With Microsoft 365

Protect your company's email and files

Email is how most problems get in, and files are where the information you can't lose actually lives. We work on Microsoft 365 so both end up properly configured.

Chat on WhatsApp

What it's for

So your company's email is hard to impersonate, your accounts are hard to steal, and your files are seen only by the people who should see them. All inside Microsoft 365, the platform you are most likely already paying for.

What it helps you avoid

Situations we see often in companies like yours:

An email that looks like it's from your director or a supplier, asking to change a bank account.
Someone on the team types their password into a fake page and a stranger gets into their mailbox.
A shared folder with an open link that ended up where it shouldn't have.
A supplier receives your altered invoice because someone had been reading the conversation.
Accounts still active months after the person left the company.

What Waxxor does

The work splits into two fronts.

Secure email

Protection against phishing, impersonation and malicious messages

We review and adjust the Microsoft 365 policies that filter fraudulent email, links and dangerous attachments.

Account access security

We configure multi-factor authentication and access policies, so a stolen password is not enough to get in.

Domain configuration: SPF, DKIM and DMARC

These are three settings in your domain's public configuration. In short: they tell mail servers around the world which messages genuinely come from your company, making it much harder for someone else to pose as you.

Secure files

SharePoint and OneDrive with structure

We define where each type of information lives and who has access to it, instead of folders shared with the whole company.

Access permissions

We adjust permissions by area and by role, and review inherited access that nobody remembers granting.

Collaboration and sharing

We configure how files get shared inside and outside the company: expiring links, controlled guests and a record of who accessed what.

What's included and what isn't

What it normally includes

Review of your current Microsoft 365 configuration.
Adjustment of email, access and identity policies.
SPF, DKIM and DMARC configuration on your domain.
Organization of permissions and sharing in SharePoint and OneDrive.
Documentation of what was configured, plus operating recommendations.

What's worth making clear

Available capabilities depend on the Microsoft 365 licenses your company holds. Not every feature exists in every plan.
The exact scope is defined in the proposal. Not every engagement covers the same ground.
Good configuration reduces risk; it does not remove it. No policy stops one hundred percent of attempts.
SharePoint and OneDrive are storage and sync, not a backup service. If a file is deleted or encrypted and the change syncs, recovery has limits in time and in versions.

The technology behind it

We work on Microsoft 365. If your company already has it, you don't need to change platforms: the work is about getting the value out of what you already pay for.

Microsoft 365

The platform where the company's email, files and identities live.

Exchange Online

The email service, where policies against phishing and impersonation are applied.

SharePoint and OneDrive

Company and personal file storage, with its permissions and sharing settings.

Microsoft Entra ID

Identity and access control: who gets in, from where and with what verification.

Frequently asked questions

We already have Microsoft 365. What does this give us?

Microsoft 365 arrives with many protections switched off or left at their factory settings. The work consists of reviewing them, enabling the ones your licenses allow and tuning them to how your company works.

What are SPF, DKIM and DMARC?

They are three settings in your domain's public configuration. Together they let mail servers around the world tell the messages that genuinely come from your company apart from the ones someone sends while posing as it.

Does this replace our backups?

No, they are different things. OneDrive and SharePoint store and sync files. A backup service keeps separate, protected copies that can be restored even if the original is lost or encrypted.

Is this going to change how we work?

The goal is for it to be barely noticeable. Some changes are felt, such as the second factor at sign-in. We agree on those beforehand and explain them to your team.

See all services

SentinelOne protection

We implement and configure SentinelOne on your company's computers and servers, and follow up on the alerts.
Backup and recovery

Copies of your information protected against modification or deletion, with quarterly restore testing.
Security assessment

Three distinct scopes, from a free diagnostic conversation to a technical analysis defined by proposal.
Security awareness

Workshops and good practices so your team recognizes and reports fraud attempts, with phishing simulations according to the contracted program.
Penetration testing

An authorized exercise to find, in a controlled way, what an attacker could take advantage of. Every project is designed with its own scope.

Shall we review how your Microsoft 365 stands today?

Book a conversation at no cost. We look at how your team works, which licenses you have and what is worth adjusting first.