Understand the current protection
We review the gateway, mailbox policies, routing and licensed capabilities. Where the existing platform can meet the requirement, we include that option in the design.
Email security gateway installation
Install or replace your email gateway with the routing, protection policies and handover covered.
Specialist implementation alongside your IT and security teams, from the existing configuration to the production change.
A gateway your team can operate.
A renewal, a replacement product or an acquired company can expose differences in how email is filtered. We establish the routes, policies and exceptions before changing them. That includes the mailbox platform’s own controls and the process for investigating a reported message.
Install the selected product
We configure the approved cloud gateway, directory integration, domains and connectors, then test the routes with your team.
Replace an existing gateway
We inventory policies and exceptions, identify what should carry across and plan the transition. Replacement receives a scoped quotation rather than the standard new-installation fee.
Prepare for incidents
Quarantine ownership, user reporting and administrator access are part of the handover. We agree where alerts go and who can authorise a release or containment action.
What we configure and test.
Mail flow and authentication
Inbound and outbound connectors, domain settings, sender authentication and supported controls against direct-delivery bypass. For Microsoft 365, we assess the supported configuration for preserving the original sender context through a third-party service.
Protection policies
Baseline malware, attachment and URL controls, plus user/domain impersonation protection where the selected licence supports them. High-risk roles and partner domains are agreed with your security team.
Legitimate business email
We test agreed samples from customers, suppliers and business applications. Exceptions have an owner and a documented reason, so they can be reviewed later.
The production change
Your change record includes the implementation sequence, test criteria, rollback limitations and approval. We record the final configuration and demonstrate the administrator procedures.
Fixed-price installation for a confirmed scope.
The standard installation covers one cloud gateway product on supported Microsoft 365 or Google Workspace routes. It includes one business-hours cutover, administrator handover and five business days of post-cutover configuration corrections.
The calculator prices tenants, mailbox systems, domains and protected users. One tenant, one mailbox system, three domains and 250 users comes to £5,075, excluding VAT and licences. The fee stays fixed for the scope in your order.
Hybrid systems, gateway replacement, custom policies, application relays, specialist integrations and additional cutovers need a scoped quotation. See the component prices.
Connect the gateway to the wider defence.
NCSC guidance addresses prevention, reporting, limiting the effect of missed attacks and incident response. We agree the email controls with the teams responsible for identity, devices and payments.
Retention, legal holds and archive capture need their own design where they apply. Explore email records and retention. For ongoing administration and incident response after installation, see Managed Email.
Technical and regulatory references
Checked 19 October 2026. The service scope above is our proposed delivery approach. These references explain the technical constraints and regulatory distinctions.
Price your gateway installation.
Tell us about the environment and the outcome you need.