DNS & Email Security
Quoted per engagement
Multi-domain audit, SPF, DKIM, DMARC and CAA remediation, Cloudflare configuration, DNSSEC, web firewall controls, staged enforcement, report and re-test.
Pricing
Fixed fee. You know the number before we start.
We price every engagement as a scoped job, never by the hour. Charging by the hour rewards the slowest supplier and turns specialist judgement into a commodity. We scope the work, quote a fixed fee, and carry the risk if it takes longer than we expected.
heylogin licences
The one fixed number on this site. Sold at the published list price, with no markup.
USD 79
per user, per year
about USD 6.58 per user per month
- Plan
- heylogin Enterprise
- Markup
- None. Sold at list.
- Billing
- Annually in USD, separate from WPfoss service fees
- Adding seats
- Billed annually per user. Add a seat when someone joins, and it is prorated for the rest of the year.
heylogin Enterprise licences are billed annually at the published list price with no WPfoss markup. Deployment, credential migration, password rotation, staff training and optional ongoing management are separate fixed-fee services quoted after a security review. See how the heylogin rollout works.
The two engagements
Each is scoped on a call, then quoted as a fixed fee. That is a deliberate position: the work has genuinely variable effort, so a quote is honest rather than evasive.
heylogin Password Management
Quoted per engagement
heylogin licences, team-wide rollout, credential migration and rotation, access structure, staff training, joiner and leaver controls, and optional ongoing management.
Our promise
- Fixed scope, fixed fee, agreed before we start.
- Every change staged, so nothing your business depends on goes offline.
- Full documentation handed over. No lock-in, ever.
- If nothing needs fixing, we tell you, and we will not invent work.
Pricing questions
Why do you not publish a price for the engagements?
Because the work has genuinely variable effort. A single-domain business with one mail provider is not the same job as a group with eleven domains and four senders nobody remembered. Quoting per engagement is honest rather than evasive, and it means you are not anchored to a floor price that would not apply to you.
Do you ever bill by the hour?
No. We scope the work, quote a fixed fee, and carry the risk if it runs long. Hourly billing rewards the slowest supplier and turns specialist judgement into a commodity.
How is the heylogin licence billed?
USD 79 per user per year, billed annually. Add a seat when someone joins and it is prorated for the rest of the year. Our own deployment work is quoted separately as a fixed fee.
Do you mark up the heylogin licences?
No. They are sold at the published list price of USD 79 per user per year. We make our money on the deployment work, not on your licence bill.
What happens if my free check comes back clean?
We tell you so, and we do not invent work. Not inventing work is a promise on every engagement, whether or not a free check is involved.
Will anything go offline while you work?
No. Every change is staged. DMARC moves through reporting mode before enforcement, DNSSEC is enabled registry-side first, and firewall rules run in log-only mode before they are enforced. The order is the part you are paying for.
Get started
Start with the free check, then we will scope it.
The check tells you what is actually wrong, which means the security review is about your real situation rather than a generic proposal.