Security, minus the scare tactics.

Most break-ins at a business your size aren’t clever. A reused password, a convincing email, a laptop nobody was watching.

Book 15 minutes with Billy or call (817) 265-5000 Ask about your security

Office hours

The security watch 2 AM

Watched at 2 AM, not just 8 to 5

A full security operations center (SOC) takes the night shift on your systems, 24/7/365. Attackers like nights and holidays because that’s when most companies aren’t looking. Something found at two in the morning gets worked at two in the morning.

Very few IT companies offer that to a small business. We do.

Where trouble gets in

How it happens: A convincing email. AI writes them now. The typos you used to spot are gone.

What we do: Filtering at the mail gateway, plus training built on the emails your people already get: short monthly videos, test phishing emails, and a report of who clicked and who finished.
How it happens: A stolen password. Reused from a site that got breached.

What we do: Multi-factor sign-in, and access limited to what each job needs.
How it happens: A request to change bank details. Sent from your vendor’s real email account.

What we do: One rule: anything that moves money gets confirmed by voice, on a number you already had.
How it happens: An unwatched machine. A laptop, a server, the firewall itself.

What we do: Detection and response on every system we manage, feeding the 24/7 watch, plus filtering at the network edge.
How it happens: An AI tool with the keys to everything. Hooked to your email and files. Nobody checked how far it reaches.

What we do: We find where AI agents could reach your data, close those paths and watch them.

We pick the tools on merit and buy them ourselves. Nobody pays us to recommend one.

Texas gives you a reason to write it down

Since September 2025, a Texas business under 250 employees that owns or licenses computerized sensitive personal information can keep punitive damages off the table after a breach. What it takes: a real security program, running before the breach.

Two words do the work: implemented and maintained. A policy written once and filed doesn’t count. We build the program, run it and keep the record.

What the law asks for, in detail

The pieces, one at a time

Cybersecurity
Protection on every computer, safer email, a second sign-in step, and a plan for the bad day. No fear-selling.
Tenant security review
A read-only look at how your Microsoft 365 or Google Workspace account is set up: admin rights, sign-in, mail rules, sharing and logging.
Email authentication
The three records (SPF, DKIM, DMARC) that make your domain hard to impersonate, set up and taken all the way to enforcement.
Security awareness training
Phishing simulation and security training built on the attacks your staff actually receive.
Backup and disaster recovery
Backups that are actually tested, including the Google Workspace and Microsoft 365 data most providers never back up at all.
Windows Server 2016 end of support
Windows Server 2016 stops getting security updates in January 2027. What it means for you, and how to plan the move.

Find out where you’d actually get hit.

You won’t get a scan report with four hundred findings. You get the two or three things that would really let somebody in. Want a smaller first step? A read-only tenant review.

Book 15 minutes with Billy

We’re accepting new clients.

or call (817) 265-5000

Or send one question. No charge, no pitch.

Or email info@bdunn.com.