Google Workspace Security · UK Businesses · One Named Specialist

Your Google Workspace has gaps your IT support isn't fixing.

One named specialist. No hand-offs. No gaps that fall between teams.

GetBulwark is managed Google Workspace security for growing UK businesses. We find the gaps — ex-employee accounts, spoofable domains, exposed files — fix them, and keep them closed. Start with a free 20-point audit: scored written report in your inbox within 48 hours, no credentials required.

Book the free audit See the 20-point checklist
Free
No credentials required
Scored PDF report
Zero obligation

Pick a 45-minute slot. Join on a video call. Report in your inbox within 48 hours.

Risk Score Calculator
↓ Click each issue that applies to you
215 /215
MFA not enforced — some users without 2FA−18
DMARC missing — domain can be spoofed−28
Ex-employee accounts still active−22
No backup outside Google Drive−20
External sharing — unrestricted−15
Devices without 24/7 monitoring−15
Click any issue above to see your score
↑ Click all 6 — this is where most teams score on day one
Risk Score
Tap to calculate
215 /215
MFA not enforced — 4 users−18
DMARC missing−28
Ex-employees still active−22
No backup configured−20
Average first-time audit score: 97 / 215
5–7critical gaps found on the average first audit
8 minmedian threat containment — threats stopped before they spread
From £85per user per month — priced by your roadmap
20controls reviewed live, scored out of 215
Trusted by
Recruitment firms · Creative agencies · Professional services · SaaS startups · UK SMBs on Google Workspace
What We Find

These aren't hypotheticals.
They're what the audit finds.

Every finding below appears in the majority of first audits. The details vary. The gap doesn't.

Resolved · Same Day

Publicly accessible HR folder found within 4 hours.

A 12-person recruitment firm had a Google Drive folder set to "Anyone with the link" for 31 months. It held offer letters, salary data, and right-to-work documents for every employee hired since 2022. The setting was applied once to share a single onboarding document. Nobody changed it back.

Exposure window 47 docs · 31 months · Fixed in 11 min
LOG_002 — Full case →
Resolved · 1 Working Day

Former Head of Ops held admin access 8 months after resigning.

A creative agency returned the laptop, ran the HR process, closed the payroll. Nobody suspended the Google account. She held admin-level access to every file, every inbox, and the ability to permanently delete the entire Workspace. The window was open for 8 months.

Accounts remediated 11 closed · 3 held admin rights
LOG_001 — Full case →
Resolved · 48 Hours

Professional services firm had zero email authentication in place.

No DMARC record. An attacker could send email from the firm's exact domain — same name, same address, identical to anything they'd actually sent — to any client. In a firm handling instructions, contracts, and sensitive correspondence, the risk was serious. SPF, DKIM, and DMARC were all misconfigured.

Outcome DMARC Reject · Client spoofing risk removed
LOG_003 — Full case →

The free audit checks all of this — and 17 more controls — in 45 minutes. Book yours →

Where Most Clients Start

Most clients come to us with one of these three fires.

You don't need to wait for a full audit to start. If any of these sound familiar, GetBulwark can fix it in days — not months.

Entry Point 01

Your domain is probably spoofable right now.

If DMARC isn't set to p=reject, anyone can send email that looks exactly like it came from you — same name, same address, indistinguishable to your clients. GetBulwark checks your SPF, DKIM, and DMARC records, fixes the misconfiguration, and confirms the domain is protected within 48 hours.

Help me fix my email authentication
Entry Point 02

You've had a security incident — or you're not sure if you have.

If someone clicked a suspicious link, credentials were exposed, or you noticed something unusual in your Google account — the window to contain it is now. GetBulwark runs an emergency triage review, tells you exactly what was accessed, what's still exposed, and what needs to change immediately.

Help me assess the damage
Entry Point 03

Google Drive is not a backup.

Google syncs your files. It does not back them up. Ransomware, mass deletion by a rogue app, or a compromised admin account leaves you with no recovery path. GetBulwark sets up a daily encrypted backup outside Google's infrastructure — with point-in-time recovery — so your data always has somewhere to come back from.

Help me set up a real backup
Is This Your Business?

Check what applies. See what it means.

Each item below is a finding GetBulwark checks in the free 20-point manual review. Tick what applies — the panel on the right shows exactly what that gap means in practice.

Check what applies above

Your current threat profile will appear here.

How It Works

Start with the audit. Everything else follows.

Three steps. No preparation, no commitment, no cost upfront.

STEP 01

Book a free 45-minute audit

GetBulwark reviews your Admin Console live and conducts a 20-point manual review across identity, email, data, and devices. No preparation needed. No cost, no obligation.

