Google Workspace Security · UK

One dedicated consultant who looks after your Workspace.

Security reviews. Monthly reporting. Starters and leavers. All the things that should be happening but aren't — handled proactively by a specialist who knows your environment. Every month.

45 minutes · 20 security checks · Written PDF report · £0

Bulwark Security Report
March 2026 · Acme Ltd
182 /215
MFA enforced — 12/12 users compliant
SPF hard fail (-all) configured
DKIM — google selector verified
DMARC — policy: reject, reports active
External sharing — restricted to domain
1 MacBook pending macOS 15.3.1
0 inactive accounts (>90 days)
Super admin roles — 1 assigned (correct)
PDF · 4 pages · Delivered via emailNext: April 2026
↑ 12 points since February
Security Report
March 2026
182 /215
MFA enforced — 12/12 users
DMARC — reject policy active
1 device pending OS update
0 inactive accounts
↑ 12 points since February
Dedicated consultant
20-point security audit
Monthly written report
Same-day urgent response
The Reality

This is what Bulwark finds in almost every audit.

None of it is unusual. All of it is fixable. Most of it takes less than a day.

Anyone can send email as your company

SPF, DKIM, DMARC — three settings that stop people impersonating your domain. Most small businesses have never heard of them, let alone configured them. Takes about 20 minutes to fix.

People who left still have access

Their account is still active. Their Shared Drive access was never revoked. They're still logged in on a personal laptop somewhere. Nobody checked because nobody's job is to check.

Company files live on personal accounts

Staff using personal Gmail for work. Client data in personal drives. When someone leaves, every file they created walks out the door with them. Permanently.

The problem isn't that your team is careless. It's that nobody owns this.

The Free Audit

20 checks. Four categories. Plain English.

Every audit covers the same 20 checks scored out of 215. No jargon. No ambiguity. You'll know exactly where you stand.

Identity & Access

MFA enforcement status for every user
Password policy strength and expiry
Admin role assignments and least privilege
Inactive accounts (90+ days dormant)
Less secure app access disabled

Email Security

SPF record — exists, syntax, enforcement
DKIM — configured and passing
DMARC — policy level and reporting
Email forwarding rules and suspicious filters
Gmail safety settings configuration

Data Governance

External file sharing settings
Shared Drive permissions and access levels
Google Groups — external posting restrictions
Marketplace app access and OAuth grants
Data regions and storage compliance

Device Management

Mobile Device Management enabled
Endpoint protection deployed
OS patch compliance across fleet
Screen lock and encryption enforcement
Remote wipe capability confirmed
Book your free audit

4-page PDF. Scored and prioritised. Within 48 hours.

The Monthly Report

This is what lands in your inbox. Every month.

Most IT companies promise "monthly reporting." Bulwark shows you exactly what that means before you've spent a penny.

182
out of 215

Bulwark Security Report — Sample

20 checks. 4 categories. Every finding scored and explained. Action items with clear next steps. No jargon. See exactly what a real report looks like.

View the sample report
Services

Three services. Fixed prices. No surprises.

One-Off Project

Cloud Foundation

Complete setup or migration — from Microsoft 365, basic hosting, personal Gmail, or a Workspace that's never been configured properly. Domain, users, security, training, documentation. Everything.

From £2,500
excl. VAT · Fixed price after discovery call
Get a quote →
Ongoing Management

Managed Monthly

Monthly security review. Written report. Starters and leavers. Admin console oversight. Same-day urgent response. One specialist consultant. Every month.

£85/user/month
excl. VAT · Minimum 5 users · 3-month minimum
Book a call →
Start Here

Free Security Audit

20 checks. Scored out of 215. Prioritised findings. 4-page PDF. No cost, no commitment. If Bulwark isn't the right fit, you'll hear that directly.

How It Works

Three steps. Nothing complicated.

01

Discovery call

30 minutes. Bulwark reviews your current setup and identifies what needs attention. You don't need to prepare anything.

02

Audit and report

20-point security audit on your Admin Console. PDF report within 48 hours. If work is needed, a fixed-price proposal — no hourly billing.

03

Ongoing management

Cloud Foundation if needed, then proactive monthly management. One dedicated consultant who built your Workspace manages it. Every month.

