Core Services & Delivery Models
Advisory, assessments, and project-based support for healthcare organizations and leaders — built on clinical workflow expertise, not generic IT frameworks.
Entry & Self-Serve
Fixed-scope, fixed-price — the fastest way to start working together.
Strategy Sessions From $60
Shorter-format sessions for quick guidance, a second opinion, or a focused working conversation — see current session options and booking.
Emergency HIPAA Security Risk Assessment From $2,500
5-day delivery. Built on the HHS Security Risk Assessment Tool and 28 years of clinical workflow expertise — a translator, not a checkbox-filler. A compliance partner is brought in for formal audit sign-off where required.
DFR Lab Starter Kit Coming Soon
A beginner-friendly digital toolkit for learning the Digital First Responder mindset — a plain-language walk through Triage → Stabilize → Treat → Recover, with selected scenarios from the DFR Lab.
Premium & Custom Engagements
Scoped to the organization, not sold off a rate card. Every engagement below starts with a conversation.
Healthcare Cyber Risk Advisor Custom Scope — Book a Call
Monthly strategic support for health-tech companies, small health systems, and vendors that need a clinician-fluent security expert in their corner — one recurring strategy call, async review of high-priority questions, and a quarterly roadmap refresh.
IoMT / Medical Device Risk Review Custom Scope — Book a Call
A deeper risk review for connected medical devices and clinical systems across multi-site or complex environments — vendor risk, network exposure, and patient-safety impact, in plain language for both clinical and technical stakeholders.
Clinical AI Risk Readiness Sprint Custom Scope — Book a Call
A practical review of AI workflow, governance, and patient-safety risk before deployment — the productized version of the AI Red Team for Healthcare work, mapped to HIPAA, NIST AI RMF, and FDA guidance.
Patient-Safety Cyber Workshop Custom Scope — Book a Call
A training session that helps teams understand cyber risk through real clinical impact — for conferences, hospital departments, and health-tech teams. Formats range from a 45-minute talk to a full-day workshop.
Executive & Clinical Tabletop Custom Scope — Book a Call
A realistic downtime or ransomware exercise designed for healthcare leadership and clinical teams — built from the same DFR Framework used across every other engagement.
Sports Technology & Wearable Security Secondary / Future
Same methodology applied to athlete biometric data and wearable device risk. Available for select engagements.