STEP 02

Receive your written report

A PDF scored out of 215. Within 48 hours. Every finding explained in plain English, prioritised by risk. If GetBulwark isn't the right fit, you'll hear that directly.

STEP 03

Decide what happens next

If your Workspace has gaps, GetBulwark fixes them in a single project. If you want the problems to stay fixed — and new ones caught before they matter — the same specialist manages your security every month.

The report is yours regardless of what you decide. If your Workspace scores clean — above 180 — you'll hear that directly, along with what's keeping it there. No pitch. No pressure. If GetBulwark isn't the right fit, you'll get a straight recommendation for who is.

Services

Start where the fire is. We close every gap from there.

Start here

Free Google Workspace Audit

20 controls across identity, email, data, and devices. Scored out of 215. Every gap explained in plain English with a clear priority order. Written report within 48 hours. Yours regardless of what you decide next.

£0

45 minutes · Scored PDF report · No obligation

Book the free audit
Ongoing protection

Managed Monthly

One named specialist. MFA enforced, DMARC at reject, 24/7 SOC-backed endpoint monitoring, daily encrypted backup, monthly security review. We start by fixing your current pain points — then build toward the complete standard over time.

24/7 SOC · 8-min avg containment Daily encrypted backup

From £85/user/month

excl. VAT · Priced by your roadmap · Everything included

Start with the free audit →
One-off project

Workspace Hardening Project

Already on Google Workspace but never locked it down? GetBulwark scopes the project from your audit findings and fixes everything — MFA enforced, DMARC corrected, sharing tightened, backup configured, devices monitored. Fixed price agreed before work starts.

From £750

excl. VAT · Fixed price confirmed after audit · Re-run audit included

See the project scope →

Not on Google Workspace yet? Start with a free IT Health Check — scoped to your current setup, no platform required.

Full service details, pricing, and what's included →
Why GetBulwark → What month one looks like →
What Managed Clients Get

Every control. Enforced. Documented. Maintained.

GetBulwark starts by fixing whatever is most urgent, then closes every remaining gap. No tiers. No add-ons — the same complete protection for every client. The cards below say exactly what that means.

Core

Google Workspace

Identity, admin controls, sharing, MFA, DMARC, and the 20-point manual review baseline.

Detection

Huntress

24/7 endpoint monitoring so threats get investigated before they become your problem.

Recovery

AFI Backup

Daily backup outside Google for Gmail, Drive, and Shared Drives with recoverable history.

Reporting

Monthly Review

A dated written review showing score, changes made, open items, and what gets handled next.

Operations

Starters & Leavers

Starters live within 24 hours, leavers revoked same day, with an audit trail every time.

See the monthly review → See what managed monthly includes →
Your Security Score

20 controls. Scored out of 215. No jargon.

Every finding explained in plain English. What the gap is. Why it matters. What fixes it. Written report in your inbox within 48 hours of the audit — yours regardless of what you decide next.

182 / 215

GetBulwark Security Report — Sample

20 controls. 4 categories. Every finding scored and explained in plain English. Prioritised by risk. Clear next steps for each gap. This is what lands in your inbox after the audit.

View the sample report
Why Trust It

What you can verify before speaking to anyone.

The stack is defined, the process is documented, and the sample deliverables are live. One specialist. One scope. No hand-offs.

Narrow Scope

Google Workspace only

No servers, no Microsoft sprawl, no generic IT package. The site is credible when it stays inside the lane.

Deliverables

Sample outputs exist

You can review the audit report, see what month one looks like, and understand the monthly reporting before speaking to anyone.

Fixed Stack

The toolset is already defined

Workspace hardening, 24/7 endpoint monitoring, daily backup, and written reporting. Not a menu. Not a guess.

Ownership

One person owns the work

The person running the audit is the same person doing the hardening and the same person writing the monthly review.

Why the model is this narrow → See the sample report → See how it works →
Who This Is For

The risks are different. The protection isn't.

UK businesses on Google Workspace that have outgrown basic IT. Every managed client gets the same protection stack. The work GetBulwark does is the same — the documentation and reporting is calibrated to what matters most for your sector.

Creative & Marketing

Freelancer Leak & Digital Asset Protection

Every freelancer you onboard leaves a door open. IP walks out the door when they leave — unless GetBulwark closes it first.

Read the full risk picture →
Recruitment Firms

GDPR Insurance Against the 72-Hour ICO Window

Your database is candidate personal data. One breach: 72 hours to notify the ICO (the UK data protection regulator). £17.5M fine ceiling. GetBulwark builds the technical posture that keeps that scenario manageable.

