Monitoring
Ongoing watch so the next finding never becomes a breach.
Monthly external scans, alerts when something changes or comes due, and a quarterly review call. Month to month, no lock-in.
Know your exposure
Security hardening and monitoring for the practices regulators hold to account, across the Research Triangle.
Gestalt Security works for the practices that cannot absorb a breach and cannot hide one: dentists, medical practices, law firms, real estate brokerages and CPA firms across the Triangle. An honest picture of what is exposed, fixed by the person who wrote it.
Which rules apply to your practice?
Pick your practice above, or keep reading. Every obligation is listed below.
Three services
Three ways in, one ladder. Each step builds on the last.
Security Checkup
A one-time look at everything attackers can see from the outside.
We scan your public attack surface: email, website, remote access, anything exposed. Then we write it up as a plain-English report: every finding rated, every fix ordered. The checkup price is credited back if you continue into Hardening.
Hardening
We close the findings and lock down the accounts and configurations.
Multifactor authentication on every account, offline backups that are actually tested, email authentication and filtering, and the configuration fixes your software keeps defaulting on.
How it works
Four steps, one named consultant, no sales deck.
-
01
Scoping call
A free call to map what you run and what applies to you. You’ll know whether we’re a fit before anything costs money.
-
02
Security checkup
We scan everything an attacker can see from the outside — email, website, remote access, anything exposed.
-
03
Plain-English report
Every finding rated, every fix ordered, written so you can act on it — and show an auditor if you have to.
-
04
Fix & monitor
We close the gaps, and if you want, watch ongoing — so the next finding never becomes a breach.
Local, and security only
The person who answers the phone is the person who scanned your network. Big firms can’t offer that — it’s structural. Your report is yours; no locked-in dashboard.
Based in the Triangle
Security only, no reselling
One point of contact
Month to month, no lock-in
Straight answers
Isn’t my IT person already handling this?
Your IT person keeps systems running. We look at them the way an attacker — or an auditor — does, from the outside in. Also: your IT guy doesn’t think like me. A different lens finds different things.
We’re too small to be a target.
Small practices are the target: you hold money, records and credentials, and you’re less defended than an enterprise. Regulators hold you to the same standard regardless of size.
What does this cost?
Prices climb with the work: monitoring starts at $200 a month, a checkup at $500, hardening from $1,500. Every engagement is quoted up front after a free scoping call — no surprise invoices.
Will this satisfy HIPAA or the Safeguards Rule?
We document what we find and what we fix, so you have the paper trail auditors and breach rules ask for. We close the technical gaps; the report is what you show to prove it.
Why you instead of a big security company?
Big firms run layers — sales, engineers, a SOC in another state. The person who scans you isn’t the person you talk to, and the results usually live in a dashboard you lose when you cancel. Here the person who answers the phone is the person who scanned your network, and your report is a file you own. That’s not a preference — for them, it’s structural.
Are you a 24/7 incident response team?
No — and be suspicious of anyone our size who claims to be. If something is happening right now, call and we’ll walk you through the first hour for free: isolate, don’t pay, preserve the evidence. Then we’ll help you decide whether to bring in a 24/7 incident response firm, and how to brief them.
Book a security checkup
Tell us what you run and we’ll start with a conversation. No sales deck, just a look at what’s exposed.
Prefer to call or write? medalla@gestaltsec.com · (919) 665-0114 · Raleigh · Durham · Morrisville
Something happened? Report it here — first-hour steps, then straight to us. Or call and we’ll walk you through the first moves.