Email security for East Texas businesses

Right now, anyone can send email that looks like it came from you.

Spoofed invoices and fake wire instructions cost small businesses more than ransomware does. Let me help you solve these problems by deploying SPF, DKIM, and DMARC. Afterwards, I can help manage email authentication for your organization. Based near Lindale, serving Tyler, Longview, and the surrounding counties.

Get a free email health check See pricing

FromAccounts Payable <ap@your-company.com> ToYour best customer SubjectUpdated wiring instructions for invoice 4471

Hi Dana, we've changed banks. Please send Friday's payment to the new account below so it isn't delayed.
A scammer sent this, and it was delivered with your name on it.

How it happens

Here is how a scammer sends email as your company.

They check your DNS records

If your SPF, DKIM, or DMARC records are missing or set wrong, mail servers have no way to tell their email from yours. I can check this in seconds without any access to your systems, and so can they.

They send email to your customers using your name

It might be a fake invoice, a new bank account notice, or a request to reschedule a closing wire. It arrives with your name on it and looks normal.

You find out after the money is gone

Your customer paid, and you never received it. The bank usually cannot reverse a wire, and the email had your name on it. For title, legal, and real estate work, one of these can end a client relationship.

Free email health check

Let me check whether your domain can be spoofed.

Send me your domain and I will run the same external check a scammer would. I will email you a one-page report covering what is exposed, what it would take to fix, and what it would cost. The check reads public DNS records only, and there is no obligation.

SPF: I confirm every service that sends mail for you is listed and the record is valid.
DKIM: I confirm your messages are signed so they cannot be altered in transit.
DMARC: I check whether you are telling Gmail and Microsoft to reject fakes.
Lookalike domains: I check whether anyone has registered a near copy of your name.

Services and pricing

I charge fixed prices and write reports in plain English.

My work covers email and the systems that send it, so the scope stays clear and the price stays predictable. There are no long contracts.

Start here

Email Health Check

Free for East Texas businesses

External review of SPF, DKIM, DMARC, and MX
Lookalike domain scan
One-page report with three fixes, ranked
20-minute call to walk through it

One-time setup

Lockdown

From $1,500 by user count

SPF cleanup and DKIM signing for every sending service
DMARC moved to full enforcement, safely, in stages
Microsoft 365 or Google Workspace hardened: MFA, anti-phishing policies, external sender tags, forwarding rules, legacy sign-in off
30-minute staff briefing on wire fraud
Delivered in one to two weeks

Ongoing

Watch

From $150/month

DMARC reports reviewed monthly
Alerts when someone tries to spoof you or a new service starts sending as you
Plain-language monthly summary for the owner
Quarterly re-check and before-and-after report
Email questions answered, no ticket queue

I also help with cyber insurance questionnaires, phishing training, and recovery from a compromised mailbox.

Who this is for

I work with businesses that move money by email.

Title and escrow companies

Closing wires are the most targeted transaction in business email.

Real estate brokerages

Agents forward wiring instructions every day, often from personal accounts.

Law firms

You hold trust accounts and client records, and your clients trust anything that comes from your domain.

CPAs and bookkeepers

You handle payroll and tax data, and you are targeted hardest every filing season.

Medical and dental practices

Spoofed billing and appointment email creates HIPAA exposure.

Contractors and builders

Large invoices move through long subcontractor payment chains.

About

Josh Hamrick

I have been managing email security programs for Fortune 500 companies for the past decade. This is what I do, and I am good at it. Those companies have security teams. Most businesses in East Texas do not, and they are the ones getting hit.

I started Hamrick Security to bring that work to businesses here at a size and price that fit. Every report I write is for the owner. If something in it is not clear, that is my fault, and I will explain it until it is.

I live near Lindale with my wife and daughter.

Service area

I work in person across East Texas and remotely anywhere in Texas.

Tyler
Lindale
Longview
Mineola
Canton
Athens
Jacksonville
Kilgore
Whitehouse
Bullard

Questions

Questions I hear before the first call.

What is DMARC and do I need it?

DMARC is a DNS record that tells mail providers like Gmail and Microsoft to reject email that pretends to come from your domain. Without it, anyone can send mail as you. Gmail and Yahoo now require it for businesses that send in volume, and cyber insurers increasingly ask about it on renewals.

We already have Microsoft 365. Aren't we protected?

Microsoft 365 ships with most protections off or set to defaults. Spoofing protection, MFA enforcement, external sender warnings, and forwarding rules all need to be configured. Most small business tenants have never been hardened.

How long does setup take?

One to two weeks. In the first week I inventory every service that sends mail for you and fix SPF and DKIM. In the second week I harden your mailbox platform and move DMARC to enforcement.

Will this break our email?

No. DMARC starts in monitor mode, which changes nothing. I turn on enforcement only after every legitimate sender is accounted for in the reports, so your invoicing, CRM, and marketing mail keep flowing.

Do you need access to our systems for the free check?

No. The health check uses only public DNS records, which is the same information a scammer sees. Setup work does require admin access to your email platform, which you grant and can revoke yourself.