Know your exposure

Security hardening and monitoring for the practices regulators hold to account, across the Research Triangle.

Gestalt Security works for the practices that cannot absorb a breach and cannot hide one: dentists, medical practices, law firms, real estate brokerages and CPA firms across the Triangle. An honest picture of what is exposed, fixed by the person who wrote it.

Which rules apply to your practice?

Pick your practice above, or keep reading. Every obligation is listed below.

Three services

Start with a look, finish with a watch. Each step builds on the last.

Security Checkup

A one-time look at everything attackers can see from the outside.

We scan your public attack surface: email, website, remote access, anything exposed. Then we write it up as a plain-English report: every finding rated, every fix ordered.

$1,500 one time Get the checkup

Hardening

We close the findings and lock down the accounts and configurations.

Multifactor authentication on every account, offline backups that are actually tested, email authentication and filtering, and the configuration fixes your software keeps defaulting on.

from $4,000 one project Get hardening

Monitoring

Ongoing watch so the next finding never becomes a breach.

Monthly external scans, alerts when something changes or comes due, and a quarterly review call. Month to month, no lock-in.

$450 per month Get monitoring

How it works

Four steps, one named consultant, no sales deck.

  1. 01

    Scoping call

    A free call to map what you run and what applies to you. You’ll know whether we’re a fit before anything costs money.

  2. 02

    Security checkup

    We scan everything an attacker can see from the outside — email, website, remote access, anything exposed.

  3. 03

    Plain-English report

    Every finding rated, every fix ordered, written so you can act on it — and show an auditor if you have to.

  4. 04

    Fix & monitor

    We close the gaps, and if you want, watch ongoing — so the next finding never becomes a breach.

Local, and security only

Based in the Triangle
Raleigh, North Carolina skyline
Security only, no reselling
Clean, modern server racks in a data center
One point of contact
A consultant working at a laptop
Month to month, no lock-in
An open monthly calendar on a desk

Straight answers

Isn’t my IT person already handling this?

Your IT person keeps systems running. We look at them the way an attacker — or an auditor — does, from the outside in. Also: your IT guy doesn’t think like me. A different lens finds different things.

We’re too small to be a target.

Small practices are the target: you hold money, records and credentials, and you’re less defended than an enterprise. Regulators hold you to the same standard regardless of size.

What does this cost?

A checkup is $1,500 flat. Hardening starts at $4,000, monitoring at $450 a month. Every engagement is quoted up front after a free scoping call — no surprise invoices.

Will this satisfy HIPAA or the Safeguards Rule?

We document what we find and what we fix, so you have the paper trail auditors and breach rules ask for. We close the technical gaps; the report is what you show to prove it.

Book a security checkup

Tell us what you run and we’ll start with a conversation. No sales deck, just a look at what’s exposed.

Prefer to call or write? [email protected] · (919) 665-0114 · Raleigh · Durham · Morrisville