Services and prices

Three engagements, each with its price on the label

A fixed scope, a fixed fee and one invoice, for clinics and law firms in Somers, NY.

Read what each one covers, how long it takes and what you keep at the end. If you can’t tell which fits, the first call is free and we’ll say so honestly.

Book a free 20-minute call or call (914) 815-2945
Fixed
fee
Risograph illustration of a scope letter with a round stamp, a pen, a lamp and a key on a desk
The scope letter comes first. It says what we’ll do and what it costs.

The three engagements

What each one covers, in full

Prices are for a practice of up to 15 staff at one location unless a note says otherwise. Each is billed once, by invoice, after the work is delivered.

Engagement 01

$3,640

Up to 15 staff at one location. $410 for each extra location.

Reserve the assessment
12
days

HIPAA security risk assessment

The written risk analysis a practice is expected to have on file, done properly and explained kindly. For law firms we measure against client-confidentiality duties and the NY SHIELD Act.

What we do

  • 20-minute conversations with front desk, billing and clinical staff
  • Review of workstations, Wi-Fi, email rules and backups
  • A backup restore, watched live and timed
  • A walk through the paper side: sign-in sheets, fax, shredder

What you keep

  • A risk analysis signed and dated for your files
  • Every finding rated low, medium or high, with one sentence of why
  • A 60-minute walk-through call
Turnaround
12 business days from fieldwork
Best for
Clinics, therapy and dental practices, small firms
Engagement 02

$1,780

Up to 40 staff mailboxes.

Reserve the phishing audit
4
weeks

Phishing-resilience audit

Harmless test emails, agreed in advance, so the first fake one lands on a quiet Tuesday and not on a bad day.

What we do

  • Three simulated emails spread over four weeks, approved by you in writing
  • A 40-minute staff briefing afterward, no slides full of acronyms

What you keep

  • A results report showing patterns, never names
  • A one-page card for every phone: what to do with a strange email
Turnaround
Four weeks, start to report
Best for
Any practice that lives in its inbox
Engagement 03

$2,260

A ranked fix list. No products to buy from us.

Reserve the roadmap
30·60
·90

Remediation roadmap

Every finding turned into a job with an owner, a rough cost and a month on the calendar, so a report becomes a plan you can act on.

What we do

  • Rank the fixes by what matters first
  • Name a rough cost and who could do each job
  • A 45-minute planning call with your team

What you keep

  • A 30/60/90-day plan on one page
  • A re-check email at day 90
Turnaround
5 business days after an assessment
Best for
Practices with a report and no time to act on it

Not sure which one you need? Describe your week to us on the phone and we’ll point you to the right one.

Ask which one fits

Starting from scratch

All three on one scope letter: $6,890

That’s $790 less than buying them one at a time. The assessment, the phishing audit and the roadmap, scheduled so each feeds the next, with one lead assessor throughout. About eight weeks end to end. A yearly re-check afterward is $1,320.

Reserve all three
Save
$790

Side by side

Pick by the problem, not by the product name

Fixed fees, billed once by invoice.
CompareAssessmentPhishing auditRoadmapAll three
Price$3,640$1,780$2,260$6,890
Answers“Do we have a risk analysis, and what’s in it?”“Would my staff spot a fake email?”“We have a report. Now what?”“Start from zero and finish once.”
Time12 business days4 weeks5 business daysAbout 8 weeks
You keepSigned, dated risk analysisPatterns report and phone cardOne-page 30/60/90 planAll of it, one lead assessor
Risograph illustration of a filing cabinet, a clipboard and a stamp in a small waiting room
Plain words

What we don’t do

The edges of the job, said out loud

Knowing where the work stops is part of feeling safe about it. If a need falls outside these lines, we say so and point you to someone who can help.

  • We don’t sell software, so the roadmap never ends in a shopping list with our name on it.
  • We don’t name the person who clicked. Reports show patterns only.
  • We aren’t an emergency-response firm. If something has already gone wrong, call and we’ll tell you who to phone first.
  • We don’t change the scope without asking. If the work grows past the letter, you hear it from us first.

Before you book

What small practices ask about price and scope

Is the price really the whole price?

Yes. The scope letter states the fee. You get one invoice, after delivery, for that amount. Extra locations are priced in the letter, never added later.

What if we have more than 15 staff?

Tell us on the first call and we’ll put the exact figure in the scope letter before you sign anything. The phishing audit already covers up to 40 mailboxes.

Do we need to be in the office the whole time?

No. Most work is remote. We visit your office in Somers and nearby when it helps, for the Wi-Fi and the paper side, and we keep it to short conversations.

Can we start with just one and add the others later?

Of course. The bundle is for practices that want it done once, and it saves $790. Starting with one is perfectly fine.

Twenty minutes on the phone, free, and a written scope letter if we’re a fit.

Call (914) 815-2945 Email us instead