Health Lock Solutions cuts, fits and maintains the technical safeguards that run underneath a healthcare security program. Twenty four subscription lines, each with a rate you can read before you buy, a unit you can count, and a written note about where it stops. Written for clinics, for dental and medical practices, for behavioral health providers, and for whoever sends out the billing alongside them.
None of these begin with a hooded figure. They begin with an ordinary Tuesday and something that looked routine.
Most intrusions arrive politely. A message shaped like a referral, a remittance notice, a portal alert from a payer you genuinely use. Somebody signs in on the copy, and by the afternoon a rule nobody wrote is quietly forwarding mail out of the practice.
When encryption runs overnight the first thing lost is not data, it is the schedule. Charts refuse to open, the practice management system rejects every login, and staff rebuild the day on paper with a waiting room already filling up.
Patient detail leaves the record the moment somebody exports it. A spreadsheet for an appeal, a PDF taken out on a home visit, an image folder dropped onto a shared drive. None of that is misconduct. It is just somewhere your controls now have to reach.
A plug turns only when every pin has cleared the shear line. Leave one short and the cylinder holds fast however hard you twist it. The six groups below behave the same way. They are not a menu of preferences, they are the six pins, and a gap in any of them is a gap in the whole cylinder.
An agent reading the conduct of software on the hardware, plus a staffed bench choosing the next move.
Open the keywaySoftware that was never approved does not run at all, which is a shorter argument than catching it afterwards.
Open the keywayProtection sitting inside the mailbox itself, plus the practice runs that keep staff sceptical of a good forgery.
Open the keywayPatch state, inventory, Apple estate control, web filtering, and the phones that walk from room to room.
Open the keywayFind the files holding patient detail wherever they ended up, then hold the copies to rules you set.
Open the keywayCopies of files, machines, servers and cloud tenants, plus a rehearsal proving they come back.
Open the keywayNothing sold on this page will make an organization compliant. What this chart does is set each group of lines against the part of a security program it supports, so you can see which pins are still short and where the remaining work honestly sits.
| Group of lines | Access control | Audit and review | Integrity of records | Transmission safety | Contingency planning |
|---|---|---|---|---|---|
| Detection, and what happens next | |||||
| What is allowed to run | |||||
| The mail slot | |||||
| The machines themselves | |||||
| Records, and where they travel | |||||
| Duplicates and recovery |
The administrative side of a program sits outside this chart on purpose. Your risk analysis, your written policies, your sanction procedure, your workforce training records and the register of agreements you hold with other vendors are not products and are not sold here by anybody, us included.
Ten platforms sit behind twenty four lines, and every one of them is named here. A managed service unwilling to tell you whose agent is running on a machine holding patient records is asking for trust it has not earned.
Behavioural endpoint agent. Keeps deciding with the network unplugged.
Correlation layer. Sets what an agent reports beside identity, mailbox and traffic evidence.
Allowlisting. What you approved runs; nothing else gets the chance.
Mailbox-level API protection, explicitly not a gateway. It works inside the mailbox.
Health, patch level and inventory taken across Windows, macOS and Linux.
Apple estate control for macOS and iOS, with configuration held in place.
On-device threat detection for the phones and tablets staff carry.
Discovery, risk scoring and encryption for the files that carry patient detail.
Image and file backup for workstations, servers and Microsoft 365.
Backup for Google Workspace, QuickBooks Online and Entra ID configuration.
Four stages, written out so nothing lands on you as a surprise a fortnight in.
You choose lines and quantities here and pay by card. Should the job bring Fortify 24x7 anywhere near protected health information, a business associate agreement gets signed between the two of us before anything is installed. After that we set down in writing which sites, machines, mailboxes and tenants fall inside the count.
Your tenant goes up on each platform you bought. Installers get packaged for your operating systems, enrollment links go out for phones and Apple hardware, and authorization links arrive for whichever cloud accounts are being covered.
A first scan and a first duplicate both traverse the entire scope once, which is why neither will ever be as quick again. Keep hardware awake while that happens. Afterwards only differences travel.
Anything that fires lands on our bench and not on your reception desk. Allowlists come out of learning, filters collect whatever exceptions turn out to be wanted, and job timings are fitted around the volume you genuinely store. The portal holds what you bought, whatever installers were cut, plus every request ever sent our way.
Every lock ever made has a limit on it, and hiding that is how a practice gets caught out. Eight things this catalog will not do for you, set down before any money moves.
These lines support the technical safeguards underneath a HIPAA security program. They do not make an organization compliant, and no vendor on this page can. Anybody selling you compliance in a shopping cart is selling you a story.
A security risk analysis is a documented exercise about your organization, your workflows and your assets. We will hand over inventory and configuration evidence that feeds it. Conducting it, and signing it, remains yours.
Written policies, sanction procedures, workforce training records, and the register of business associate agreements you hold with everybody else are documents you own. Buying agents does not produce any of them.
Where something goes wrong we investigate it, shut it down, and hand you whatever facts can be established. Judging the event against the notification threshold, and telling anybody about it, is a decision for whoever holds privacy in your organization, taken with your lawyer.
Imaging consoles, analysers, sensor workstations in a surgery and their close relatives arrive locked down by their makers, and adding software aboard can void a support contract. Machines of that sort get handled through where they sit on the network and who is allowed to reach them, never through a line on this board, and you will hear that said aloud rather than find them counted quietly.
Nothing here is an accreditation, a seal, an attestation or a certificate. The badges in our footer belong to Fortify 24x7 and describe Fortify 24x7. They say nothing whatsoever about your organization.
Nowhere here will you meet an invented percentage, a borrowed breach figure, a fictional client tally or a testimonial. Every price is drawn live out of billing, and whatever a line does is written down on its keyway.
Cyber insurance questionnaires ask about controls in a wording all their own. We will tell you plainly what is switched on and how it is configured. Reading that onto a form, and standing behind the answers, is your signature and not ours.
Billing supplies each figure as the page loads, which makes the number on a card the number you are charged. Hang whichever lines suit your practice on the ring, correct the counts there, and check out once the ring looks right. All of it turns into one subscription taken monthly.
Six lines across workstations, servers and Kubernetes nodes, offered at three response levels. Open the keyway.
One line. Only what you approved gets to run where it matters. Open the keyway.
Two lines. Protection working inside the mailbox, and the rehearsals belonging beside it. Open the keyway.
Four lines. Patch state and inventory, Apple estate control, web filtering, and mobile handsets. Open the keyway.
Two lines. Locate the files carrying patient detail, then govern where copies may travel. Open the keyway.
Nine lines. Copies of files, machines, servers, mailboxes and tenants, plus proof they restore. Open the keyway.
Heads up: card statements show FORTIFY 24X7 - Health Lock Solutions is a Fortify 24x7 brand, and your subscription is billed by Fortify 24x7.