Hi, I'm Tom!
Security advisor
Security for online businesses that run on trust.
You built a business on your expertise, your audience, and your client relationships. I help you protect the accounts, email, and access that keep it running.
Start with the free checklist: The Security Questions Every Growing Business Should Be Able to Answer. 26 questions to find the gaps in your accounts, email, backups, and access. Takes about 15 minutes. No security background needed.
One email a week with practical security guidance for online businesses. No sales pitches. Unsubscribe at any time, and your address goes nowhere else.
Who this is for
Coaches, consultants, creators, and course sellers running a real business online. You might work solo or with a VA, editor, or a few contractors. You don't have an IT person, and you're not sure what "secure enough" looks like for a business your size.
Coaches and consultants
Your clients trust you with sensitive information.
Creators and newsletter operators
Your audience lives in a few platforms.
Course and membership sellers
Your revenue runs through Stripe and a course platform.
Small online teams
You share access with VAs and contractors.
Who this isn't for
Businesses with an in-house IT or security team, or anyone looking for a quick tool recommendation instead of a plan.
The questions you're already asking
- Am I secure enough?
- How do I stop someone falling for a phishing email?
- What should I fix first?
- Am I spending money on the right things?
- Do I really need this security product?
- Who still has access to my accounts?
- What happens if I get locked out of Stripe or YouTube for a week?
- Who is supposed to be handling all of this?
These are reasonable questions. They tend to come up before you have the time or background to answer them properly. Working through them in order is most of what a security program is.
How I help
Accounts and access
Who has access to what, and how to clean it up. That means logins shared with VAs and contractors, MFA (a second check when you sign in) on the accounts that matter (Stripe, YouTube, your email, your domain registrar), and a plan for getting back in if you're ever locked out.
Email and domain
Make sure your emails land in inboxes and nobody can send as you. Your domain, DNS, and email authentication (SPF, DKIM, and DMARC), set up right and written down.
Backups and continuity
What happens if a platform locks you out or a laptop dies. Backups for the things you can't recreate, and a simple plan so one bad day doesn't stop the business.
Ongoing security guidance
A security advisor you can call on. You get a prioritized roadmap, help with vendor and AI tool decisions, and answers when a client asks about your security practices or a cyber insurance form shows up.
Worth being clear about: I work with you, not instead of you. We go through the changes together, step by step, and you keep the logins. I don't sell products, and I don't take over your accounts.
How I think about security
Security should leave you more confident, not more anxious. Fear is a poor basis for decisions. It tends to produce spending on whatever seems most urgent that week, rather than on what actually reduces risk.
Good security is practical and sustainable. It fits the way you already work, you can keep it up yourself (with help from a VA or contractor if you have one), and it is prioritized so the most important things happen first. A recommendation that cannot survive a busy month is not the right recommendation.
It should also be understandable. You should be able to explain where you stand to a client, your insurer, or a partner without needing a translator. That means talking in terms of real-world outcomes rather than technical controls.
A business your size doesn't need enterprise security. It needs experienced guidance, applied to your actual situation.
What working together looks like
A first engagement follows four steps. Nothing in it is a surprise, and you can stop after any of them.
-
A short intro call
A short, no-pressure call about how your business runs online and what's on your mind. If it isn't the right fit, that's a useful thing to find out in the first ten minutes.
-
A review and a written plan
We look at your accounts, email, domain, and backups together on a call, with you logged in. Then I write up a plan with your priorities in order: what to fix first, what can wait, and why.
-
Working sessions
If you'd like help, we make the changes together on screen-share. You stay logged in, and you keep your logins. I work with you, not instead of you.
-
A follow-up check-in
About three months later, we do a follow-up review to make sure everything's still in place.
Join the newsletter
Subscribe and the checklist comes with it: 26 questions to find the gaps in your accounts, email, backups, and access.
One email a week. No sales pitches, and you can unsubscribe at any time.