We help solicitors, accountants and engineering firms across Cardiff and South Wales get secure and stay that way: Cyber Essentials, Microsoft 365 security and protection against fake emails in your name.
Enter your work email. We'll inspect the public security records on your email's domain — SPF, DKIM, DMARC, website SSL, software headers and domain expiry — and email you a plain-English report, usually within one working day.
The snapshot looks at your firm from the outside. Our free Microsoft 365 audit looks inside: 28 settings across sign-ins, admin accounts, email, SharePoint, backups and devices. You get a Red, Amber and Green report with the exact fix for every finding.
We get you ready, fix what needs fixing and take you through certification in Cardiff & South Wales. Many insurers, legal panels and tenders now expect it.
Multi-factor sign-in, Conditional Access, sensible sharing settings, admin separation and independent backups. See our 28-point M365 Hardening Audit (sample report).
SPF, DKIM and DMARC configured safely so nobody can send fake invoices or bank-detail changes pretending to be your firm.
Conveyancing fraud protection, Lexcel & PII insurer readiness, and SRA-compliant AI & email controls.
Protecting client tax records, payroll data and HMRC correspondence without slowing down busy season.
Local engineers based at Connies House in Cardiff supporting offices across Newport, Swansea, Bridgend and the Vale.
We look only at what's public — the same records any email server or browser can see — and send you a friendly one-page report with a simple fix for anything worth sorting.
Start with our free checks. Then either join our flagship Monthly Cyber Posture plan — where we dedicate 4 hours every month to hardening, monitoring and certifying your firm — or ask for a one-off fixed-price fix.
Public security snapshot + our 28-point Microsoft 365 audit.
Get your security in tip-top position and maintain it all year.
Standalone certifications or one-off lockdowns.
All work is quoted upfront after your free snapshot or M365 audit so there are never surprise hourly bills. Prices are + VAT.
Instead of a one-off fix that slowly drifts out of date as staff join, leave or add new devices, our annual plan gives your firm 4 hours every month of dedicated security engineering. In Quarter 1 we clear your Red and Amber M365 and DMARC risks; in Quarter 2 we prepare and submit your annual Cyber Essentials assessment (included in the plan — you only pay the IASME fee); and throughout the year we monitor your tenant for drift, test your backups, and deliver a Quarterly Security Posture Report you can hand straight to your cyber insurer or regulator.
Yes. Guided Cyber Essentials readiness is included in our £395/month plan, or available as a one-off from £295 + VAT (plus the IASME certification fee). For Cyber Essentials Plus (CE+) — which includes independent hands-on device sampling and vulnerability scanning — we provide a tailored fixed quote per company based on your headcount, locations and device mix.
No. We only inspect public records (your DNS, SPF, DKIM, DMARC, SSL certificate and public website headers) — the exact same records every email server and web browser checks when talking to your domain.
No, because we don't flip the switch blindly. We start in monitoring mode (p=none), identify every legitimate service sending mail from your domain (Microsoft 365, Xero, HubSpot, practice management tools), align their SPF and DKIM signatures, and only then enforce quarantine or reject.
Your initial security snapshot and 28-point Microsoft 365 audit are completely free. Most firms choose our Monthly Cyber Posture plan (£395 + VAT/month) so their security and Cyber Essentials are looked after year-round. If you only need a one-off project, standalone DMARC or M365 lockdown starts from £295 + VAT, guided Cyber Essentials is from £295 + VAT (plus the IASME certification fee), and Cyber Essentials Plus (CE+) is quoted per company.
Yes. Our free Microsoft 365 security audit checks 28 settings inside your tenant, read-only, and sends you a Red, Amber and Green report with the exact fix for each finding. One of your admins signs in once on a short Teams call, and nothing is changed.
Yes. Many firms use our £395/month Cyber Posture plan or one-off audits alongside their existing IT team. Your IT company keeps looking after day-to-day helpdesk tickets, while we act as your specialist security partner — maintaining your M365 and DMARC guardrails, managing Cyber Essentials, and giving the partners an independent quarterly security report.
For a typical Cardiff or South Wales office of 5 to 50 staff, we usually complete technical remediation and pass the assessment within 1 to 3 weeks.
Yes. Alongside locking down your tenant and permissions, our sister consultancy AlphaOps (AI Consultant Cardiff) provides Microsoft 365 Copilot consultancy, workflow automation, and an SME AI Acceptable Use Policy, starting with a free 2-hour automation audit.
Pop in your work email for a free security snapshot, request a free Microsoft 365 audit, or call Ross directly. No obligation and no scare stories.
Cardiff office: 029 2240 4615 · Direct mobile: 07885 972 512 · ross@alphabyte.it
AlphaSec is one of four specialist services from the same Cardiff company. If you need a hand with something else, you're in good company.
IT support and management for offices across Cardiff and South Wales: Microsoft 365, laptops, backups and a helpdesk on first-name terms with your team. Looking after local firms since 2009.
Visit Alphabyte IT →AI & automationalphaops.Practical AI and workflow automation that takes the busywork off your team, starting with a free automation audit.
AlphaOps — AI Consultant Cardiff →WebsitesAlphaPixelWebsites for professional firms. We redesign your homepage first, for free, so you can see it before you spend a penny.
Visit AlphaPixel →