Anti-phishing and lookalike domain protection

Not for the check, because SPF, DKIM and DMARC records are public. For changes, your IT team applies them from our notes, or we use a named user with DNS permissions only, removed when the work ends. Nothing changes in your DNS without a written note of what, why and how to undo it.

With named commercial alert tools for new registrations plus a manual search routine, both listed in your findings. Each alert is checked, and a lookalike used for phishing is reported to its registrar or host. If you need daily coverage at scale, we point you to a managed service.

Yes. Email authentication lives in your public DNS records, so the checks and fixes work the same from anywhere, and changes go in when your team is online. Calls run in IST evenings, which is the US East Coast morning. Written reports arrive on a fixed day each week.

Every engagement is scoped after the free diagnostic, because spend, stack and goals vary. You get a written proposal with a fixed scope and price before you commit to anything, and you can stop after the diagnostic with the findings in hand.

A senior DGo strategist leads every engagement and stays your single point of contact. The proposal names your strategist, with their background, before you sign. Specialist work, such as legal takedowns or incident response, goes to specialist partners, also named in the proposal. We take on up to three engagements at a time, and no more than two monthly programs. When we’re full, we tell you the next start date before you book.

We’re based in Mumbai (IST). Calls run in IST evenings, which overlap with the European afternoon and the US East Coast morning. Written updates arrive on a fixed day each week, so nothing waits on a call.

The diagnostic is read-only. Paid work uses a named user with only the permissions the task needs, never shared passwords, and that access is removed when the work ends. Or your team applies the changes from our notes. NDA on request.