
The four controls that stop the most common attacks on small businesses: multi-factor authentication on every critical account, a real password manager for your team, phishing training, and a written policy you actually have. Delivered in one to two weeks. Bilingual documentation.
Bilingual, Houston-based, real people on site
Free credential audit · Written policy delivered · Bilingual training
We do not sell security theater. Every deliverable here is a real control that blocks a real attack path we see hit Houston small businesses every month.
Every critical account (Google Workspace or M365, banking, payroll, hosting, CRM) gets MFA enabled and enrolled through Google Authenticator, Authy, or a hardware key. Recovery codes stored in the password manager. We do not use SMS as the second factor.
1Password Business or Bitwarden Teams deployed for every user. Shared vaults for team credentials. Individual vaults for personal credentials. All existing weak or reused passwords rotated. Every staff member onboarded and shown how it works in real workflows.
One-hour live training session for your team, covering real phishing examples we have seen hit Houston businesses. What to click. What to report. What to never do. Available in English or Spanish. Includes a take-home slide deck.
We check every business account against known breach databases (Have I Been Pwned enterprise API). Any exposed credentials get rotated immediately. You get a report of exactly which accounts were exposed and when.
A written policy tailored to your business covering password rules, MFA requirements, incident reporting, device standards, and vendor access. Delivered as a PDF in English and Spanish. Signable by staff.
Modern antivirus and endpoint detection configured on every business device. Bitdefender, Microsoft Defender for Business, or CrowdStrike Falcon Go depending on your platform. Alerts routed to a single inbox.
If your business touches customer records, payment info, patient data, employee payroll, or vendor accounts, you are already a target. The question is only whether you notice before or after.
The essentials package is a fixed price for the rollout. Tools you keep after (MFA app, password manager) are billed by the vendor at their standard rate.
Password manager and endpoint protection licenses are billed by their vendors at standard rates (typically $3-$8 per user per month). We do not mark those up.
These three commitments go into every quote, so you know what you are getting before we start.
After the free assessment call, you get a line-item quote within 1 business day. Rollout, licenses at vendor rate, and anything not included, all listed.
You get a documentation package (what was enabled, where, and how to recover access) and a rollout checklist we test and sign off with you.
Any question or issue in the 30 days after the rollout gets a response within 1 business day.
The essentials package covers the four controls that stop the most common attacks on small businesses: MFA rollout across every critical account, a team password manager (1Password or Bitwarden) with everyone onboarded, a one-hour phishing awareness training session, and a written security policy delivered as a PDF. We also audit your account list to find exposed or weak credentials.
The essentials package starts at $1,500 as a one-time engagement for teams of up to 10 employees (larger teams are quoted), typically completed in one to two weeks. Ongoing password manager and MFA app costs are separate and quoted at their vendor rate (typically $3 to $8 per user per month). Advanced services like managed detection and response (MDR), 24/7 monitoring, and compliance certifications (HIPAA, SOC 2) are not included and referred out to specialist partners.
Not as a compliance-certified provider. What we do handle: the security fundamentals that every compliance framework requires (MFA, password management, phishing training, access review). For businesses that need HIPAA or SOC 2 certification, we refer to specialist auditors and consultants and set up the technical baseline that makes their work easier.
Yes. Phishing training and password manager onboarding can be delivered in English or Spanish. Written policy documents are provided in both languages. This matters for Houston small businesses where the on-site staff may prefer training in Spanish.
Small businesses are attacked more often than large ones because they are seen as easier targets. Verizon's 2019 Data Breach Investigations Report found that 43% of breaches involved small business victims. The most common attack is a phishing email that steals a password. MFA and password management block that attack path almost entirely. Losing access to your business email, payroll, or client data for even a week can end a small business.
Free credential audit and security assessment. We show you exactly where you stand and quote a rollout.
Free assessment · Written policy delivered · Bilingual training