About GetBulwark — Google Workspace Security for UK Businesses

Callum Fraser

Founder · GetBulwark

Why I built this.

Before GetBulwark I worked at a UK Google Cloud Partner, managing Workspace environments for businesses at every scale. The pattern was the same everywhere: MFA not enforced, leavers still active, sharing wide open, DMARC either missing or set so loosely that anyone could spoof the domain.

None of it was unusual. The gaps were not caused by carelessness. They existed because nobody had been given clear ownership. The MSP was handling tickets. The IT contact was juggling five other things. Google's default settings are not secure, and nobody had sat down to fix that deliberately.

The technical fixes were rarely dramatic. The real problem was accountability. Small businesses need someone to look at the admin console, explain what is wrong in plain English, fix it to a defensible standard, and keep watch after the project is done. GetBulwark exists to be that person for UK teams that have outgrown basic IT but do not need a full internal IT department.

GetBulwark launched in early 2026. The business is early. The standard is not. Every audit is real, every report is yours to keep, and every client gets the same stack, process, and monthly discipline from day one.

GW only

Google Workspace only. No servers, no Microsoft sprawl, no diluted focus.

20 checks

Every audit. Identity, email, data, and devices. Scored PDF within 48 hours.

Huntress

Chosen because it's purpose-built for SMBs — not a scaled-down enterprise tool. 24/7 SOC, 8-minute average containment.

AFI

Chosen because it backs up at the item level — recoverable to a specific email or file, not just an all-or-nothing restore. Outside Google's infrastructure.

The Commitment

The Founder's Promise.

Three things that will be true for every client. Not aspirational language. Operational guarantees.

The person you talk to is the person who does the work.

Not a helpdesk. Not a rotating cast of technicians. The specialist who runs your audit is the same person who delivers the report, manages the fixes, and owns the monthly review. That does not change.

At this scale, the service works because it is personal. You always know who is responsible. There is no ambiguity about whose job it is when something needs attention.

Callum Fraser

Founder · GetBulwark

Promise 01

The audit report is yours to keep, no matter what.

Every engagement starts with a free 20-point manual review. The written report is yours whether you work with GetBulwark afterwards or not. No conditions, no follow-up lock-in. If your setup is strong, you will hear that directly.

Promise 02

If the hardening project does not fix what was found, we fix it at no additional cost.

Every hardening project ends with a re-run audit. Before and after. If a finding identified in the original audit is not resolved, the fix is included at no extra charge. The deliverable is a genuinely improved score, not just a set of completed tasks.

Promise 03

If GetBulwark is not the right fit, you will hear that directly.

If you already have strong internal IT, the work sits outside the Google Workspace lane, or a different specialist would serve you better, you will be told plainly and pointed somewhere useful. No pressure, no pivot to a watered-down version of the service.

The Scope

Specific on purpose.

GetBulwark is for UK businesses on Google Workspace that have outgrown basic IT — from early-stage teams to established firms without a dedicated internal IT function. That narrow focus is the point. If the work sits outside that lane, you will hear that directly.

GetBulwark does

✓ Free 20-point manual security reviews
✓ Workspace hardening projects for teams already on Google Workspace
✓ Cloud Foundation projects for businesses moving from M365, personal Gmail, or basic hosting
✓ Managed monthly security at a fixed per-user price
✓ Access governance — starters within 24 hours, leavers revoked same day
✓ SPF, DKIM, and DMARC configured and monitored
✓ Huntress-backed endpoint monitoring on every managed device
✓ AFI backup for Drive, Gmail, and Shared Drives

GetBulwark doesn't do

✗ Microsoft 365 ongoing support
✗ Windows servers or Active Directory
✗ Network infrastructure or hardware
✗ On-site visits
✗ Printers, phones, or physical IT
✗ General break-fix support
✗ Businesses that need a full in-house IT department
✗ Being everything to everyone

The Model

Three entry points. One destination.

The retainer is the business. The audit, hardening project, and foundation project exist to get clients there cleanly. The process is simple because it needs to be repeatable.

01 — Start

Free 20-point manual review

Every engagement starts here. 45 minutes, 20 controls reviewed, written PDF within 48 hours. No cost, no obligation. Most businesses have 5 to 7 critical gaps. This is where they become visible.

02 — Setup

Hardening project or foundation build

Already on Google Workspace? The hardening project fixes what the audit found, typically in 2 to 4 weeks. Not on Workspace yet? The Cloud Foundation project builds the entire environment properly from day one.

03 — Ongoing

Managed monthly

From £85 per user per month. Huntress-backed endpoint monitoring, AFI backup outside Google, monthly security review, and same-day leaver handling — all included. Pricing confirmed on discovery call. No surprises, no add-ons.

04 — Reporting

Reporting that proves the work is happening

Not a vague "all good" email. A scored PDF, clear findings, and a monthly report showing what changed, what was fixed, and what still needs attention.

05 — Response

The same person, every time

Not a queue. Not a rotating cast of technicians. The person who ran the audit remains the person who owns the environment, the fixes, and the monthly review.

06 — Pricing

Fixed monthly. Full stack included.

From £85 per user per month. Huntress, AFI, Workspace hardening, user lifecycle, and monthly reporting. Lean on purpose. No fluff, no upsells, no surprise add-ons.

We built GetBulwark because nobody else was doing this properly.