Email Security & Domain Infrastructure
Boutique Ink LLC helps professional-services firms, nonprofits and growing organizations reduce unauthorized use of their domains in spoofed email, restore legitimate email delivery and govern sending systems across Microsoft 365, Google Workspace and third-party platforms.
Services
The work begins with the business consequence—impersonation, blocked mail, unmanaged senders or an uncertain transition—and works backward to the right technical change.
Inventory sending systems, evaluate authentication and DNS, and identify domain-control risks before they become security or delivery problems.
Authenticate legitimate senders, resolve alignment failures and move safely toward an enforced policy. DMARC reporting data is used to isolate failing sender paths, validate authentication performance and guide corrective architecture decisions.
Diagnose blocked, rejected or misclassified email and correct the authentication, DNS or platform configuration causing it.
Representative engagement
Salesforce + Microsoft 365 integration
An organization using Salesforce and Microsoft 365 needed the Salesforce Outlook Integration deployed in a controlled way while the domain’s email authentication was reviewed. Boutique Ink LLC reviewed Microsoft Graph permissions and tenant-consent requirements, then coordinated the rollout through a small pilot.
The result: a successful three-user pilot led to organization-wide deployment, with the related Salesforce authentication changes completed alongside the integration work.
Read the technical noteWho this is for
Boutique Ink LLC works best with organizations that need experienced technical ownership for a defined email-security, delivery, or domain-control problem.
Organizations whose reputation, client communication, invoices, or donor relationships depend on legitimate email reaching its destination.
Environments where administrators can make changes but need a specialist to investigate the sending architecture, define the correction, and document the result.
A new vendor, Microsoft 365 or Google Workspace transition, unexplained rejection, or pressure to move DMARC from monitoring into enforcement.
Usually not a fit: organizations looking for a generic managed IT provider, a dashboard without investigation, or a one-size-fits-all DNS change.
Approach
Defined work first. Broader support when it is warranted.
Identify every system authorized to send on your behalf.
Repair authentication and alignment without interrupting valid mail.
Advance policy deliberately, with evidence and rollback points.
Document ownership and keep later changes from eroding protection.
About
Jonathan McMaster is the founder and principal consultant of Boutique Ink LLC, which provides hands-on email security and domain infrastructure consulting with clear ownership from initial investigation through implementation and documentation.
The work spans email authentication, DNS, Microsoft 365, Google Workspace, third-party sending systems and complex cross-vendor escalation. Engagements are carried from initial diagnosis through controlled implementation, verification and written handoff.
Questions, answered
The assessment reviews your sending systems, SPF, DKIM, DMARC, DNS, domain ownership and administrative access. It ends with a written explanation of the material risks and the corrective steps worth taking.
It can if unknown or misconfigured senders are moved too quickly into enforcement. The work is staged around reporting data so legitimate sending paths can be identified and corrected before policy is tightened.
DMARC helps a domain owner tell receiving systems which messages are authorized to use the domain and what to do with messages that fail authentication. Properly implemented, it reduces impersonation risk and provides reporting about legitimate and unauthorized sending.
Yes. Engagements can be performed independently or in coordination with internal administrators, managed-service providers, DNS operators, software vendors and other technical partners.
Not always. Initial diagnosis can often begin with public DNS records, DMARC reports, message headers and a description of the sending architecture. Administrative access is requested only when necessary for the agreed work.
Yes. A focused troubleshooting engagement can investigate blocked, rejected or misclassified mail and determine whether the cause is authentication, DNS, reputation, routing or platform configuration.
Timing depends on the number of domains, sending systems and required changes. A defined assessment can begin promptly, while implementation and enforcement are staged around the evidence needed to protect legitimate mail.
Data handling
Boutique Ink LLC requests only the information and administrative access needed for the agreed engagement. Client information is used to investigate, implement and document the work; it is not sold or used for unrelated marketing. NDA arrangements are available when appropriate.
Start with the domain
Request an email authentication assessment or describe the problem you are trying to resolve.
To help frame the conversation, include the domain involved, a short description of the problem and any known email platforms or sending services.