Inbound filtering
Phishing, spoofing, and malicious attachments stopped before they reach a person.
Email Security in Omaha
Email Is Still How They Get In
ECS protects Microsoft 365 against phishing and account takeover, and locks down your domain with SPF, DKIM, and DMARC so nobody can send mail as you.
Spend Time on What Matters.
Why Omaha businesses choose ECS
- 20+Years supporting Omaha-area businesses
- 300+Small and mid-sized businesses supported
- 4.9★Google rating, 200+ reviews
- 5 yearsBest of B2B — IT Services, B2B Omaha Magazine
Best of B2B (IT Services), from B2B Omaha Magazine, and Best of Omaha (Computer Repair), from Omaha Magazine, are community-voted awards won 5 consecutive years, 2022–2026. See our awards and story
Why Email
The attack that costs the most money arrives as a normal message
Business email compromise does not involve malware. Someone gets into a mailbox, reads how your business talks about money, waits for a real invoice, and sends a revised one with different bank details. By the time anyone notices, the payment has cleared.
The second half of the problem is your domain. If it is not configured to say who is allowed to send mail on your behalf, anyone can spoof your address to your customers, and you find out when a client calls about an email you never sent.
What Is Covered
The inbox, the account, and the domain
Account protection
MFA and conditional access, so a stolen password alone does not open the mailbox.
Domain authentication
SPF, DKIM, and DMARC configured and monitored, so your domain cannot be used against your customers.
Mailbox rule monitoring
Forwarding rules are a favourite attacker trick and one of the clearest signs of compromise.
User training
The messages that get through are the convincing ones, so people need to recognise them.
Mailbox backup
Microsoft 365 retention is not a backup. Deleted or encrypted mail needs somewhere to come back from.
What Runs It
The platforms behind the service
Email filtering and identity
Microsoft 365
Filtering, anti-phishing policies, MFA, and conditional access, configured properly rather than left at defaults.
DMARC monitoring
dmarcian
Reporting on who is sending mail as your domain, and the path to an enforcing policy without breaking your own mail.
Mailbox threat detection
Huntress
Detection for suspicious sign-ins, session theft, and mailbox rule changes.
Microsoft 365 backup
Cove Data Protection
Independent backup of mail, OneDrive, and SharePoint, monitored and test-restored.
Want to see who is sending email as your domain?
A DMARC report answers that in about a week, and the answer is often surprising.
Start the ConversationHow It Works
From audit to enforcement
Audit
We review your current filtering, identity settings, and DNS records, and show you who is sending mail as your domain today.
Harden
Anti-phishing policies, MFA, and conditional access go in, and mailbox auditing is turned on.
Authenticate
SPF, DKIM, and DMARC are brought to an enforcing policy in stages, so legitimate senders keep working.
Watch
DMARC reports and mailbox detections are monitored, and new sending services get added deliberately rather than discovered later.
What You Get
What changes once this is running
Fraudulent payments get harder
The invoice-redirect attack depends on mailbox access and a spoofable domain. Both get closed.
Your domain stops being a liability
Customers stop receiving mail that looks like it came from you.
Better deliverability
Authenticated domains land in inboxes rather than spam folders.
Frequently Asked Questions
The built-in protection is good and most businesses never configure it. Default tenants commonly have no anti-phishing policy, no enforced MFA, no mailbox auditing, and no DMARC. Most of the value is in configuring what you already pay for, then adding detection and backup around it.
They are DNS records that tell the world which servers may send email as your domain and what to do with mail that fails the check. Without them, anyone can send mail that appears to come from your address. DMARC also reports who is trying, which is how you find both attackers and forgotten marketing tools.
It can, if it is switched to enforcement on day one. That is why we run it in monitoring mode first, identify every legitimate sender, authorise them, and only then tighten the policy.
Yes. Microsoft protects the platform, not your content. Retention policies expire, deletions sync, and ransomware encrypts cloud files like any other. Independent backup is what gives you a restore point.
That is what detection and response is for. Suspicious sign-ins and new mailbox rules are flagged, we reset credentials and sessions, check what was accessed, and tell you plainly what happened.
Get Started
Close the path most attacks still take.
Start with an audit of your Microsoft 365 configuration and your domain records.
Spend Time on What Matters.