Security for small clinics and law firms

Janus Gate Security

Fixed-price HIPAA risk assessments, phishing audits and fix-it roadmaps for practices in Somers, NY.

You already guard your patients’ and clients’ privacy. We look at the front door and the back door, explain what we find in words you’d use at the front desk, and send one invoice.

Somers, NY · Mon–Fri 8am–5pm · Most work done remotely, on-site when it helps

Fixed
fee
One gate, two directions: your records inside, the internet outside.

Before and after

What changes between the first call and the final page

Most small practices aren’t careless. They’re busy. Here is the ordinary week we usually walk into, and the one you have a few weeks later.

A typical week now

Probably fine. Hard to say.

  • Everyone shares the front-desk login, including the temp.
  • The backup shows a green tick. Nobody has tried restoring it.
  • A strange email arrives and nobody knows who to tell.
  • The HIPAA risk analysis is “somewhere,” or hasn’t been done.

After an engagement

Written down, and calm about it.

  • Everyone has their own login, and you know who can see what.
  • You’ve watched a backup restore, with the time written down.
  • A one-page card by every phone says what to do with a strange email.
  • A dated, signed risk analysis sits in your binder and in a PDF.

Not sure which column you’re in? Say so on the phone. That’s what the first call is for.

Ask for a first call

Who does the work

The same pair of eyes reads your first answer and signs your last page

Risograph illustration of a small clinic front desk with a ledger, a lamp and a locked door behind it

Your assessor

One person, start to last page

Janus Gate is a small practice in Somers. Every engagement has a single lead assessor, so you explain your setup once and never to a stranger who has to be briefed.

Findings come in the words you’d use at the front desk. If the work grows beyond the scope letter, we ask you first.

What’s in the folder

What lands in your inbox when we’re done

Not a 90-page binder nobody opens. A short folder, in order, built so the next person to join your practice can understand it.

Document one

The risk assessment report

Every system that touches patient or client records, rated low, medium or high, with the reason in one sentence.

  • Plain-English summary on page one
  • Findings ranked, with no scare words
  • Signed and dated for your files
Risograph illustration of a desk with case folders, a pen and a key
Law firms get the same folder, measured against client-confidentiality duties and the NY SHIELD Act.

Session

The 40-minute staff briefing

Everyone in one sitting. No slides full of acronyms. Bring coffee.

Risograph illustration of a checklist on a clipboard with a round stamp
A checklist you can tick yourself, with the date and the initials.

Document two

Phishing results, kindly

Nobody is named on the report. We show the pattern, not the person who clicked.

Document three

Starter policies

Two-page versions of the policies you actually need: passwords, a lost laptop, and who to call when something looks wrong.

  • Written for a team of five or fifty
  • Yours to edit and keep

Questions about what’s in the folder? Write to us. A person replies on weekdays.

Write to us

Prices, written down

Four engagements, each with its price on the label

Every engagement is a fixed scope billed once, by invoice. Pick a tab to see what’s inside.

HIPAA security risk assessment

$3,640

Up to 15 staff at one location. $410 for each extra location.

The written risk analysis your practice is expected to have, done properly and explained kindly.

  • 20-minute conversations with front desk, billing and clinical staff
  • Review of workstations, Wi-Fi, email and backups
  • A backup restore, watched live
  • Written risk analysis, signed and dated
  • A 60-minute walk-through call
Turnaround
12 business days from fieldwork
Best for
Clinics, therapy and dental practices, small firms

Phishing-resilience audit

$1,780

Up to 40 staff mailboxes.

Harmless, agreed-in-advance test emails, so the first fake one lands on a quiet Tuesday and not a bad one.

  • Three simulated emails over four weeks
  • A 40-minute staff briefing afterward
  • Results report: patterns, never names
  • A one-page “what to do with a strange email” card
Turnaround
Four weeks, start to report
Best for
Any practice that lives in its inbox

Remediation roadmap

$2,260

A ranked fix list, with no products to buy from us.

Every finding turned into a job with an owner, a rough cost and a month on the calendar.

