Work with me
I'm a security advisor for online businesses. I look at how your business really runs, give you a clear plan, and help you make the changes.
The work covers the same four areas you'll see on the home page: accounts and access, email and domain, backups and continuity, and ongoing security guidance.
I work with you, not instead of you. We go through the changes together, step by step, and you keep the logins. I don't sell products, and I don't take over your accounts.
Who it fits
Coaches, consultants, creators, course sellers, and other people running a real business online. You might work solo or with a VA, editor, or a few contractors. You don't have an IT person, and your revenue depends on things like Stripe, YouTube, Kit, your email, and your domain.
I work remotely with online businesses anywhere.
It's worth saying what doesn't fit, too. If you have an in-house IT or security team, want a quick tool recommendation instead of a plan, or need a penetration test or a certification by a fixed deadline, this isn't the right engagement. I'd rather tell you that in the first ten minutes than three weeks in.
How an engagement starts
Most engagements start with the Security Checkup + Setup. I'll review your setup and give you a clear plan, with your priorities in order.
If you'd like help, we'll make the changes together on screen-share calls. You stay logged in, and you keep your logins.
About three months later, we'll do a follow-up review to make sure everything's still in place. Until then, you can email me with questions and I'll answer.
It covers the things an online business runs on: shared logins, MFA (a second check when you sign in) on Stripe, YouTube, your email, and your registrar, domain and email setup, account recovery, and backups.
Security Checkup + Setup: starting at $1,000
What you get
- ✓ A review of your setup
- ✓ A written plan with your priorities in order
- ✓ Hands-on help setting it up, if you want it
- ✓ A follow-up review about three months later
- ✓ Email help until then
This isn't a penetration test, and I don't monitor your systems.
Why not just buy a one-off audit from a security firm?
It's a reasonable thing to buy, and for some businesses it's the right thing. What it usually produces is a report, written to be thorough, and handed over right where the actual work starts. If you have someone who can turn a hundred findings into the four things worth doing this month, that's a good trade. If you don't, the report becomes one more thing nobody has time to read. This isn't a better audit. It's a review that arrives already sorted into a plan, with me beside you while you make the changes.
Starting a conversation
A first call is a short conversation about how your business runs online, what's on your mind, and whether working together would help. No obligation either way.
You'll be talking to me directly. I'm Tom, with CISSP, CISM, CDPSE and PMP certifications and more than twenty years in security.
- ✓ A short call, no pressure, no pitch
- ✓ Plain-English answers to your security questions
- ✓ A clear sense of whether an engagement would help, and what it would involve
Would rather write than book a slot? Email hello@tomprotects.com and tell me where things stand.