Cybersecurity services
Email Security and Security Awareness Training, Managed for You
Most attacks start in the inbox. BTI filters dangerous email before it arrives, configures SPF, DKIM and DMARC so spoofing your domain is much harder and you get reports on attempts, and trains your people to spot what gets through, with records that prove they did.
Free cybersecurity assessment
No cost, no obligation. Business inquiries only. Already a BTI client? Use the dedicated support number assigned to your organization.
- ✓Over 40 years in business
- ✓ISO 27001 compliant
- ✓SOC 2 NOC/SOC
- ✓ISNetworld member
- ✓GSA contract holder (47QTCA21D00BA) · CMAS and TESMA contract awardee (California)
Email protection with Proofpoint
BTI uses Proofpoint Essentials or Proofpoint Enterprise, depending on your organization's size, to filter inbound email for phishing, malware, malicious links and attachments, and impostor messages before they reach users. BTI manages the policies, quarantine and allow lists, and investigates messages users report.
- Inbound filtering for phishing, malware and spam.
- Impersonation and business email compromise protection.
- Reported-message handling by BTI.
- Integrated with Microsoft 365.
Domain protection: SPF, DKIM and DMARC
Without these three records, it is easy for someone to send email that looks like it came from your domain. SPF and DKIM let receiving servers check that mail really came from you; DMARC tells them what to do with mail that fails those checks and sends you reports on who is sending as your domain. Together they make spoofing much harder; they do not stop every lookalike domain or compromised account. BTI reviews and configures the records, moves DMARC toward enforcement in stages so legitimate mail keeps flowing, and monitors the reports.
Domain and DNS protection beyond email (registrar lock, DNSSEC, protective DNS, website protection) is covered on Website & DNS Security.
Security awareness training and phishing simulation
Filters do not catch everything, so your people are the last line of defense.
- Security awareness training assigned to every employee, with onboarding modules for new hires.
- Fully managed phishing simulations run by BTI: we set the schedule, choose realistic templates, and track who clicks and who reports.
- Remedial training assigned automatically to repeat clickers.
- Completion records kept as evidence for auditors, customers and insurers.
- Training tracked alongside your Acceptable Use Policy acknowledgments in your WISP and evidence controls.
Email filtering and web security, and employee awareness training with phishing simulation, are both controls cyber insurers commonly ask about. See Cyber Insurance Readiness.
When a phish gets through
If a user clicks, BTI's 24/7 NOC/SOC investigates related endpoint and identity activity, and the steps in your incident response plan guide password resets, mailbox review and containment. See 24/7 MDR & Incident Response. MFA from Identity, MFA & Devices limits what a stolen password can do.
Getting started
- Free assessment, including a review of your mail flow and SPF, DKIM and DMARC records.
- Itemized proposal per mailbox and per trained user.
- Proofpoint deployment and DMARC rollout plan.
- First baseline phishing simulation, then a training schedule.
Frequently asked questions
Do we still need email security if we have Microsoft 365?
Microsoft 365 includes basic filtering. Proofpoint adds a dedicated layer for phishing, impersonation and malicious content, managed by BTI.
What is DMARC and why does it matter?
DMARC tells receiving mail servers what to do with email that fails SPF and DKIM checks, which makes it much harder for criminals to send mail as your domain, and sends you reports on attempts.
How often do you run phishing simulations?
On a schedule agreed in your plan. BTI runs the campaigns end to end, tracks clicks and reports, and enrolls repeat clickers in remedial training.
Which Proofpoint product do you use?
Proofpoint Essentials or Proofpoint Enterprise, depending on your organization's size.
Do we get proof that training happened?
Yes. Completion records are kept and can be reported for audits, customers and insurers.
Can we buy training without email security?
Yes. Both are itemized.
Get a free cybersecurity assessment
Start with a free, credential-free pen test and a plain-language summary of where you stand.
Talk to the BTI IT team for your location during business hours: Los Angeles / Southern California 323-510-8003 · Chicagoland 312-492-2613 · Phoenix 480-272-8728.
Already a BTI client? Use the dedicated support number assigned to your organization.