Services · priced before kickoff
a ranked fix list and the paperwork to back it, for one stated price.
Four engagements, each with a fixed scope and a number on it. Here is what’s inside every one, what isn’t, and what we’ll charge if you ask for more.
The four engagements
what’s in the box, and what isn’t.
We’d rather list the exclusions than hide them. Every scope below is the whole scope. Anything beyond it gets a written price you can say no to.
-
Flagship · about 10 business days
hipaa security risk assessment
The required risk analysis, done on your actual office rather than a template. We walk the rooms, check the machines, and write down what we find in language your practice manager can act on.
- Office walkthrough, up to two days on site
- Checks of encryption, patching, backups, email filtering and MFA
- Ranked roadmap: this month, this quarter, later
- Written risk analysis, policy binder, 60-minute team walkthrough
Not included: fixing the findings. That’s the hardening job below, or your own IT person’s Tuesday.
$2,140fixed · up to 15 staff and 20 devices · split in two paymentsScope this one -
People · 90 minutes plus 60 days
phishing-resilience training
One live session at your office, using real-looking examples from clinics: the fake lab result, the “updated” invoice from your supplier. Then three simulated emails over two months so it sticks.
- Live session, held at lunch or before opening
- Three simulated phishing emails, 60 days
- Group results only. Nobody is named to the boss
Not included: a subscription training portal. You won’t get login reminders from us.
from $740per practice · $1,180 for two locationsBook a session -
Machines · after hours
endpoint hardening
We turn on the protections most clinics already own and never switched on. Done before 8am or after 6pm so the schedule never notices.
- Full-disk encryption on, with recovery keys handed to you
- Local admin rights removed, automatic patching set
- MFA on staff email, with a one-page how-to
Not included: servers, specialty imaging gear or a monthly monitoring contract. We’ll flag them in the report instead.
$118per workstation · 5 minimum, so from $590Price my machines -
Follow-up · two options
roadmap session & annual recheck
A roadmap nobody sorts becomes a drawer document. Two small jobs keep it alive: a working session to decide the order, and a yearly retest so the risk analysis never goes stale.
- Session: two hours with your practice manager, every finding assigned a month
- Recheck: last year’s findings re-tested, documents updated
Bigger or smaller than the sheet
how the price moves when your office does.
| Practice size | Typical office | Fixed price |
|---|---|---|
| Up to 15 staff, 20 devices | 3-chair dental office, small family practice | $2,140 |
| 16–30 staff, up to 40 devices | Group practice, orthodontist with two sites | $3,670 |
| 31–50 staff, up to 70 devices | Multi-specialty clinic | $5,380 |
| Beyond 50 staff | Same method, more days on site | Quoted per head |
Quotes come in writing before anything starts. Run late on our side and the invoice drops by $150.
The quiet part
we can tell you when you don’t need us.
Some practices are one good afternoon away from fine. If that’s you, we’ll say so on the phone and point you to the free settings. It costs us a sale and keeps the advice honest.
Things we’ll never put in a quote
- software resaleNo commissions and no preferred vendors.
- an hourly meterThe price is the price, with scope changes agreed in writing.
- retainersWhen the job ends, so does the invoice.
- named-and-shamed staffTraining results are reported to you as a group.
Before you book
what people ask about price and scope.
can i buy just one piece?
Yes. Each engagement stands alone. Most practices start with the assessment because it tells you which of the other jobs you need, and which you can skip.
what happens if you find more work than you quoted?
We stop, write down what we found and what it would cost, and wait for your yes. The original price stays the original price.
how are the payments split?
One invoice per engagement. Over $1,500, half is due at kickoff and half when the roadmap is delivered. Pay by ACH, check or card.
do you travel outside sayville?
We’re based at 340 Wyandanch Rd and work with independent clinics around us. Call with your address and we’ll tell you honestly whether the trip makes sense.
Next step
send headcount and device count. get a number back.
Two numbers and the name of your EHR is enough for a fixed quote, usually within one business day. Mon–Fri 8am–6pm, evenings by appointment.