DNS & Email Security
Quoted per engagement
Multi-domain audit, SPF, DKIM, DMARC and CAA remediation, Cloudflare configuration, DNSSEC, web firewall controls, staged enforcement, report and re-test.
Pricing
Fixed fee. You know the number before we start.
We price every engagement as a scoped job, never by the hour. Charging by the hour rewards the slowest supplier and turns specialist judgement into a commodity. We scope the work, quote a fixed fee, and carry the risk if it takes longer than we expected.
heylogin licences
The one fixed number on this site. Sold at the published list price, with no markup.
USD 79
per user, per year
about USD 6.58 per user per month
- Plan
- heylogin Enterprise
- Our standing
- WPfoss is the official heylogin partner for Africa.
- Markup
- None. Sold at list.
- Billing
- Annually in USD, separate from WPfoss service fees
- Adding seats
- Billed annually per user. Add a seat when someone joins, and it is prorated for the rest of the year.
heylogin Enterprise licences are billed annually at the published list price with no WPfoss markup. Deployment, credential migration, password rotation, staff training and optional ongoing management are separate fixed-fee services quoted after a security review. See how the heylogin rollout works.
The two engagements
Each is scoped on a call, then quoted as a fixed fee. That is a deliberate position: the work has genuinely variable effort, so a quote is honest rather than evasive.
heylogin Password Management
Quoted per engagement
heylogin licences, team-wide rollout, credential migration and rotation, access structure, staff training, joiner and leaver controls, and optional ongoing management.
What decides your quote
Two businesses can need the same engagement and get very different numbers. These are the things we look at on the call, so you can judge roughly where you sit before you book one.
How many domains you own
Every domain and subdomain is audited, not just your main one. Businesses that have rebranded, or that park defensive domains, usually own more than they remember.
How many services send mail as you
Each newsletter tool, invoicing system, CRM and helpdesk needs its own DKIM signing verified before DMARC can enforce. More senders means a longer monitoring period.
The state we find you in
A domain with valid SPF and DKIM already in place is a shorter engagement than one with two conflicting SPF records and no authentication at all. The free checker tells you which you are.
Whether DNS is already on Cloudflare
If it is, we configure it. If it is not, a zero-downtime migration is part of the work: every record inventoried and replayed before nameservers change.
Team size, for a heylogin rollout
Licences are per user at list price. The deployment work scales with the number of people to train and the number of shared credentials to migrate and rotate.
Whether you want us afterwards
Reading DMARC reports, access reviews and joiner and leaver handling can be handed over to you or kept with us. Handover is the default, and it costs less.
Run the free domain check first. It takes about twenty seconds, and it answers the third one for you before we speak.
Our promise
- Fixed scope, fixed fee, agreed before we start.
- Every change staged, so nothing your business depends on goes offline.
- Full documentation handed over. No lock-in, ever.
- If nothing needs fixing, we tell you, and we will not invent work.
Pricing questions
Why do you not publish a price for the engagements?
Because the work has genuinely variable effort. A single-domain business with one mail provider is not the same job as a group with eleven domains and four senders nobody remembered. Quoting per engagement is honest rather than evasive, and it means you are not anchored to a floor price that would not apply to you.
Do you ever bill by the hour?
No. We scope the work, quote a fixed fee, and carry the risk if it runs long. Hourly billing rewards the slowest supplier and turns specialist judgement into a commodity.
How is the heylogin licence billed?
USD 79 per user per year, billed annually. Add a seat when someone joins and it is prorated for the rest of the year. Our own deployment work is quoted separately as a fixed fee.
Do you mark up the heylogin licences?
No. They are sold at the published list price of USD 79 per user per year. We make our money on the deployment work, not on your licence bill.
What happens if my free check comes back clean?
We tell you so, and we do not invent work. Not inventing work is a promise on every engagement, whether or not a free check is involved.
Will anything go offline while you work?
No. Every change is staged. DMARC moves through reporting mode before enforcement, DNSSEC is enabled registry-side first, and firewall rules run in log-only mode before they are enforced. The order is the part you are paying for.
Get started
Start with the free check, then we will scope it.
The check tells you what is actually wrong, which means the security review is about your real situation rather than a generic proposal.