One engagement that closes the gaps your cyber insurer and corporate clients are already checking.
The Law Firm Security Baseline
One clear, productized program that closes the exact gaps attackers, cyber insurers, and your corporate clients are already checking. Delivered in three phases, not a vague menu of capabilities.
The program
Three phases. Every deliverable defined upfront.
You'll know exactly what we're doing, what evidence we need access to, and what you receive at the end, before work begins.
Assessment
External and internal review- Proprietary Exposure Review: email spoofing risks, fake lookalike domains, and exposed web addresses
- Structured security interview with key staff
- Microsoft 365 configuration review from your tenant
- External scan of what your firm looks like to an attacker
- Risk findings ranked by likelihood and law-firm impact
Hardening
Remediation and configuration- Multi-factor authentication enforced for all users
- Legacy login methods disabled
- Email spoofing protections configured and turned on
- Mailbox forwarding rules audited and restricted
- External sharing locked to authorized contacts only
- Admin privilege reduction and emergency account setup
- Full audit logging enabled
Readout and Roadmap
Documentation and evidence- Plain-English executive report for partners
- Before and after configuration evidence for every change
- One-page security summary for client questionnaires
- Prioritized roadmap for what to address next
- Handoff documentation for your IT provider
Engagement tiers
Directional pricing, final scope confirmed after your free review
You're never quoted blind. The Proprietary Exposure Review gives us both a clear picture of your environment before we confirm scope and figures.
Foundation
Pricing shared after free review
one-time engagement
The baseline assessment and core Microsoft 365 hardening for a solo or small firm.
- Proprietary Exposure Review and external scan
- Structured security assessment
- Multi-factor sign-in protections enforced
- Email impersonation protections configured
- Partner-ready readout
Managed
RecommendedPricing shared after free review
per month
Ongoing monitoring and quarterly hardening for firms with active client obligations.
- Everything in Foundation
- Quarterly re-assessment
- Continuous lookalike-domain monitoring
- Client questionnaire support
- Cyber insurance attestation help
Enterprise
Custom scope and pricing
tailored scope
For multi-office firms with complex tenants and demanding outside counsel guidelines.
- Everything in Managed
- Multi-office scope
- Named security advisor
- Tabletop incident exercises
- Board and partnership reporting
Free
Start with a free Proprietary Exposure Review
It takes minutes, requires no system access, and comes with no sales pitch. You get a clear, honest picture of the public signals attackers can use.