I look after the digital side of your business, so you can get on with yours.
Your website, your email, your domain, your logins, your backups. I know how all of it fits together, and it's always going to be me who picks up the phone.
Nobody clever is trying to break into your website.
Many small-business losses come down to a few things. They rarely involve a firewall. They all look ordinary from the inside, and they're all cheaper to prevent than to unwind.
You pay the wrong bank details
A supplier you've worked with for years gets their inbox broken into. You receive an invoice that looks exactly like all their other invoices, with different bank details at the bottom. You pay it, because why wouldn't you. Weeks later the real supplier asks where their money is.
Your customers get billed by a stranger
If your domain isn't set up to refuse it, anyone can send email that appears to come from your address. Your customers see your name, your signature, your usual tone — and a request to pay somewhere new. You find out when one of them calls, annoyed.
Someone walks into payroll
A password you reused years ago turns up in someone else's data breach, and it still works on your payroll or your bank. Or a bookkeeper who left in the spring never got switched off. Nothing was broken into — the door was simply still open.
These are the ones that empty bank accounts, and hardly anyone selling websites will ever mention them to you. Most of what I do on the security side is aimed squarely here: email, logins and keys — not firewalls and jargon.
Can a stranger send email that looks like it came from you?
For a lot of small businesses, the answer is yes — and neither your customers nor your bank can tell the difference. It's a setting on your domain that almost nobody checks. I can look it up without touching anything you own, and I'll tell you plainly what I find.
If it's fine, I'll say so and you've lost nothing. If it isn't, it's usually about an hour of work to put right.
Looking after the parts nobody else is watching
Most small businesses have a website, a domain, an email setup, and a handful of online accounts that somebody set up years ago. Then that person moved on, and now nobody is really watching any of it.
Gunnells Technology exists to be the person watching. I keep the site running, keep the email working, keep the accounts in order, and fix things when they break, so the owner doesn't have to think about it.
Ongoing care
A care plan is a monthly arrangement to look after everything your business has online. Three levels, depending on how much of your work depends on it and how much of other people's information you hold.
Care
For businesses that need the basics handled well and want one person to call.
Care Plus
For established businesses where a bad day online means a bad month.
Care Complete
For practices that hold client or patient records: legal, dental, optometry, chiropractic, veterinary, accounting, insurance.
Compare every lineHide the comparison
| Care | Care Plus | Care Complete | |
|---|---|---|---|
| Best fit | Trades, contractors, regional service | Established local business | Practices holding client or patient records |
| In every plan | |||
| Uptime monitoring with alerting | ✓ | ✓ | ✓ |
| Managed backups, restored and verified | ✓ | ✓ | ✓ |
| Monthly update pass | ✓ | ✓ | ✓ |
| Account and access review | ✓ | ✓ | ✓ |
| Email authentication (SPF, DKIM, DMARC) | ✓ | ✓ | ✓ |
| Business operations security | |||
| Two-factor on accounts that touch money | — | ✓ | ✓ |
| Domain and DNS held correctly, recovery documented | — | ✓ | ✓ |
| Staff onboarding and offboarding checklist | — | ✓ | ✓ |
| Password manager rollout | — | ✓ | ✓ |
| Phishing and invoice-fraud awareness | — | ✓ | ✓ |
| Quarterly review with written findings | — | ✓ | ✓ |
| Annual staff phishing training | — | — | ✓ |
| Written incident plan: who to call, in what order | — | — | ✓ |
| Maintained vendor and access register | — | — | ✓ |
| Working together | |||
| Small changes included | 2 requests a month | 5 requests a month | 5 requests a month |
| Response window | Two business days | One business day | Same business day |
| Reporting | Automated monthly, annual summary | Automated monthly, quarterly findings | Automated monthly, quarterly findings |
| Online store add-on | Available | Available | Available |
Every plan starts with a paid access and asset audit, so the first month is spent finding out what you actually have rather than guessing.
Selling online?
If you run a store, there's an add-on for any of the three plans that covers the parts unique to online selling: watching for bulk changes, keeping apps updated and removing the ones nobody uses anymore, reviewing what customer data those apps can reach, fraud and chargeback settings, and getting ahead of platform changes before they break your checkout.
One-time work
Not everything needs to be ongoing. Some things get fixed once and stay fixed.
Digital access and asset audit
Every care plan starts here, and it stands on its own if that's all you want. I find out what your business actually owns online, who has access to it, and what shape it's in. You get a written inventory: domains, DNS, email, hosting, accounts, backups, and every person and company holding a key to something of yours. Most owners are surprised by at least one thing on that list.
Email authentication
Right now, unless somebody set this up deliberately, anyone in the world can send email that looks like it came from your domain. Your customers can't tell the difference, and neither can your bank. This is a fixed piece of work: get it published correctly, watch it for ninety days to make sure nothing legitimate got blocked, and hand you a report.
Websites and online stores
Building a new site, rebuilding one that's aged out, or moving one somewhere better. Built to be maintained, not to be impressive.
When something goes wrong
An account gets taken over, a site goes down, files disappear, or an email turns out to have been a fake. Existing care plan clients come first.
What I look after, and what I don't
In scope: your website, your domain and DNS, your email, your hosting, and the online accounts your business depends on. Anything that lives on the internet with your name on it.
Not in scope: the computers, network and hardware in your building. If you're in or around Lawrence County, Indiana, that's the MSP/IT side of the business — ask, and I'll tell you if you're in range. Everywhere else, I'm happy to point you to someone local who does it well.
I don't sell compliance and I won't tell you that you're secure. What I sell is fewer ways to get hurt, and a written record of the choices you made.
Three questions
Who fixed your website the last time it broke?
Have you, or anyone you know, ever received an invoice that turned out to be fake?
Do you know who has the login to your domain registrar?
If the third one gave you pause, that's the normal answer, and it's usually where I start.
Start with an auditTell me what you need
Say as much or as little as you like. These come straight to me, and you'll get a reply within a business day — with a real answer, not a scheduling link.