Read the full risk picture →
Professional Services

Client Confidentiality & Invoice Fraud Prevention

Solicitors, accountants, and consultancies hold client data that is inherently high-value. One compromised inbox means invoice fraud, a data breach notification, or worse.

Read the full risk picture →

Not on Google Workspace yet? GetBulwark handles the migration from Microsoft 365 or personal Gmail. Read more →

Not sure if this is for you? GetBulwark is built for UK businesses on Google Workspace with 5–100 users. If that's not you — Microsoft 365, larger enterprise, or a different stack — the free audit will still surface useful findings, and you'll get an honest referral if someone else is a better fit.

Before & After

With GetBulwark vs without.

Most businesses have never had their Workspace reviewed. Here's what changes.

With GetBulwark

  • ✓ MFA enforced on every account — one stolen password doesn't unlock everything
  • ✓ Leavers revoked same day, with a timestamped audit trail
  • ✓ DMARC at reject — your domain can't be used to spoof your clients
  • ✓ 24/7 SOC-backed endpoint monitoring — 8-minute threat containment
  • ✓ Independent daily backup — point-in-time recovery in hours, not weeks
  • ✓ Monthly security review — scored, documented, yours to keep
  • ✓ One named specialist. You know who to call.

Without GetBulwark

  • – MFA optional — one phished password is all an attacker needs
  • – Ex-employees still have access — you don't know who or to what
  • – DMARC missing — anyone can spoof your email address
  • – Antivirus catches known threats. Misses ransomware staging quietly.
  • – Google Drive syncing your data, not backing it up. No recovery path.
  • – No audit, no baseline — you don't know your score until something goes wrong
  • – Security falls to whoever has a spare hour
Questions

Straight answers.

Anything not covered here — email hello@getbulwark.com. Honest answer within one business day.

If you're on Google Workspace and you've never had it audited, there are gaps. The average first-time score is 97 out of 215. MFA not enforced on every account. An ex-employee still with access. DMARC missing or set to none. These aren't unusual — they show up in nearly every first audit. The free audit makes them visible. Whether you act on them is your call.

20 controls across identity governance, email authentication, data access controls, and endpoint monitoring. Scored out of 215. Every finding explained in plain English with a priority rating. Written report in your inbox within 48 hours. Yours regardless of what you decide — no pitch, no pressure. See a sample report →

You email GetBulwark. New starters are live within 24 hours — account created, groups and drives configured, MFA enforced, email signature deployed. Leavers are offboarded the same day — account suspended, all active sessions revoked, access audited, data preserved, timestamped record filed. Both are included in the monthly price. No extra charge.

No — and that's deliberate. Every managed client gets the same stack: MFA enforced, DMARC at reject, 24/7 SOC-backed endpoint monitoring, daily encrypted backup, monthly security review. No tiers. A setup that's 80% there still has gaps — and gaps are what attackers find. The single price includes everything because security only works when it's complete.

Most IT support handles helpdesk — password resets, device setup, software installs. GetBulwark is focused exclusively on security posture: what can go wrong, whether the controls that prevent it are actually in place, and whether the evidence exists to prove it. If you already have IT support, GetBulwark works alongside them. If you don't, the managed service covers both.

GetBulwark is granted admin-level access to your Google Workspace Admin Console — the same access you already hold as an admin. This is used to review configuration settings, user accounts, and security controls. GetBulwark does not access the contents of email inboxes or personal files, and does not store copies of your data. Every access action is logged by Google's own audit trail.

Yes — the audit is exactly that. It is free, there is no commitment attached, and the report is yours regardless of what you decide. Many clients book the audit with no intention of doing anything further and use the report to prioritise their own fixes. That is fine. If GetBulwark is the right fit after the audit, you'll know.

Every finding in the report is written in plain English with no assumed technical knowledge. The priority order is explicit — you'll know what to fix first and why. If anything in the report is unclear, email GetBulwark and you'll get a straight answer. The goal is that you understand your own risk position, not that you rely on GetBulwark to interpret it for you.

More questions answered on the services page →
Free · No Obligation · Report Yours to Keep

Find out your score.
45 minutes. Written report. Free.

GetBulwark reviews 20 controls across your Google Workspace live — identity, email, data, and devices. You get a scored PDF report within 48 hours, written in plain English, regardless of what you decide next.

Average first-audit score: 97 / 215. Most businesses have more gaps than they expect.

Book the free audit

hello@getbulwark.com · 0141 461 3680 · Mon–Fri 9am–5pm UK