Base Layer Security

Strong cybersecurity baseline for small businesses

Lock down the tools you already use – without buying more software.

Base Layer Security hardens your existing Microsoft 365 or Google Workspace tenant with modern best practices: multi-factor authentication, smarter spam and phishing protection, and basic device hardening – in days, not months.
Designed for: 1–50 employees  ·  Fixed, predictable pricing  ·  Fast setup: typically 1–2 days
No jargon. No scare tactics. Just clear, baseline cybersecurity for small businesses.

Baseline Security Hardening

One-time project to harden Microsoft 365 or Google Workspace.
Typical setup: 1–2 business days
$499 for 1–5 users
Simple, fixed pricing for teams up to 50 people.
Includes: summary report & live review call.  ·  No new software required.

Fixed pricing

from $499

1–2 day

turnaround

No new software

to buy

Built for

1–50 person teams

WHAT WE DO

A strong security baseline for the tools you already own.

We help small organizations get to a solid cybersecurity baseline – without asking you to switch platforms or juggle another dashboard. You stay on Microsoft 365 or Google Workspace; we make them safer.
We configure your existing Microsoft 365 or Google Workspace environment securely, verify that your PCs and Macs are updating and protected, and give you a simple summary of what changed – in plain English.
Everything we do uses built-in features you already pay for: no surprise licenses, no new software contracts, and no pressure to “upgrade” into something you don’t need.
Microsoft 365 hardeningGoogle Workspace hardeningPC / Mac basicsPhishing simulation & trainingOwner-friendly explanations

BASELINE PACKAGE

Baseline Security Hardening – fixed, one-time pricing.

A focused, one-time project to secure your cloud environment and check that basic protections are in place on employee devices. Designed specifically for teams with 1–50 people.

SOLO & VERY SMALL TEAMS

1–5 users

$499 one-time
Perfect for solo owners or very small offices who just want to know they’re not missing the basics.
Typical turnaround: 1–2 business days after access is granted.
Mid-size teams

GROWING SMALL BUSINESS

6–15 users

$899 one-time
Ideal for small teams with shared email, multiple apps, and a mix of office and remote work.
Includes a short review call with clear, owner-friendly recommendations.

LARGER SMALL TEAMS

16–30 users

$1,499 one-time
For organizations with multiple departments, more admins, and higher risk if something goes wrong.
Above 30 users (up to 50), custom pricing is available.
Turnaround: Typically 1–2 business days after access is granted, plus a short review call to walk through every change we’ve made.

ADD-ON SERVICES

Optional add-ons to round out your security basics.

Once your baseline is in place, you can add focused services to strengthen the way your team handles passwords, phishing, and “what if something goes wrong?” moments.

PASSWORDS

Password Manager Setup

Rollout and basic training for modern password managers such as Bitwarden or 1Password, so your team stops reusing the same three passwords everywhere.
$199–$399 one-time

PEOPLE

Phishing Awareness & Testing

Monthly phishing simulations and easy-to-read reports – no shaming, just learning. Help people practice spotting suspicious emails before they become a problem.
$59–$99 per month

RESPONSE

Incident Response Quick Guide

A customized 2-page emergency plan so everyone knows what to do if something goes wrong – without having to dig through a long policy binder during an incident.
$149 one-time

PROCESS

How it works – from first call to final report.

Clear expectations, fixed pricing, and a simple process. You’ll always know what’s happening, what’s changing, and why we’re doing it.
1

Free 20-minute call

We learn about your business, tools, and concerns – no pressure, no jargon, no obligation.
2

Fixed-price proposal

You’ll know exactly what we’ll do, what it costs, and when you’ll see results.
3

Secure access

You grant temporary, least-privilege access to your Microsoft 365 or Google Workspace tenant.
4

Security hardening

We configure security settings, enable MFA, tune spam filtering, and review accounts and devices using industry-standard best practices.
5

Summary report & review

You get a short, clear report and a live walkthrough to explain every change and answer questions.

DESIGNED FOR SMALL BUSINESSES

You don’t need an internal IT department.

We work best with organizations that:
If that sounds like you, a quick discovery call is usually all it takes to see if we’re a fit.

A solid baseline, delivered in days.

One focused project can dramatically improve your risk posture – especially if you’ve never had a dedicated security review before.

WHY IT MATTERS

Why small businesses choose Base Layer Security.

Cybersecurity doesn’t have to be complicated or expensive. Our job is to give you a strong, sensible baseline – and the confidence that you’re no longer ignoring the obvious gaps.

PRACTICAL

You keep your existing systems – we secure them.

No rip-and-replace projects or surprise software pitches. We work inside the tools you already use all day: Microsoft 365 or Google Workspace, plus the devices your team already has.

PREDICTABLE

Fixed pricing for smaller organizations.

Clear, one-time pricing bands based on user count. No long-term contracts, no hourly guessing, and no invoices that feel like they came out of nowhere.

HUMAN

Plain-English explanations, not jargon.

We translate security changes into normal language, so owners and managers can actually understand what improved and why it matters – without needing an alphabet soup of acronyms.

FAQ

Questions we hear from small business owners.

If you’re using Microsoft 365 or Google Workspace and haven’t intentionally configured security before, this is built for you.
For our baseline package, no. We focus on securing your existing cloud tenant and using built-in protections on your devices. Optional add-ons like password managers can involve new tools – but only if you choose them.
Most changes happen in the background. We schedule MFA rollouts and key updates to avoid surprises and provide simple instructions for your team so sign-ins remain smooth.
Absolutely. We’re happy to coordinate with your existing IT vendor or internal team. Base Layer works well as a focused security layer on top of existing general IT support.
Our packages are built for organizations of up to 50 people. We’ll provide custom pricing and scope during your discovery call based on your user count and risk profile.
Security is never “done,” but having a hardened tenant, MFA, tuned filters, and basic device protections puts you well ahead of many small businesses. From there, we can discuss next-level options if needed.
Start with a free 20-minute call. We’ll ask a few questions about your business, tools, and team – and tell you clearly whether our baseline package is a good fit.

GET IN TOUCH

Ready for a quick, friendly security sanity-check?

Leave your details and we’ll reach out to schedule a free 20-minute discovery call. No sales script, just a simple conversation about where you are today and what “better” could look like.
Prefer email? Write to [email protected].
After our work is done, you can stay in touch for occasional reviews – or treat this as a one-time “baseline hardening” and move on with confidence.


    © Base Layer Security. All rights reserved.