# Email Security Assessment

> From $25K · Offensive Security · https://cisomarketplace.services/services/email-security-assessment

Comprehensive evaluation of your organization's email infrastructure, security controls, and policies to protect against phishing, business email compromise, and data loss. Our assessment identifies vulnerabilities and provides actionable recommendations to enhance your email security posture.

## In scope

- Authentication protocol verification (SPF
- DKIM
- DMARC)
- Anti-phishing control assessment
- Email gateway configuration review
- Data loss prevention analysis
- Email retention policy evaluation
- Account security assessment
- Third-party integration review
- User awareness testing

## Deliverables

- Email security assessment report
- Configuration improvement guide
- Authentication protocol implementation plan
- Phishing defense roadmap
- Email security architecture recommendations
- User awareness training recommendations
- Policy enhancement guide

## Tiers

### Core Email Security Assessment: $25K

Email security review for up to 500 mailboxes and 3 sending domains on one platform (Microsoft 365 or Google Workspace).

Limits: users 500, domains 3

Includes:
- Platform configuration review
- SPF, DKIM and DMARC review
- Prioritized hardening plan

Excludes:
- Staff email exercises
- More than one email platform

### Advanced Email Defense Program: $45K

Up to 2,500 mailboxes and 10 domains, including one staff email exercise and a review of mail-flow rules and third-party senders.

Limits: users 2500, domains 10

Includes:
- Everything in Basic
- One staff email exercise
- Third-party sender review

Excludes:
- Ongoing DMARC management — see Managed DMARC

### Enterprise Email Protection Suite: $75K

Up to 10,000 mailboxes and 25 domains across multiple tenants or platforms; larger estates are scoped at kickoff.

Limits: users 10000, domains 25

Includes:
- Multi-tenant or hybrid mail estates
- Two staff email exercises
- Executive readout

Excludes:
- Migration or implementation work

## Terms

Starting price shown is the lowest published tier. A written proposal fixes scope, tier and price before anything is signed. Timeline is set in the SOW.

Scope this engagement: https://cisomarketplace.services/scope?service=email-security-assessment