02 · Foundations

The DNS, email, and Workspace under your website.

Domain, DNS, email authentication, Google Workspace and Microsoft 365, backups, and access control. Almost nobody maintains it, and it is where most of the problems we find actually live.

Free audit · No obligation · Results in 3 business days

Underneath the website

The website gets blamed. The foundation is at fault.

The foundation was set up once, by whoever was around, and never looked at again. A web designer added the DNS records. An office manager created the Workspace. A vendor took the domain into its own account to make hosting easier, and kept it. Each of them did one thing and moved on, and nobody owns the whole. That is why invoices land in spam, and why fixing it takes a phone call to three people who have all left.

We map the whole layer, fix it in order of cost, and hand it back to you written down.

  • Domain held by a former vendor
  • DNS records nobody can explain
  • Mail routed through a dead provider
  • Workspace admin on a personal account
  • Licenses for people who left
  • A backup nobody has restored

What's included

What we fix, and what we keep watching.

Domain and DNS
Registrar in your name, records cleaned up, nothing pointing at a vendor you left.
Email authentication
SPF, DKIM, and DMARC set up and monitored, so mail from your domain arrives.
Google Workspace and Microsoft 365
Security settings, shared drives, groups, and a license audit against who actually works there.
Backups
Site, mail, and files backed up on a schedule, with a restore that has been tested.
Access control
Who has admin on what, written down, with MFA on every account that matters and former vendors removed.
Monitoring
DNS and SSL watched on every plan. Email authentication and automation health checked on Care and above. See the plans.

In practice

How the foundation work runs.

  1. 01

    Map what exists

    Every domain, record, account, and license, and who holds the keys to each. Most businesses have never seen this list.

  2. 02

    Fix in order of cost

    Email that is not arriving comes before a license that is wasting money, which comes before tidying. You see the order and the reason.

  3. 03

    Write it down and watch it

    A record of where everything lives and who can change it, then monitoring so it stays fixed.

FAQ

Questions about foundations.

Why is my email going to spam?

Usually because your domain has no SPF, DKIM, or DMARC records, or they were set up for a mail service you no longer use. Receiving servers cannot tell your mail from a forgery, so they file it as one. It is a fix, not a rebuild, once someone looks.

We already have an IT person. Why does this matter?

It often does not overlap. IT keeps laptops and networks running; this is the domain, the mail, and the accounts a website depends on, and it is usually nobody's job. We work alongside whoever you have.

What do you do inside Google Workspace and Microsoft 365?

Setup, security settings, shared drives, license audits, backups, and access control, in either one or both. Ongoing management is part of the Care plan and above.

Free

A free audit of your site and the systems under it

A 15-point audit of your website and domain — from nothing but your domain and an email address. We run it, write it up, and send you the report. No obligation, and you keep the report whether or not you hire us.

We use what you send only to run the audit and reply. No newsletter, and nothing you type is shared.

What's checked — free

All we need is your domain and your email address.

Site
  • speed
  • mobile
  • accessibility
  • broken links
  • SSL
  • indexability
Foundation
  • DNS records
  • SPF and DMARC
  • domain ownership
Search
  • Google Business Profile
  • metadata
  • schema
  • analytics tags
Risk
  • vendor lock-in
  • external exposure

What needs access — Systems Audit, $1,450

These can't be seen from outside. They require read access you grant us.

Foundation
  • Workspace configuration
  • license waste
Search
  • local ranking
  • Search Console and analytics data
  • conversion tracking verification
Risk
  • backups
  • admin access
  • MFA
  • orphaned accounts

Neither is a security audit. The free report observes what's publicly visible; the Systems Audit reviews your configuration.