Useful without talking to us.
The annual risk analysis is the single most reliable reason a healthcare practice will hand over its contact information, and across every comparable provider we examined not one offered a free risk assessment, a credential scan, or a readiness scorecard. That category was empty. We took it.
Free HIPAA risk analysis readiness check
Fifteen questions, each mapped to a real Security Rule citation, scored in your browser with the §164 requirement named behind every gap. No email, no gate, nothing transmitted anywhere.
Dark web credential exposure scan
We check your practice domains against known breach corpora and send you the report: which accounts, which breach, and what to do about the ones still in use.
Cyber insurance readiness checklist
Every control a 2026 carrier will ask about, with the three that cause outright declination marked. Time it to ninety days before renewal, not two weeks.
HIPAA regulatory tracker
What is in force, what is only proposed, and what changed. Including the correction we make most often: the Security Rule overhaul is a proposed rule with a July 2027 target, not law.
Pricing calculator
Users, locations, servers, and tier, with the published volume schedule applied. The output is the number we would put in a proposal.
Eleven questions for your IT provider
What to ask any company that touches your ePHI, with the citation behind each question and what a real answer looks like. Written to be used against us too.
Technical and regulatory. No thought leadership.
Things we know because we ran into them: Eaglesoft’s default database credentials, what a real risk analysis contains, why we do not run our own security operations centre.
What OCR actually asks for in a data request
Eleven document categories, taken from a real request. Go down the list and mark which ones you could produce this week.
What a real risk analysis contains, and what the SRA Tool produces
A completed HHS Security Risk Assessment Tool questionnaire is not a risk analysis. OCR settlements have said so repeatedly. Here is the difference.
Eaglesoft, dba, and sql
A practice management system that shipped with hardcoded database credentials, and what to actually do about it in a live operatory.
Monthly. To administrators and compliance officers.
What changed in enforcement, what we found in the field, and what is coming with a date on it. No product announcements. Unsubscribe link at the top, not buried at the bottom.
We also run a quarterly continuing education webinar for state medical, dental, and MGMA chapters. It is accredited, it is not a sales pitch, and if your association wants one, ask.