  • Fixes ranked by what matters first
  • Rough cost and who should do each job
  • A 30/60/90-day plan on one page
  • A 45-minute planning call
  • A re-check email at day 90
Turnaround
5 business days after an assessment
Best for
Practices with a report and no time to act on it

All three, one invoice

$6,890

$790 less than buying them one at a time.

The assessment, the phishing audit and the roadmap, scheduled so each one feeds the next. A yearly re-check is $1,320.

  • Everything in the assessment, phishing audit and roadmap
  • One scope letter and one invoice
  • Roadmap built from your real phishing results
  • One lead assessor across all three
Turnaround
About eight weeks end to end
Best for
Starting from scratch and wanting it done once

See the full scope of each engagement

A small promise

You don’t need to know what a “security control” is. You only need to pick up the phone once.

We’ll ask about your staff, your software and where the records live. Then we tell you straight whether we’re the right fit.

Call (914) 815-2945
20
min

Field notes

Where we look first

Most trouble at a small practice starts in the front-desk inbox, not in a movie hacker’s basement.

How we think about every engagement
  1. 01
    Who shares a loginAnd who still has one after they’ve left.
  2. 02
    The backupWe watch it restore, not just trust the green tick.
  3. 03
    Email rulesHidden forwarding is the quiet one.
  4. 04
    Old laptops and phonesWhere charts and client files quietly wander.
  5. 05
    The waiting-room Wi-FiWhether guests and your practice share it.
  6. 06
    The paper sideSign-in sheets, the fax machine, the shredder.

How it runs

From first call to final page

Five stops, in this order. You always know which one you’re at and what comes next.

  1. 1

    Twenty minutes on the phone

    We ask how many people work with you, how many locations, and where the records live. You hang up knowing whether we’re a fit.

    Free
  2. 2

    A one-page scope letter

    What we’ll look at, how long it takes and the exact price. Sign it, or don’t.

    Fixed price
  3. 3

    We look, and we listen

    Two to four days of fieldwork spread over about two weeks, remote where possible and in your office where it helps. Short conversations with the front desk, the billing person and whoever fixes the printer.

    Weeks 1–2
  4. 4

    The report, in plain words

    Page one says what’s fine, what’s urgent and what can wait.

    12 business days
  5. 5

    A walk-through, then one invoice

    We go through it together on a call. Then a single invoice for the price in the letter, and nothing else.

    Done

The scope letter is free, and so is the first call. Choose a time that suits your front desk.

Pick a time to talk

Questions people ask us

The honest answers to the worries behind the questions

Does this give us the HIPAA risk analysis we’re supposed to have?

The assessment produces a written, signed and dated risk analysis for your files. You still own the decisions in it, and the roadmap helps you act on them.

Are you going to “hack” us?

No. The phishing audit sends harmless test emails, and we agree on the details in the scope letter first. Nothing is touched that you haven’t approved in writing.

Will we be pushed to buy software?

The roadmap lists fixes with rough costs and who could do them. You choose the vendor, and we bill only for the engagement.

We’re a law firm, not a clinic. Is this for us?

Yes. We use the same method and measure it against your client-confidentiality duties and the NY SHIELD Act instead of HIPAA.

What if something has already gone wrong?

Call us anyway: (914) 815-2945. We aren’t an emergency-response firm, but we’ll tell you honestly who to phone first and what to write down while you wait.

Free first call

Start with twenty minutes on the phone

No pitch deck, no pressure. Tell us about your practice and we’ll tell you honestly what, if anything, you need.

(914) 815-2945 contact@janusgatesecurity.com
20
min

Leave a note and we’ll call you back

What to have in mind for the call

  • Roughly how many people work with you, and at how many locations
  • The name of your practice-management or case-management software
  • When someone last looked at your security, even informally
  • Any one thing that keeps you up at night

Hours

Mon–Fri
8am–5pm
Sat–Sun
Closed

Billed by invoice, once per engagement.

Find us

22 Lake Dr
Somers, NY 10589
Plan your drive to Lake Dr