Index of Work — Managed IT & Cybersecurity for Small Offices, New York, NY

WellKept.

Microsoft 365 and Google Workspace, set up, watched and mended for law practices, surgeries, studios and family offices. Every account signed in twice, every file copied and sealed, and a fixed fee you pay by invoice only once the work is finished.

  1. 01What We Keep
  2. 02Why the Quarter
  3. 03The Fee Schedule
  4. 04The Ledger
  5. 05The Front Desk
Capabilities

What We Keep Watch Over

Ten jobs, done in the same order every time and written down, so a stranger could pick up the notebook and repeat them. Nothing here is improvised on the day.

  • AMicrosoft 365 Tenants
  • BGoogle Workspace Domains
  • CMulti-Factor Sign-In
  • DEncrypted Off-Site Backup
  • EPhishing Drills
  • FLaptop Patching
  • GMailbox Migration
  • HJoiner & Leaver Checklists
  • IPassword Vaults
  • JDomain Mail Authentication
Plot One

Microsoft 365

We work in the admin centre the way a joiner works a bench: Entra ID sign-in policy, Exchange Online mail flow, SharePoint sharing limits, Intune on the laptops, Defender switched on and tuned for a ten-person office rather than a bank.

  • Entra ID
  • Exchange Online
  • SharePoint
  • Intune
  • Defender
Plot Two

Google Workspace

Same ledger, different tools: 2-Step Verification enforced by organisational unit, Gmail routing and authentication, Drive sharing locked to the domain, context-aware access, and Vault retention set to what your profession actually requires.

  • Admin Console
  • Gmail
  • Drive
  • Context-Aware Access
  • Vault

Tell us what your office runs on. One phone call will show what it is missing.

Ring (340) 227-0010
Aerial view of a walled garden divided into four neat beds of fennel and dark soil, seen from directly above
02  /  Why the Quarter

Four Plots, Tended in Order

An office is four plots: accounts, devices, mail and files, people. We keep all four, in that order, and write down what we did and why.

  • 2.1

    A Logbook Per Office

    Settings, dates and reasons are written into a logbook kept in your own vault, so nothing lives only in our heads.

  • 2.2

    Fourteen Days, Then the Invoice

    The hardening takes fourteen working days. We bill only after the last line is signed off.

  • 2.3

    Reports in Sentences

    Monthly reports run one page and read like a letter, not a wall of red dots.

  • 2.4

    Prices Set in Type

    The fees on this page are the fees on the invoice. If your office is larger, the extra seat rate is printed below.

See a real page of the logbook before you decide anything.

Ask for a Sample Page
Services & Fees

The Fee Schedule, Printed Plainly

3.1 · The Core Engagement
$2,640

Hardening & Staff Training

Fixed fee, up to 15 seats, fourteen working days. Invoiced once the work is complete.

  • Multi-factor sign-in on every seat
  • SPF, DKIM and DMARC set on your domain
  • Encrypted backup, restore proven
  • Disk encryption and automatic patching
  • One 90-minute staff session
  • Signed logbook handed over
Reserve This Engagement
3.2 · Ongoing
$36per seat / month

The Watch Service

Your Microsoft 365 or Google Workspace tenant, checked daily and reported monthly.

  • Sign-in and mail-forwarding alerts
  • Patch and licence audit
  • One-page monthly letter
  • Same-business-day reply
Start the Watch
3.3 · Ongoing
$12per seat / month

Encrypted Backup

Mail, files and calendars copied nightly to a separate vault, sealed with keys you hold.

  • Nightly encrypted copy
  • 13 months of history kept
  • Test restore every quarter
  • Restore requests answered in writing
Add the Backup
3.4 · One-Off
$385

An Extra Training Session

For new hires or an annual refresher. Ninety minutes, up to twelve people.

  • Live phishing drill
  • One-page desk card for each person
  • In your office in Manhattan, or on video
  • Plain language, no slide decks
Book a Session
VISA AMEX ACH

Paid by invoice, never in advance: ACH, check or card. More than 15 seats on the engagement? Each additional seat is $140.

Put our fees beside your last IT invoice. Send it over and we will mark the differences.

Send Your Last Invoice
What Happens in the Engagement

Fourteen Working Days, Entered in Order

Each line below is a page of the logbook you keep. We enter it, check it against the last, and only then turn the page.

Billing

The invoice is raised on day fourteen, after handover, and not a day before.

Reserve a Start Date
  1. Days 1–2

    Inventory

    Every account, licence, shared mailbox, laptop and forgotten admin is listed, then checked against who still works for you.

  2. Days 3–5

    Sign-In

    Multi-factor authentication on every seat, by authenticator app or hardware key. Legacy protocols closed, and one sealed break-glass account for emergencies.

  3. Days 5–6

    Mail

    SPF, DKIM and DMARC set so your domain stops being forged in other people’s inboxes.

  4. Days 6–8

    Backup

    Nightly encrypted copies of mail, files and calendars to a separate vault. We restore one real file in front of you to prove it.

  5. Days 8–10

    Devices

    Disk encryption, screen locks and automatic patching on every laptop and desktop, one machine at a time.

  6. Days 11–12

    People

    A ninety-minute session with your staff, a live phishing drill, and a one-page card for every desk.

  7. Days 13–14

    Handover

    Logbook signed, admin credentials placed in your own vault, invoice sent. Nothing is held back if you ever choose to leave.

Questions Offices Ask Before Signing

Is $2,640 really the whole price?

For up to 15 seats, yes. Every item in column 3.1 is inside it, including the staff session. Past 15 seats each extra seat is $140. Nothing is billed by the hour.

Will my staff lose a working day?

No. Sign-in changes take about ten minutes per person, booked around client appointments, with no all-hands downtime.

We are on Google Workspace, not Microsoft. Does it change anything?

The ledger stays the same and only the tools change. 2-Step Verification, Gmail authentication and Vault retention replace their Microsoft counterparts line for line.

What if we want to leave after the engagement?

Admin credentials and the logbook are yours at handover. You can walk away with the whole record, or keep us on the Watch Service at $36 a seat.

Do you come to the office?

Most of the work is remote. The staff session happens in your office in Manhattan, or on video if you prefer.

Engagements begin on Monday and Tuesday mornings. Ring to choose yours.

Call to Pick a Monday
About & Contact

The Front Desk, West 38th Street

Fennel Quarter keeps an office’s digital life the old way: written down, double-checked, handed over. We work from West 38th Street in New York, NY, for offices of three to thirty seats that would rather have a tidy logbook than a dashboard.

A good office network is like a good dovetail: nobody notices it until it fails, so we cut it to be unnoticeable.

Working rule No. 1, Fennel Quarter
515 W 38Th St Apt Ph2C
New York, NY 10018
Find the Door on West 38th
Desk Hours
Mon–Thu9:30am–4:30pm
Frito 3pm

(340) 227-0010  ·  hello@fennelquarter.com

Write to the Desk

Tell Us About Your Office

Ring the Desk Write to Us