The mailbox is the front door.

Email is still the most common way attackers try to reach your business. Managed Inbox combines administration, advanced security, and backup into one managed service — covering every Microsoft 365 mailbox you rely on.

Book a 20-min intro call →or get a written quote →

·· 01 ·· A day in the life

A day at the front door.

Nobody has ever thanked us for an email that didn’t arrive. That is the awkward thing about protecting a mailbox — the wins are all invisible, and the one loss is unforgettable. So here is what a normal day looks like on a managed inbox, including the parts your team never sees.

05:40 · CT

Before anyone reads anything

The overnight mail, already sorted.

Mail arrives all night. By the time your first person opens Outlook, the messages that were built to hurt them have already been dealt with: the impersonation of a vendor’s billing address, the attachment that wanted a macro enabled, the link that pointed somewhere other than where it said. Advanced email security holds them, rewrites what needs rewriting, and lets the real mail through.

The message worth caring about that morning is the one asking your bookkeeper to update a supplier’s bank details “before the close of business.” Your bookkeeper never sees it. That is not luck, and it is not Microsoft’s default — it is a filtering posture somebody chose, tuned, and keeps tuned.

What you see · a normal inbox — which took work

09:15 · CT

Mid-morning

A mailbox grows a rule nobody wrote.

Somewhere in your tenant, a mailbox quietly acquires a forwarding rule — every message containing the word “invoice” copied out and marked as read. That single configuration change is the oldest move in business email compromise: it is how an attacker reads a conversation for six weeks before sending the one email that costs you money.

Mailbox health monitoring watches for exactly that kind of change, and we remediate it the same day. Worth saying plainly, because it is the question we get asked: we watch the configuration of your mailboxes, not the content of your mail. Rules, permissions, delegations, sign-ins. Not correspondence.

Layer · mailbox health monitoring + remediation

14:02 · CT

The middle of an ordinary afternoon

A sign-in from a country nobody is flying to.

Somebody’s password is correct, and somebody is not your employee. The credential turned up in a breach dump six months ago and got reused, which is the way almost all of these start. Identity and access oversight is the layer that notices that the right password arrived from the wrong place, at an hour that person is never awake.

So the sign-in gets challenged instead of trusted. Sessions are revoked, the password is reset, the mailbox is checked for what was touched, and your person hears about it from us before they hear about it from a customer. Fifteen minutes of awkwardness instead of a breach-notification letter.

Layer · identity and access oversight, continuous

23:10 · CT

Overnight

The backup Microsoft doesn’t take for you.

This one surprises people, so we say it early and in writing: Microsoft guarantees the service, not your data. Deleted-item retention runs out. A departing employee can empty a mailbox on their last afternoon. Ransomware can reach mail through a synced device. None of that is Microsoft failing — it is a gap most businesses only find on the day it matters.

A daily SaaS backup of your Microsoft 365 data closes it. Mail, calendar, contacts, and files, held independently, restorable to a point in time long after the platform’s own window has closed.

Deliverable · daily SaaS backup, restorable point-in-time

Quarterly

The review nobody else runs

Where the mailbox sprawl gets cleaned up.

Tenants drift. There is a shared mailbox nobody can name the owner of, a distribution group still forwarding to somebody who left years ago, a licence being paid for every month by a person who no longer works there, and delegate permissions granted for one week two years ago. None of it is dramatic. All of it is either money or exposure.

Once a quarter we go through it with you and hand back a shorter list than we started with. It is the least exciting thing we do and one of the few that reliably makes the bill smaller.

Deliverable · quarterly mailbox review, included

Microsoft keeps the mail service running. Nobody at Microsoft is watching your mailbox.

Why the inbox is its own line, with its own SLA

Caught · the wire that didn’t go

An email from “the owner” asks accounting to move a payment today.

Stopped before the reply. The money stays where it is.

EmailAnti-phishing — the display name matches your owner, the sending domain doesn’t. The message is flagged as impersonation and held.

IdentityAccess oversight — if the attempt came from a mailbox that was actually compromised, the sign-in behind it gets caught on its own merits.

CloudThreat detection — the tenant-level alert reaches us, not just a spam folder nobody checks.

PeopleThe one habit — payment changes get confirmed by voice, on a number you already had. We put that in writing during onboarding, because it is the control that never fails.

·· 02 ·· The specification

What’s included.

Microsoft 365 protects the mail server. We protect the mailbox — the part where your team actually lives. Configuration drift, suspicious sign-ins, deleted-item retention, and shared-mailbox sprawl all get owned by us instead of becoming someone’s project to clean up later.

Microsoft 365 mailbox administration and ongoing management
Advanced email security and anti-phishing protection
Cloud-level threat detection and response
SaaS backup and recovery for your Microsoft 365 data
Mobile device protection for company email
Identity and access oversight
Mailbox health monitoring and remediation

Why this is its own line.

Most outages we see start with a compromised mailbox. Wire fraud, ransomware, and HIPAA breach disclosures almost always trace back to a single user clicking the wrong thing. We bill Inbox as a separate service because it deserves its own attention, its own SLA, and its own line in the security policy.

What about the Microsoft 365 licence?

The Managed Inbox fee covers the management, security, and backup of your mailboxes. The Microsoft 365 license itself is billed separately. We can provide it through Micro-IT, or you can hold it directly — your choice. Either way, applies to all licensed user mailboxes, shared mailboxes, and distribution groups under management.

Service-level commitments

Initial response (managed clients)≤ 1 business hour

SaaS backupDaily

Mobile device protectionIncluded

Identity oversightContinuous

Quarterly mailbox reviewIncluded

·· 03 ·· Also on this page

The name it all hangs off.

Every mailbox, login, and certificate in your business depends on one asset, and at most small companies nobody can say for certain who owns it. It has no page of its own, so it lives here — next to the service it protects.

Managed Domain

$29per domain / month

Registration and renewal are included in the fee — auto-renew on, registrar lock on, WHOIS privacy on, expiry monitored. Your domain records are managed authoritatively, with changes made same-day and a change history you can read. Email authentication — SPF, DKIM, and DMARC — gets set up and moved to enforcement in stages, then monitored, along with third-party sender onboarding, mail-flow records, forwarding and aliases, lookalike-domain watching, and SSL expiry.

Two things that go wrong here are quiet and expensive. A domain registered years ago to a personal email address at a company that no longer exists, renewing on a card that will eventually decline. And authentication left half-configured, so your invoices land in spam and anybody in the world can send mail that looks like it came from you.

The Saturday you never hear about

The renewal notice goes to an address nobody reads, the card on file expired, and the domain lapses. Mail stops. The website stops. Every login that used that address for password resets stops. Getting a lapsed domain back is a race against people who buy them on purpose, and it is not always winnable.

Under management that Saturday does not exist: renewal is ours, the registrar lock is on, and expiry is a monitored date rather than a piece of mail. It pairs with the mailboxes above for the obvious reason: authentication is what keeps your mail landing, and what keeps your name off somebody else’s phishing campaign.

Microsoft Cloud Partner Google Workspace Partner Kaseya / Datto MSP Apple Business Partner Dell Authorized Partner Lenovo Partner Ubiquiti Certified Installer HIPAA-Aligned SOC-Aligned CJIS-Aligned PCI-Aligned