Scroll to top
Services

What we do

Find the real risks. Fix what matters. Stay protected.

01 · Start Here

HIPAA Security Risk Analysis

Fixed price, from $2,500.

HIPAA has required a risk analysis since 2005, and it's the first thing HHS and cyber insurers ask about. We interview your team, walk the office, review your systems and vendors with your IT provider, and deliver a written report you can act on and keep on file.

See a Sample Report
What you get
An inventory of where patient data lives and how it moves
Each risk rated by likelihood and impact, in plain English
A prioritized fix plan with owners, timelines, and cost ranges
A HIPAA Security Rule status review (administrative, physical, technical)
The list of records to keep if HHS or your insurer asks
A walkthrough meeting with the owner and practice manager

Accounting and tax firms: the same approach, aligned to the FTC Safeguards Rule and a WISP based on IRS Pub 5708. Learn more →

02 · Fix

Security Remediation

A fixed-scope project, quoted from your risk analysis.

We fix the highest risks first and coordinate every change with your IT provider, so nothing breaks at the front desk.

Typical work
Multi-factor authentication on email and remote access
Backups that can't be deleted by ransomware, with test restores
Endpoint detection and response on every computer
Locking down IT vendor remote access
Email security (SPF, DKIM, DMARC) and secure file exchange
Network separation for guest Wi-Fi and clinical devices
Business associate agreements, policies, and staff training
03 · Stay Protected

Managed Security & Compliance

Monthly, priced by the number of people and devices.

Security isn't a one-time project. We keep watch, keep your records current, and are there when something looks wrong.

Included
24/7 threat monitoring and response through our security operations partner
Quarterly vulnerability checks and a short security report
Annual risk analysis update
Policy and business associate agreement upkeep
Incident response support when something goes wrong
Help with cyber insurance applications and renewals
How We Fit In

We work alongside your IT provider

We're not a help desk. Your IT provider keeps the office running day to day; we handle security and compliance and coordinate with them. Don't have an IT provider, or need a new one? We'll introduce you to a trusted local partner.

Start with a free 20-minute security review.