Security check
$2,950
2 to 3 days of review and a written report with prioritized actions. This is the usual starting point.
Your security status, in writing
First, know where you stand.
We do not start a project without findings. The report belongs to you, even if you hire someone else afterward.
Three options
HIPAA readiness check for practices
$3,500
For medical and dental practices with up to 15 staff at one location. We review the technical safeguards of the HIPAA Security Rule in your practice and give you a written list of what to fix first.
Security assessment
from $7,900
The in-depth option with access analysis, Microsoft Entra configuration and a gap analysis against the rules that apply to you, such as HIPAA, the FTC Safeguards Rule, SOC 2 or CMMC. It suits larger environments, and we credit the price to a follow-up project.
How it works
- 01
Intro call.
We listen and work out together which option fits.
- 02
Review.
We only read. We change no configuration before you have decided how to proceed.
- 03
Analysis.
We rank the findings by risk and effort.
- 04
Report and walkthrough.
You receive the report in writing, and we go through it with you in a joint meeting.
FAQ
Frequently asked questions
What if everything is in order?
Then that is exactly what the report says, and you have it confirmed in writing. In that case we will not sell you a project.
Do you change anything on our systems during the review?
No. During the review we only read, and we change no configuration before you have decided how to proceed.
What is the difference between the options?
The security check is the starting point, with two to three days of work and a prioritized report for $2,950. The HIPAA readiness check for $3,500 is built for medical and dental practices with up to 15 staff at one location. The security assessment, from $7,900, goes deeper with an access analysis, Microsoft Entra configuration and a gap analysis against frameworks such as HIPAA, the FTC Safeguards Rule, SOC 2 or CMMC. It suits larger environments.
Is the price credited to a follow-up project?
Yes, for the security assessment. If you hire us for the follow-up project, we credit the assessment price against it. That keeps your risk low, and we earn nothing on the assessment that we would not also earn on the project.
Is the report a compliance certification?
No. The report shows where your technical controls stand and what to fix. It does not certify compliance with HIPAA, SOC 2, CMMC or any other framework. Your auditor or legal counsel makes that call.
Security Assessment
How is your IT security doing?
Tell us about your situation. We will tell you honestly whether and how we can help.