LBX Shield · Security for small businesses

Keep your website, email and domain out of the wrong hands.

Most attacks on small businesses aren't clever. A reused password, an email sent in your name, a domain that quietly expires. We close the common gaps, automated monitoring keeps watch, and you get a plain-English report of what we found.

  • Free check, public information only
  • AI-assisted, human-approved
  • Plain-English report

How small businesses actually get hit

  • 1
    A stolen or reused password.One leaked password and no 2-step login is all it takes to lose your email, your website or your ad account.
  • 2
    Emails sent in your name.Without the right email records, anyone can send a fake invoice from your address, and your customers pay the wrong account.
  • 3
    Old software nobody updates.Outdated website plugins are one of the most common ways small business sites get broken into.
  • 4
    A domain or backup that isn't there.An expired domain takes your website and email down at once. A backup nobody has ever restored may not work when you need it.

Each of these has a simple fix. We set it up and keep an eye on it.

What LBX Shield covers

Six areas that cover most of the risk for a small business. We start where the risk is highest for you.

Email and domain protection

Stop criminals sending emails in your name and make sure your domain can't be moved or lost.

  • SPF, DKIM and DMARC set up and checked
  • Domain transfer lock and auto-renewal
  • Expiry monitoring for domain and SSL
Start hereLearn more

Account security

Lock down the logins that matter: email, domain, website, social media and ad accounts.

  • 2-step login on key accounts
  • Password manager set up for your team
  • Review of who has admin access

Website protection

Fewer ways in for attackers and bots, whether your site was built by us or someone else.

  • Firewall and bot protection (Cloudflare)
  • Updates for WordPress sites and plugins
  • Security headers and HTTPS checked

Backup and restore

Copies of your website kept away from your server, and restores we actually test.

  • Off-site backups with history
  • Regular test restores, with proof
  • Restore plan if something breaks

AI-assisted monitoring

AI-assisted monitoring watches the things that quietly go wrong, so you hear about them from us first.

  • Website uptime and SSL checks
  • Email spoofing reports reviewed
  • Monthly plain-English report

Help when something goes wrong

A clear first response during our working hours (Monday to Friday, 9:00 to 17:00 UK time), and a vetted security specialist for serious cases.

  • Lock accounts and stop the damage
  • Keep evidence, delete nothing
  • Escalation to a security specialist when needed

AI-assisted protection, with people in charge

Attackers already use AI to write convincing fake emails, clone voices and run bots around the clock. We use AI on the defending side too, to watch more, spot problems sooner and explain them clearly. Every decision that changes something in your accounts is made by a person.

Automated checks around the clock

Automated checks run day and night, and AI helps review the alerts and email spoofing reports, so unusual activity is flagged early.

Sorts the noise

Most alerts are harmless. AI groups and ranks them, so our specialists spend their time on the few that matter.

Ready for AI-powered attacks

We set up the email records, login protection and team habits that make AI-written phishing and fake invoices much harder to pull off.

Explains it in plain English

Your monthly report is drafted with AI and checked by us: what happened, why it matters and what we recommend.

AI never blocks traffic, resets accounts or deletes anything on its own. Those steps always need a person's approval.

Start with a free security check

We look only at information that is already public, like your email records, certificate and website headers. No logins, no access to your systems and no scanning.

  • Email records: SPF, DKIM and DMARC
  • SSL certificate and expiry date
  • Domain expiry and transfer lock
  • Website security headers and HTTPS
  • Obvious signs of outdated software

We never test or scan anyone's systems without written permission from the owner.

  1. 1

    Send us your domain

    Just the website address and an email to reply to.

  2. 2

    We check public records

    Usually within 2 working days.

  3. 3

    You get a short report

    What's fine, what to fix first and how long it takes.

  4. Get a free security check What the free check covers

What we promise, and what we won't

Security is a field full of scary sales talk. Here are the rules we work by.

No '100% protection'
Nobody can honestly promise that no attack will ever succeed. We help you keep your website, email and accounts secure, reduce the risk, show you what we did and tell you what's left.
Nothing without your permission
We only test, scan or change what you have agreed to in writing.
Only the access a job needs
We use our own logins with limited roles in your accounts, never your passwords, and you can remove us any time.
Your accounts stay yours
Domain, email and hosting stay in your business name. We look after them, we don't own them.
Specialists for serious cases
If something goes beyond everyday protection, we bring in a vetted security specialist rather than guess.
Plain English
Every report says what happened, why it matters and what we recommend, in a few sentences.

Getting a new website? Make it secure by design.

Every website from LBX Design is built as static files: no admin panel, no database and no plugins for attackers to break into. HTTPS, security headers and backups come as standard.

See LBX Design

Questions about LBX Shield

Do you need access to my accounts for the free check?

No. The free check only uses public information: your email records, certificate, domain status and website headers. We don't log in to anything and we don't scan your systems.

How much does LBX Shield cost?

It depends on what you have: one website and a few email accounts is a different job from ten staff and an online shop. After the free check we give you a fixed monthly price in writing before you commit. Most businesses start with email and domain protection.

I think I've been hacked right now. What should I do?

First change the password of your main email account and turn on 2-step login if you can. Then contact us and say it's urgent. We help with the first steps during our working hours (Monday to Friday, 9:00 to 17:00 UK time) and bring in a vetted security specialist for serious cases.

Can you guarantee we won't be hacked?

No, and you should be careful with anyone who does. We close the gaps that cause most incidents, watch for problems and make sure you can recover quickly if something does happen.

My website is on WordPress. Can you still help?

Yes. We can protect and back up existing WordPress sites. If your site is old and hard to keep safe, we may suggest rebuilding it as a static site with LBX Design, which removes most of the risk.

We already have antivirus. Isn't that enough?

Antivirus protects computers. It does nothing about fake emails sent in your name, an expired domain, a weak website login or a missing backup. Those are the gaps LBX Shield covers.

Get your free security check.

Send us your website address. We check the public side of your email, domain and website and send you a short report.

  • Public information only, no access needed
  • Report within 2 working days
  • No cost and no obligation

Think you've been hacked? Change your main email password first, then tell us it's urgent in the message.

Prefer email? Write to [email protected]

We reply within one working day. Your details are only used to answer your request.