MSP DMARC prospecting · 7 min read
How MSPs use DMARC gaps to book first meetings (with templates)
Find prospects with missing or weak DMARC, explain the risk in one sentence, and ask for 15 minutes. Templates included.
The Hookgap blog
Plain-English guides to email and website security, written for MSPs who want better first conversations.
SPF too many DNS lookups · 6 min read
The SPF 10-lookup limit: why adding one more email tool breaks it
Why SPF silently fails after a few include: entries, how to count lookups, and how to fix it without breaking mail.
Google Yahoo sender requirements · 6 min read
Google, Yahoo and Microsoft sender rules, explained for small business owners
The authentication rules the big mailbox providers now enforce, translated into a short checklist for small businesses.
DMARC p=none vs reject · 5 min read
DMARC p=none vs quarantine vs reject, in plain English
What each DMARC policy does to fake email, and a safe path from p=none to p=reject.
small business email security statistics · 4 min read
What 64 local law, dental and accounting firms' DNS tells us
64% had no DMARC record and only 1 in 8 enforced it. Our method, the numbers, and what they mean for MSPs.
MSP prospecting tool · 5 min read
Choosing a security prospecting report tool as a small MSP
Six questions to ask before you pay for a prospecting report tool, and an honest look at the main options.
MTA-STS setup · 6 min read
MTA-STS in 10 minutes for Microsoft 365 and Google Workspace
Two DNS records and one small text file make other mail servers encrypt email sent to you. Copy-paste setup inside.