Cloudflare Gateway for Teams could greatly improve a small business ability to detect malware inside the office LAN.
Prudence could suggest that blocking C2 Communication could not be enough and more deep looking on the office clients is required as soon as possible.
An instant malware block e-mail alert could be great.
A daily or weekly e-mail digest with filtered categories could be useful to build the right whitelist/blacklist and improve the customer experience.