A password alone no longer keeps attackers out. Total MFA puts a second factor in front of every login, then checks where the login is coming from and whether the device is healthy, and blocks anything that does not fit your policy. It even protects older applications that have no security controls of their own.
Total MFA is our managed multi-factor authentication service, built on Cisco Duo, the MFA we use as standard for our own clients.
One tap on the Duo Mobile app, a passcode or a hardware token. A stolen password on its own is no longer enough to get in.
Block or challenge logins from countries you do not work in, so attacks from overseas stop at the door.
Each device is checked at login against your policy, such as an up-to-date operating system and browser. Devices that do not meet it are blocked.
Different rules for different people and applications: allow, require a second factor, or block, based on who, where and which device.
Wrap MFA around Windows logon, remote desktop, VPNs and older web applications that cannot do any of this themselves.
We set the policies, roll it out to your team, keep it current and act on unusual login activity.
Many businesses rely on an older line-of-business application, a remote desktop server or a VPN that has no geo protection, no conditional access and sometimes no MFA at all. Replacing it is expensive. Total MFA wraps it instead:
The application itself does not change. It simply inherits the protection it never had.
Our 8-page guide explains, in plain English, why a password on its own is no longer enough, how multi-factor authentication shuts the door on most of today's attacks, and what to put in place first.
Free and instant: the PDF opens as soon as you send the form.
Each login has to pass all four checks. If any one of them fails, the door stays shut.
The person enters their password and approves a second factor on their phone or token.
The location of the login is checked against your geo-IP fence.
The device is health scored against your policy: trusted, up to date and secured.
Allowed, asked for more proof, or blocked, and every attempt is logged.
| What it protects | How |
|---|---|
| Microsoft 365 and cloud apps | Second factor at sign-in, geo-IP rules and device checks across your cloud services. |
| Windows logon and remote desktop | MFA at the Windows and remote desktop login, including servers reached over RDP. |
| VPN and remote access | A second factor and device check before anyone reaches your network from outside. |
| Older web and line-of-business apps | MFA and access rules placed in front of the app through single sign-on or a secure gateway. |
| Administrator accounts | The strictest policy for the accounts attackers want most. |
Every Total MFA licence comes with our management. We do not sell one without the other, because MFA that nobody looks after soon develops gaps.
From £7 per user per month + VAT
Cisco Duo MFA with our management
From £10.25 per user per month + VAT
Everything in Standard, plus device trust
A one-off setup fee applies. On a Microsoft estate we manage Total MFA alongside Microsoft Entra ID and need joint administrator access. MFA is already included on every PC in our Manage, Infinity and Infinity Plus packages.
Cyber Essentials requires MFA on cloud services and administrator accounts. Total MFA covers it, with the evidence to show it. See our Cyber Essentials service.
The same login rules across Microsoft 365, remote access and older applications, instead of a different setting in every system.
We design the policies with you, enrol your team, support them day to day and keep the service up to date.
We look at how your people log in today and which applications are exposed.
We agree the rules with you: who, from where, on which devices.
We enrol your team and protect each application in a planned order, with no lock-outs.
We support your users, review the logs and keep the policies current.
Total MFA is our managed multi-factor authentication service, built on Cisco Duo. We design the policies, roll it out to your people and devices, and look after it for you, so every login proves who the person is, where they are and whether their device is healthy enough to be trusted.
Usually, yes. That is one of the main reasons businesses choose Total MFA. We put MFA in front of the application, for example at the Windows logon or remote desktop, at the VPN, or in front of a web application through single sign-on or a secure gateway. The application itself does not need to change.
Geo-IP fencing checks where a login is coming from. If your business only works in the UK, logins from other countries can be blocked or challenged automatically, which stops a large share of attacks that use stolen passwords from overseas.
When someone logs in, the device is checked against your policy, for example whether the operating system and browser are up to date and whether the device is one you trust. If the device does not meet the policy, the login can be blocked until it is fixed, even if the password and second factor are correct. Device health checks are part of the Advanced licence.
Total MFA starts from £7 per user per month plus VAT. That is the Standard licence together with our administration, support and management. Device health checks at login need the Advanced licence, from £10.25 per user per month plus VAT. A one-off setup fee applies. We always supply the licence and the management together, because MFA that nobody looks after soon develops gaps. MFA is already included on every PC in our Manage, Infinity and Infinity Plus packages.
Yes. MFA works hand in hand with your identity platform, so on a Microsoft estate we normally manage Total MFA alongside Microsoft Entra ID, your user identities, and often your compliance policies too. We need joint administrator access to Duo and to Entra ID so we can set the policies, support your users and act quickly if an account is at risk.
No. Most people use the Duo Mobile app on their phone and approve a login with one tap. Hardware tokens and passcodes are available for people who cannot use a phone at work.
Yes. Cyber Essentials requires multi-factor authentication on cloud services wherever it is available, and on administrator accounts. Total MFA helps you meet that requirement and gives you the evidence to show it.
Microsoft 365 has its own MFA, and where we manage Microsoft 365 we insist it is switched on. Total MFA adds one consistent login policy across Microsoft 365 and everything else you use, including older applications, remote desktop and VPNs that Microsoft MFA does not cover.
Book a free MFA review. We will show you where a stolen password would get an attacker in today, and how Total MFA closes each gap, including the older applications you rely on.
Loading secure payment form...
🔒 Secure payment by Stripe. Change your details
