Start here
Security Checkup
A review of your Microsoft 365 using read-only access. Nothing in your setup changes.
- Sign-ins, MFA and admin accounts
- Email protection and forwarding rules
- Former staff, sharing and backups
For St. Louis architecture & engineering firms
Your drawings, bids and wire instructions deserve a locked front door.
Lockmoor secures Microsoft 365 for small design firms: sign-ins, email, admin accounts and backups. Plain English, fixed price, no IT department required.
Punch list · Microsoft 365
What we check
- MFA on every accountA stolen password alone stops working.Sign-ins
- Admin accounts kept separate and fewThe keys to every mailbox and file.Admins
- Outside auto-forwarding blockedStops silent copies of your mail.Email
- SPF, DKIM and DMARC passingScammers can't send invoices as you.Email
- Former staff fully removedNo forgotten accounts left open.People
- A recovery plan you've testedDeleted files and ransomware covered.Data
Every item comes back in a written report, ranked by what to fix first.
Why design firms
Small firms hold big-project data, usually with no IT person watching it.
One password is usually the way in
Most small-business breaches start with a stolen login, not a sophisticated hack. Microsoft says MFA plus blocking old sign-in methods stops more than 99.9% of common identity attacks.
Payment fraud follows the project
Attackers who get into one mailbox wait for a large invoice, then send a "new bank details" email that looks completely real to your client.
Insurers and clients are asking
Cyber insurance applications and client contracts increasingly ask whether you use MFA and protect email. A checkup gives you honest answers to put on the form.
Source: Microsoft Learn, Security defaults in Microsoft Entra ID.
Services
Start with a checkup. Fix what matters. Keep it that way.
Every engagement is fixed-price and quoted after a free call, so you know the cost before any work starts.
Then
Lockdown Setup
We work through the fixes from your report together on a video call, with your screen shared.
- MFA for everyone, with staff walkthrough
- Separate admin and emergency accounts
- SPF, DKIM and DMARC for your domain
Ongoing
Monthly Check-in
A short monthly review so your setup doesn't drift as people come and go.
- Users and admins compared to staff
- Secure Score tracked over time
- Unusual sign-ins flagged
Spending hours on repetitive admin work? Lockmoor also sets up simple automations. Ask about it on your call.
How it works
Four steps, and you approve each one.
Free 20-minute call
You describe your firm and setup. We tell you honestly whether a checkup is worth it.
Read-only checkup
You grant temporary read-only access with a written agreement. Nothing changes.
Report and plan
You get the findings in plain English, ranked by risk, with a fixed quote for any fixes.
Fix together
We make the changes with you, then remove our access when we're done.
About
Local, hands-on, and we use what we recommend.
Lockmoor is run by Brandon, an IT professional based in St. Louis. It started from a simple observation: most small-firm breaches begin with one stolen password, and the fixes are known, affordable, and rarely done.
You work with the same person from the first call to the last fix, and every recommendation comes with a plain explanation of why it matters.
Contact
Book a free 20-minute call.
Email a couple of times that work for you and roughly how many people are on your Microsoft 365. You'll get a reply from Brandon directly.
Not ready for a call? Ask for the free Microsoft 365 Security Starter Kit, a printable checklist your office manager can work through on their own.
FirmLOCKMOOR
ScopeMicrosoft 365 security for small A/E firms
LocationSt. Louis, Missouri
Email
First stepFree 20-minute call