Home Services Pricing Insights About Book Your Security Assessment
What I Build

Services

I secure the Microsoft 365 environment small law firms run on, document it against your duties, then automate the manual work. Security is service one. Everything else builds on it.

01
Flagship Service

Microsoft 365 Security & Compliance

The environment your firm runs on holds privileged client data. I secure it and document it against your confidentiality and data-handling duties. This is where every engagement starts.

Security · GRC · Compliance

What I secure

MFA & Conditional AccessMulti-factor authentication on every account, with conditional access rules that limit sign-in by device, location, and risk.
Least-Privilege PermissionsEvery account, group, and connector dropped to the minimum access it needs. No standing admin rights that do not need to exist.
Email Security & Anti-PhishingAnti-phishing controls, SPF, DKIM, DMARC, and mail-flow rules that keep spoofed mail and impersonation out of the firm's inboxes.
Backup & RecoveryTested backup and recovery for mail, files, and SharePoint, so a deleted item or a compromised account does not become a lost matter.
Written Risk AssessmentA written report that maps findings to your confidentiality and data-handling duties, with prioritized fixes and a scoped remediation plan.
I run my own mail infrastructure on Postfix and Dovecot. I understand email security at the protocol level, not just the admin dashboard. When I configure SPF, DKIM, and DMARC for your firm, I know what each record does and why it fails when it fails.
02
Supporting Service

Power Automate Workflows

Once the tenant is secure, I automate the repetitive, manual tasks the firm does by hand. Built natively in Microsoft 365, scoped to the minimum access each flow needs.

Microsoft 365 Native

What I automate

Matter Aging RemindersAutomatic Teams notifications when a matter has been open too long or has had no recent activity.
Intake & Follow-Up TasksWhen a new lead comes in or a call is logged, the system creates a follow-up task and notifies the assigned person.
Deadline RemindersWhen a matter hits a key date, the responsible person gets reminders to file, update the record, and close out tasks.
Keyword Email TriggersOutlook mail containing terms like "urgent" or "invoice" automatically triggers tasks, flags, or Teams notifications.
Daily BriefingsA morning Teams message summarizing follow-ups due, overdue tasks, missing time entries, and invoice follow-ups.
03
Supporting Service

HubSpot + M365 Integration

HubSpot does not connect cleanly to Microsoft 365 out of the box. I use Zapier as the bridge, scoped to least privilege, so your CRM and your communication tools stay in sync.

Zapier + Power Automate

What I connect

HubSpot Tasks → TeamsWhen a HubSpot task is created, due, overdue, or completed, the right person gets a Teams notification.
HubSpot Activity → Planner / ListsMatter updates in HubSpot push to your shared task board so everyone sees current status without logging into HubSpot.
Outlook / Teams → HubSpotWhere the API allows, activity in Microsoft tools flows back to HubSpot to reduce manual duplicate entry.
Invoice Updates → HubSpotWhen an invoice is sent through Outlook, Zapier creates or updates the matching HubSpot record.
04
Supporting Service

SharePoint & Lists Architecture

I replace manual spreadsheets with structured Microsoft Lists, automatable, filterable, and embedded directly into Teams, with permissions set correctly from the start.

SharePoint · Microsoft Lists

What I build

Matter Time LogReplaces the Excel time sheet. Staff submit time from Teams or a simple form. Captures matter, person, date, hours, work type, notes, and billable status.
Invoice TrackerMonitors sent mail for invoices, creates a tracking item in Lists, saves attachments to the right SharePoint folder, and sets follow-up reminders.
Shared Task BoardA firm-wide board showing open tasks, follow-ups, waiting-on-client items, invoice follow-ups, and completed items, built into Teams.
Matter File StorageA SharePoint folder structure organized by matter and client, with access scoped so documents stay where they belong.
05
Supporting Service

AI-Assisted Workflows

I use AI to draft, summarize, and organize, with a human review step built in before anything client-facing goes out. It runs inside your existing flows, not as a separate tool, and never on privileged data without your sign-off.

OpenAI API · Power Automate

What I automate

Draft Email RepliesCertain incoming emails trigger a draft reply for human review, so you are editing, not writing from scratch.
Email Thread SummariesLong threads get summarized into a short recap, either on demand or when a keyword triggers it.
Matter SummariesGenerate a matter status summary from HubSpot activity for use in updates, reports, or handoffs.
SOP & Checklist GenerationTurn rough notes or process descriptions into clean standard operating procedures or checklists.
Tools & Platforms

Built on your stack,
not mine.

Every engagement uses tools you already license. No new platforms, no vendor lock-in.

Microsoft 365
Entra ID / Conditional Access
Power Automate
Microsoft Teams
SharePoint
Microsoft Lists
Microsoft Planner
Outlook
HubSpot Sales
Zapier
OpenAI API
Postfix / Dovecot
Pricing

One front door.
Two ways to continue.

Start with the fixed-fee assessment. If you continue, the fee comes off your first retainer month. Retainers are priced from a floor, scoped to your firm.

The Front Door
$1,500
Fixed fee · one written report
Current risk findings
Prioritized fixes
Scoped remediation plan
Mapped to your duties
Credited toward your first retainer month
Book the Assessment →
Retainer
From$750/mo
Foundation
Security maintenance & monitoring
Patch & access review
Monthly report
On-call response
Start a Conversation →
Retainer
From$1,500/mo
Compliance
Everything in Foundation
Maintained compliance program
Written policies kept current
Evidence & documentation support
Start a Conversation →

Retainer prices are floors. Your firm is scoped after the assessment. Custom automation and project work is scoped after the assessment as well. I do not bill hourly.