Prices
Fixed prices, published here, so you know the cost before the first call. You get the final number in writing before any work starts, and it doesn't change.
Risk assessment
The complete assessment described on the risk assessment page: questionnaire, on-site walkthrough, written report and review meeting.
| Practice size | Price |
|---|---|
| Founding client rate Up to 15 staff, one location. 5 founding spots left. |
$1,500 |
| 1 to 15 staff One location |
$2,500 |
| 16 to 40 staff Or two locations |
$3,500 |
| Larger or more complex Quoted after a call |
Custom |
Half is due when we start and half when the report is delivered.
After the assessment
Optional. Most practices need one or both, but you can decide once you've seen your report.
Written security policies
The HIPAA security policies and procedures your practice is required to keep, written to match how your office actually works rather than a generic template. Includes a breach response plan and a staff acknowledgment form.
Compliance care plan
Keeps you current for the year after your assessment: the annual risk analysis update, a quarterly 30-minute check-in on your fix list, quarterly phishing tests with short staff training, policy updates when something changes, and a person to call when you're not sure whether something is a problem.
Good to know
Why is the founding rate lower?
ByteTempest is new and doesn't have a list of past clients yet. The founding rate is a fair trade for that: the full assessment for less, in exchange for honest feedback and, only if you're happy, a short testimonial.
Does the price include fixing what you find?
No. Your IT provider usually handles fixes, and many are quick, like turning on a setting or removing an old account. The report tells you which fixes matter most so you can budget for the rest.
Are there travel fees?
Not anywhere in Norfolk, Virginia Beach, Chesapeake, Portsmouth, Suffolk, Hampton and Newport News.
Can you work with our IT provider?
Yes, and I'd rather. They're welcome at the walkthrough and the review meeting at no extra cost. IT providers who want to offer this to all their clients can see the partner page.
Not a healthcare practice?
I also do security risk assessments, Microsoft 365 security reviews, email compromise reviews and staff training for other small businesses. Prices are on the cybersecurity services page.
Get your exact price
Tell me about your practice on a 15-minute call and you'll have a written, fixed price the same day.