IRON CLAD SECURITY
Protect the foundation.
Security assessments, hardening, access control, and ongoing support that help reduce risk to the accounts and systems your business runs on.
What we do
Five services. Each one ends with something you can read, use, or check.
Security assessment and report
We review your accounts, devices, cloud services, and email setup, then tell you what we found in plain language.
What you get
- A written report of findings, ranked by priority
- A short list of the fixes that matter most
- A walkthrough call to answer your questions
- A clear scope, agreed in writing before we start
Hardening: accounts, devices, cloud, and email
We tighten the settings that attackers rely on being left at their defaults, including email authentication (SPF, DKIM, and DMARC) for your domain.
What you get
- Account and device settings reviewed and strengthened
- Cloud service configuration reviewed against a checklist
- SPF, DKIM, and DMARC set up for your email domain
- A record of every change we made
Access control and MFA rollout
We help make sure the right people have the right access, and that sign-ins need more than a password.
What you get
- Multi-factor authentication rolled out on key accounts
- Review of who has access to what, with unneeded access removed
- Password manager setup and a short guide for your team
- A simple process for adding and removing people
Vulnerability remediation
We help fix the weaknesses found in an assessment, starting with the most important.
What you get
- Fixes applied in priority order
- Update and patch follow-up on systems in scope
- Before-and-after notes for each fix
- A list of anything that needs your decision or a vendor
Ongoing monitoring and support
We stay involved after the first round of work, reviewing the signals in scope on a schedule we agree.
What you get
- Scheduled reviews of the sign-in alerts, DMARC reports, and update status in scope
- A named contact for your security questions
- Regular status reports in plain language
- Help with a plan if something goes wrong
Security testing is done with permission
Any hands-on security testing, including penetration testing, is performed only with your written authorization and an agreed scope, covering only the systems you own or are authorized to have tested. We do not test anything outside that scope.
Packages
Three named starting points. Every package is scoped in writing after a conversation, so the quote fits your business.
Baseline
For a business that wants to know where it stands.
Included
- Security assessment of the accounts and systems in scope
- Written findings report, ranked by priority
- Email authentication check for SPF, DKIM, and DMARC
- Walkthrough call and a recommended fix list
Fortify
For a business ready to close the gaps.
Included
- Everything in Baseline
- Hardening of in-scope accounts, devices, cloud services, and email
- Multi-factor authentication rollout on key accounts
- Access review with unneeded access removed
- Remediation of agreed findings, with a change record
Sustain
For a business that wants steady security support.
Included
- Everything in Fortify
- Scheduled reviews on an agreed cadence
- Update and patch follow-up on systems in scope
- A named security contact
- Regular status reports and an annual reassessment
Pricing depends on scope. Request a quote and we will reply by email.
What we don't promise
No system can be made completely secure. We work to reduce risk and make your business harder to compromise, but we cannot promise that an incident will never happen. We will always tell you what we did, what we did not, and what is still open.
Want the presence built, too?
Iron Clad Marketing builds and runs the public side of your business.