Joiner and leaver process, so access ends when employment does
- Alerting on suspicious sign-ins and new forwarding rules
Wider hardening is covered in Cyber Security.
Filtering, anti-phishing and user awareness
Layered filtering, plus the part no product solves. People recognising a fake in a hurry.
- Anti-spam, anti-malware and attachment policies tuned to you
- Impersonation and look-alike domain protection
- External-sender marking so staff can see what came from outside
- Simulated phishing and short, practical awareness training
- A reporting route, so staff tell you instead of staying quiet
- Quarantine reviewed, so real mail is not lost silently
The goal is fewer clicks and faster reporting, not a perfect filter. There is no such thing.
Backup, retention and continuity
Microsoft keeps the service running. Keeping your data recoverable is a separate decision.
- Third-party backup for mailboxes, OneDrive, SharePoint and Teams
- Retention and legal-hold policies set to your obligations
- Point-in-time restore of a mailbox, folder or single item
- Shared and departed-staff mailboxes handled deliberately
- Archiving so mailboxes do not become the filing system
- Restore tested, with a written result
See Backup & Data Protection for the wider picture.
Email work we have delivered
Real Stark work. Client identifiers are withheld under confidentiality. Sector and scope only.
Microsoft 365 migration in waves
Mail, calendars and shared mailboxes moved with a tested rollback, multi-factor enforced and legacy authentication disabled as part of the same project.
Deliverability fixed
SPF, DKIM and DMARC corrected for every sending source, and mail that had been landing in junk started reaching inboxes again.
Anti-impersonation controls
Look-alike domain protection and external-sender marking deployed where invoice fraud is the specific, named risk.
Compromised mailbox contained
Hidden forwarding rules found and removed, sessions revoked, credentials reset and the entry route closed, then the same check run across every other mailbox.
References can be provided directly, on request, with the client’s agreement.
Three things we will tell you not to do
The questions we get asked most
Our mail keeps going to junk. Can you fix that?
Usually, and usually quickly. In almost every case it is SPF, DKIM or DMARC published wrongly or missing for one of your sending systems, plus reputation damage that clears once the records are right. We check every source that sends as your domain, not just the mail server.
Is Microsoft 365 backed up?
Not in the way most people assume. Microsoft provides retention windows and protects its own infrastructure, but it does not give you long-term point-in-time recovery. If a mailbox is deleted and the window passes, it is gone. We add third-party backup as standard.
Someone in accounts received a fake invoice from a supplier. What now?
Treat it as a live incident. Call us. Do not act on the mail. We check whether the compromise is on your side or theirs, look for hidden forwarding rules, revoke sessions, reset credentials and then run the same check across every mailbox rather than just the one.
Can you move us from a hosting provider or an on-premise Exchange?
Yes. Both are routine. The pattern is the same: pilot group, then waves, with a rollback available until each wave is proven, and cutovers scheduled when your business is quiet.
Do you support Zoho or Google Workspace as well?
We work with Zoho and can support other platforms, though most of our clients are on Microsoft 365 and that is where our deepest experience is. We will tell you plainly if a platform is outside what we can support properly.
Is your mail arriving, and is anyone else sending as you?
We can check your published records in a few minutes on the phone and tell you whether there is a real problem, before anybody quotes you for anything.
Sunday to Thursday, 9am to 6pm · Egypt, and remote worldwide
Our other IT services
Every service below is delivered by the same team, under the same agreement.