Three ways to work with GetBulwark.

A structured 15-minute call to map your current environment. We confirm what platform you are on, how your team is set up, and where the most significant gaps are. No technical knowledge is required on your side. No preparation is needed before the call.

By the end of the call, you will have a plain-English summary of what needs to happen, in what order, and a fixed price for the next step. If your situation is not a fit for GetBulwark, that will be said directly on the call.

• Covered Current Google Workspace configuration and any known gaps
• Covered Team size, structure, and device setup
• Covered Active risks: lapsed access, domain exposure, backup status
• Covered Cyber Essentials baseline: where you currently sit against the five controls
• You get Plain-English summary. Fixed price for the next step. No obligation to proceed.

A structured assessment of your Google Workspace environment against the five Cyber Essentials controls. Every setting, every account, every device in scope is checked and documented. Fixed price, completed within two weeks.

You receive a written report showing exactly where your environment stands, every gap found, the risk each one carries, and a clear remediation roadmap. The assessment stands alone or feeds directly into the hardening project.

• Covered Full configuration review against all five controls
• Covered Every user account and access level audited
• Covered Device, email, and backup posture assessed
• Covered Written findings report with risk-rated remediation roadmap
• You get A written assessment report. A clear picture of where you stand. No obligation to proceed.

A one-off project to close every gap the assessment identifies. Fixed scope. Fixed price. Completed within two to three weeks. Nothing is left open-ended.

Every item maps to a Cyber Essentials control. The project ends with a written before-and-after document showing exactly what changed, what was found, and where your environment now sits against the Cyber Essentials baseline.

• Identity MFA enforced on every account. Admin roles tightened. All lapsed and ex-employee access removed.
• Email DMARC set to reject. DKIM and SPF verified. Your domain cannot be impersonated to redirect client invoices.
• Data Drive sharing permissions reviewed. External sharing locked to known contacts. Shared Drive access audited.
• Devices 24/7 endpoint monitoring deployed on every managed device. Remote management agent installed and configured.
• Backup Independent daily backup configured outside Google's infrastructure. Gmail, Drive, Calendar, and Shared Drives covered.
• Browser Chrome locked down through native Google Workspace controls. Dangerous extensions blocked. Safe browsing enforced across managed devices.
• You get Written before-and-after. Cyber Essentials posture summary. Fixed price, no additions.

Ongoing ownership of your Google Workspace environment. One specialist. One fixed monthly price. No tiers, no add-ons, no helpdesk queue. The person you speak to is the person who does the work.

Managed monthly clients receive a written security review every month. If something changes, a staff member leaves, a new device joins, a threat is detected, it is handled the same day. A quarterly Cyber Essentials posture check keeps your environment aligned as the standard updates.

• Lifecycle Same-day leaver offboarding. New starters provisioned and fully live within 24 hours.
• Monitoring 24/7 human-led threat monitoring on every managed device and cloud account. Contained before you find out.
• Backup Independent daily backup maintained and tested. Point-in-time recovery available at any time.
• Devices Remote patch management running silently in the background. Device posture maintained continuously.
• Review Written monthly security review. What changed, what was detected, what was done. Documented, not assumed.
• Compliance Quarterly Cyber Essentials posture check. Your environment stays aligned as the standard evolves.
• Support Support response during UK business hours, 9am to 5pm, Monday to Friday. Monitoring runs 24/7 through the Huntress human-led SOC regardless.
• Terms Six-month minimum term, then rolling with 30 days notice. No multi-year lock-in.

Not every problem needs a project or a retainer. Some need a specialist in the room for a defined piece of work: a certification to reach, a decision to get right, a team to bring up to speed.

Each engagement below stands alone. You get the same person, the same standard of written output, and a fixed scope agreed before anything starts.

• Cyber Essentials Certification support. You hold your own IASME Portal account and remain the applicant throughout. GetBulwark prepares your environment and works through the self-assessment questionnaire with you, question by question.
• Architecture Google Workspace architecture and migration consultancy. Environment design, moves from Microsoft 365 or legacy setups, organisational restructures, and tenant consolidation, planned and documented.
• Training Admin, Gemini, and Workspace efficiency training for your team. The first admin session includes a written runbook your business keeps.
• Support block A prepaid block of engineering hours for teams that need the expertise without a monthly retainer. Valid for six months, used as you need it.
• You get Fixed scope, written deliverables, and a price confirmed before any work begins.

Your client relationship stays yours. GetBulwark delivers the Google Workspace security work, security assessments, hardening projects, and ongoing management, under your brand and to the same standard as a direct engagement.

Every deliverable is written so you can present it as your own. Scope, pricing, and boundaries are agreed per partner before the first client engagement, so there is never ambiguity about who owns what.

• Delivery Assessments, hardening projects, and ongoing Google Workspace management, executed by GetBulwark and presented under your brand.
• Reporting White-labelled written reports and before-and-after documents, ready to hand to your client.
• Boundaries Your client, your relationship. Commercial terms and communication lines agreed in writing before any work starts.
• Standard The same five Cyber Essentials controls, the same methodology, and the same specialist as every direct engagement.
• You get A Google Workspace security capability your business can sell, without hiring for it.