Google Workspace Security
Google Workspace Security
Lock down email, sign-ins, and shared files.
A security review and lockdown of your Google Workspace: sign-ins, email, shared files, and connected apps. Done by a Newport Beach security team, at a fixed price.
Google Workspace is secure when it's set up properly, but the default settings leave a lot open. Many businesses have no 2-Step Verification, no protection against email spoofing, old employees who still have access, and files shared publicly by accident. Code4 reviews your Workspace settings, fixes what's risky, and shows you what changed. You keep full control of your account; we use our own named admin login, which you can remove at any time.
What's included
Everything you need to operationalize Google Workspace Security.
2-Step Verification for everyone
Enforced across the account and set up with each person, so nobody gets locked out.
SPF, DKIM & DMARC
Email authentication configured and moved to full enforcement once tested, to stop spoofed email using your domain.
Admin roles & accounts
Super-admin access limited, former employees removed, and account recovery set up properly.
Drive & Gmail policies
External sharing, link sharing, forwarding, and attachment protections set to safe defaults.
Third-party app access
Review of which apps can read your email and files, with risky or unused access removed.
Security checklist walkthrough
A plain-English report of what we found, what we fixed, and what to watch going forward.
How we operate it
Access
A short kickoff call. We get admin access through our own named account, never your password.
Review
We audit sign-in, email, sharing, and app settings against Google's own security recommendations.
Fix
We make the changes, set up 2-Step Verification with each user, and test email authentication.
Hand back
Before-and-after report, a walkthrough call, and 30 days of email support.
Who it's for
Small teams on Google Workspace
1–50 users who set up Workspace years ago and never revisited the security settings.
After a phishing scare
Someone clicked a link or a fake email went out in your name, and you want to make sure it can't happen again.
Before an audit or insurance renewal
Cyber insurance forms and compliance reviews increasingly ask about 2-Step Verification and email security.
Outcomes
- 2-Step Verification enforced for every user
- SPF, DKIM, and DMARC in place against spoofing
- Only the right people and apps can reach your data
- Documentation for insurers, auditors, and your own records
FAQ
Will this interrupt our email?
No. Changes are made in stages, and email authentication is tested in monitoring mode before it's moved to full enforcement, so legitimate email keeps flowing.
Do we need to upgrade our Google Workspace plan?
Usually not. We work within your current plan. If a specific feature would need an upgrade, we'll explain the trade-off first and you decide.
Do you also secure Microsoft 365?
Yes. We provide the same review and lockdown for Microsoft 365 and Outlook.
How long does it take?
Most small business Workspace projects take 2–3 weeks from kickoff, depending on the number of users and how quickly we can schedule 2-Step Verification setup with each person.
Related services
Small Business Cybersecurity in Orange County
Fixed-price security projects and monthly plans for Newport Beach and Orange County businesses with 1–50 people: email, accounts, devices, backups, and a clear plan.
IT Security Support
Day-to-day IT support with a security mindset — identity, endpoints, email, backups — for organizations that need to lock down without slowing down.
Security Compliance
SOC 2, HIPAA, PCI DSS, CMMC, ISO 27001 — gap assessment, control implementation, and ongoing evidence collection.
Ready to talk about Google Workspace Security?
Tell us about your environment. We'll respond within one business day with a clear path forward — no obligation.