Who This Is For

Professional services teams. 5–30 people. No IT person.

Remote or hybrid. Running on Google Workspace. Nobody whose job is to manage IT. Sound familiar?

Marketing & PR Agencies

Remote-first, Google native, fast-moving

Consultancies & Advisory

Distributed, client-facing, data-sensitive

Recruitment Firms

High turnover, constant joiners and leavers

Accountancy Practices

Regulated, security-conscious, trust-dependent

Architecture & Design

Project-based, file-heavy, often hybrid

Tech Startups

Growing fast, Google-first, no IT hire yet

Not on Google Workspace yet? Bulwark handles the migration — from Microsoft 365, basic hosting, or personal Gmail. Learn more →

What Changes

What actually happens when Bulwark manages your Workspace

  • You stop worrying about IT

    Someone reviews your Workspace every month. Access, configurations, devices. You don't think about it because someone's job is to think about it for you.

  • You know exactly what's going on

    A scored report in your inbox every month. What was checked, what changed, what needs attention. Without having to ask.

  • Starters and leavers just happen

    New person? Email Bulwark. Account live within 24 hours. Someone leaving? Offboarded the same day. No checklist for you to follow.

  • One person who knows your setup

    Not a ticket queue. Not a different technician each time. The same dedicated person who built your Workspace manages it. That's the whole point.

Security Report
March 2026 · Your Company
87 /95
MFA enforced — 8/8 users compliant
SPF — hard fail configured
DKIM — verified, no issues
DMARC — reject policy active
External sharing — restricted
2 devices pending OS update
0 inactive accounts
Admin roles — 1 super admin (correct)
PDF · 4 pages · 01/03/2026Next: 01/04/2026

This lands in your inbox on the 1st. Every month.

The Comparison

Bulwark vs what you're used to

Bulwark

  • One dedicated consultant who knows your environment
  • Written security report every month
  • Google Workspace only — full depth, no generalism
  • Proactive — you hear from us before things break
  • Fixed monthly price — no hourly surprises
  • Starters and leavers handled for you
  • Same-day urgent response

Typical IT Support

  • Different technician every time you call
  • No reporting — silence until something breaks
  • Generalist — handles everything, masters nothing
  • Reactive — you chase them when things go wrong
  • Hourly billing or opaque retainer
  • Joiners and leavers — your admin burden
  • Ticket queue — response time: whenever
Questions

Frequently asked

Still have a question?

No pressure. No pitch. Just an honest answer within one business day.

support@getbulwark.com Book a call now

Personal accountability. One dedicated specialist consultant manages your Workspace, reviews it monthly, writes the report, and responds when you need something. Bulwark only does Google Workspace for professional teams of 5–30 people. That focus means deeper expertise and faster responses than any generalist.

No. If your team can open Gmail and find a file in Google Drive, that's enough. Bulwark handles the security configuration, user management, email authentication, device policies, and proactive monthly reporting.

You email Bulwark. New starters are live within 24 hours — account, groups, drives, MFA, email signature, welcome email. Leavers are offboarded the same day — account suspended, sessions revoked, permissions audited, data preserved. Both included in the managed monthly service.

Yes. The Cloud Foundation Project covers migration from Microsoft 365, basic email hosting, or personal Gmail — email, calendar, contacts, and files. Bulwark handles everything including DNS cutover, training, and a post-migration audit. Typical timeline: 3–5 weeks. Read more →

20 checks across four categories: identity and access, email security, data governance, and device management. 4-page PDF scored out of 215. Every finding in plain English. No technical preparation is needed from you. See a sample report →

Almost certainly. Most businesses on Workspace have never had it audited. The free audit typically finds critical issues with email authentication (stopping impersonation), external sharing, inactive accounts, and MFA. All fixable, most within a day. The audit is free and has zero obligation, so there's no reason not to find out.

Start Here

Find out where your Workspace actually stands

Book a free discovery call. 30 minutes. If Bulwark isn't the right fit, you'll hear that directly — along with a recommendation for who is. No preparation or commitment required.

Book your free audit now

support@getbulwark.com · Mon–Fri 9am–5pm UK