{"service":{"id":"workspace-security","name":"Microsoft 365 and Google Workspace security setup","url":"https://ellul.ai/services/workspace-security"},"ellul_ai":{"price":445,"currency":"GBP","basis":"one-off","unit":null,"includes":["Two-step sign-in on every account, admins first","Email spoofing protection: SPF, DKIM and DMARC","Sharing, admin roles and old accounts locked down","A written report of every setting changed"],"time":"2 to 3 days"},"read_on":"2026-11-06","fx_to_gbp":{"GBP":1,"USD":0.75,"EUR":0.86},"market":{"counted":1,"median_gbp":null,"p25_gbp":null,"p75_gbp":null},"counted":[{"provider":"Iterik (Ireland, remote across the UK and EU): Microsoft 365 Hardening","url":"https://iterik.pages.dev/services","figure":499,"currency":"EUR","gbp":429.14,"basis":"one-off","unit":null,"kind":"agency","quote":"Microsoft 365 Hardening: \"from €499\": stronger sign-in protections, reduced privileged access, Exchange Online and shared mailbox hardening, alert configuration; \"Pricing depends on licensing tier, number of users, and what's already in place.\""}],"facts":{"pay_separately":["Your Microsoft 365 or Google Workspace subscription, paid to the vendor","Business Premium or Entra ID P1 licences, only if those controls are wanted"],"needs_from_you":["Global admin or super admin access to your tenant","Access to your domain's DNS settings","A list of current staff, so old accounts can be closed"],"limits":["A setup service, not a certification such as Cyber Essentials; no setting makes a business fully secure","Conditional access, Defender and device rules are set only where your licences include them","For an existing tenant; a new Microsoft 365 or Workspace setup is a separate service"],"rules":[{"fact":"Since 1 February 2024 Gmail requires every sender to personal Gmail accounts to set up SPF or DKIM, and anyone sending more than 5,000 messages a day to Gmail accounts to also set up DMARC.","source_name":"Gmail Help: Email sender guidelines","source_url":"https://support.google.com/a/answer/81126"}],"cheaper_route":[{"fact":"Microsoft Entra security defaults need no extra licence and require every user to register for multifactor authentication and administrators to use it.","source_name":"Microsoft Learn: Configure Security Defaults for Microsoft Entra ID","source_url":"https://learn.microsoft.com/en-us/entra/fundamentals/security-defaults"}]},"not_counted":[{"provider":"Iterik: Microsoft 365 Security Review","url":"https://iterik.pages.dev/services","figure":299,"currency":"EUR","basis":"one-off","unit":null,"kind":"agency","quote":"Microsoft 365 Security Review: \"€299\": checks of email authentication, sign-in policies, MFA and admin access, mailbox rules, with written findings; \"Implementation of any changes found is separate.\"","why":"a review with no changes made, a smaller scope (and the same provider as the counted reading)"},{"provider":"Iterik: SPF, DKIM & DMARC Setup","url":"https://iterik.pages.dev/services","figure":199,"currency":"EUR","basis":"one-off","unit":null,"kind":"agency","quote":"SPF, DKIM & DMARC Setup: \"€199\"; \"Fixed price for standard Microsoft 365 environments.\"","why":"one of our four lines on its own, a smaller scope"},{"provider":"Support Perth IT Pty Ltd (Western Australia)","url":"https://supportperthwebsitev2.pages.dev/services/microsoft-365-security","figure":2500,"currency":"AUD","basis":"one-off","unit":null,"kind":"agency","quote":"Full Hardening: \"$2,500 - $6,000 + GST\", fixed fee banded by user count for 15 to 60 user tenants; 25 controls including Conditional Access and PIM (Audit Only \"$1,500 + GST\")","why":"Australian dollars (no conversion rate set) and a bigger build: 25 controls with Conditional Access and PIM on Business Premium"},{"provider":"Creative Data Concepts (location not stated)","url":"https://creativedata.net/services","figure":1500,"currency":"USD","basis":"one-off","unit":null,"kind":"agency","quote":"Security Configuration Health Check: \"Duration: One day (6-8 hours, remote) Price: $1,500\"","why":"a one-day review with no changes made, and $ read as USD because the page gives no country"}]}