Built around a signed HIPAA risk analysis.
Five ways SaberGuard helps practices and small businesses protect their data and prove it.
Investment adviser? The Regulation S-P program is on the page for investment advisers. SaberGuard assesses and advises; it does not warrant compliance.
A signed HIPAA risk analysis you can hand to anyone who asks.
SaberGuard's compliance team reads your Microsoft 365 or Google Workspace security configuration with Ward, covers what software can't see with a short attestation you complete, and signs a report where every finding points at its evidence.
The Security Rule requires it of every covered entity and business associate (45 CFR 164.308(a)(1)(ii)(A)). It is the first document an auditor asks for.
Who it's for
- Medical, dental, and behavioral health practices with 1 to 40 staff
- Business associates that handle ePHI for covered entities
- Practices whose only risk analysis is a questionnaire score
What you get
- A signed, defensible risk analysis
- A gap analysis against the administrative, physical, and technical safeguards
- A remediation plan ordered by risk
- A Massachusetts written information security program (WISP) under 201 CMR 17.00
Pricing
Fixed fee by practice size
Solo practitioner $2,000–$3,000 · Small group $3,500–$5,500 · Multi-provider $5,500–$9,000
Full detail for healthcare practices. If you are not ready to book, start with the free, open-source HIPAA security risk assessment (SRA) tool.
Know what is running on your devices, and who is watching.
Patching, endpoint protection, backup checks, and account monitoring for the devices and accounts that hold patient or client data, reviewed by a person and tied back to your HIPAA risk analysis or Regulation S-P program.
It covers the controls behind many risk-analysis findings: device management, endpoint protection, stale accounts, and alerts that need a person to read them.
Who it's for
- Practices without an IT provider, or with one that does not do security
- Practices whose risk analysis flagged endpoints, email, or identity
- Business associates asked to show managed security controls
- Investment advisers who need their safeguards to work, not only be written down
What you get
- Patching, endpoint protection, and account monitoring in every tier
- Encrypted backups with tested restores, from Managed Security up
- A quarterly security summary from the person who manages your systems
- Ward Agent monitoring and the annual refresh from the Managed Security tier up, after your baseline HIPAA risk analysis
Pricing
$50–$165 per user per month
Three tiers: Security Essentials $50, Managed Security $90, Fully Managed $165. Each has a monthly minimum.
We tell you exactly what is watched, during which hours, and who responds. It is not a 24/7 security operations center.
A security professional in the room when a decision needs one.
Advisory from Jonathan DeLeon, CISM®, CCSP®: healthcare cybersecurity guidance, policy development, security roadmaps, and answers to the questionnaires insurers and hospital partners send you.
Small practices rarely need a full-time security officer. They need one when a questionnaire arrives, a vendor asks for a BAA, or an incident forces a notification decision.
Who it's for
- Owners and office managers who are the de facto security officer
- Practices writing or rewriting HIPAA policies and procedures
- Groups planning a merger, new location, or EHR migration
What you get
- Advice based on your own risk analysis
- HIPAA policies and procedures, WISP, acceptable use, AI use, and incident response
- Incident response tabletop exercises
- A 12 to 24 month roadmap with sequenced priorities and budgets
Pricing
$175 per hour, or on retainer
Retainers: Core advisory $1,000 a month, Program advisory $2,000 a month.
Turn findings into a program your practice can run.
Vendor and business associate reviews, periodic reassessment, security planning, and the governance that keeps the work moving after the first report.
HIPAA requires risk management as well as a risk analysis (45 CFR 164.308(a)(1)(ii)(B)). Regulators and insurers look for a program with owners, dates, and evidence.
Who it's for
- Practices with vendors that touch ePHI: billing, transcription, IT, cloud software
- Groups that want a repeatable annual cycle instead of a scramble
- Covered entities and business associates preparing for due diligence
What you get
- A business associate inventory with agreements on file and a review cadence
- An annual refresh of your baseline
- Security planning with budgets, sequencing, and owners
Pricing
Annual refresh and hourly advisory
Annual refresh at 40% of the initial fee for existing clients; advisory at $175 per hour.
Migrations, network builds, and the fixes your risk analysis calls for.
Engineering projects cover Microsoft 365 and Google Workspace setup and migrations, EHR moves, network and Wi-Fi builds, cloud infrastructure, backup design, automation of routine IT work, and websites.
A risk analysis tells you what to fix. SaberGuard makes those fixes, and sets up new systems with security settings in place from the first day.
Who it's for
- Practices and small businesses moving to Microsoft 365, Google Workspace, or a new EHR
- Offices opening a new location or replacing network equipment
- Clients whose risk analysis points to setup work their IT provider has not done
What you get
- A fixed-fee proposal with scope and deliverables before work starts
- Microsoft 365, Google Workspace, and devices set up to the security settings SaberGuard checks in a risk analysis
- Documentation of what was built, for your records and your next risk analysis
Pricing
Fixed fee per project
Quoted after a scoping call. Security hardening from $800 per system. Smaller or open-ended work at $175 per hour.
Start with a thirty-minute scoping call.
Tell us what prompted the search, how many people and locations you have, and which platform you run. You leave with a fixed fee and a start date.
SaberGuard assesses and advises; it does not warrant compliance.