(914) 523-3182

Cybersecurity for independent clinics · Bronx, NY

Not a scare deck — a plan you can sign.

Dovelio runs HIPAA security risk assessments, rolls out phishing-resistant MFA, and trains your front desk. We built it for practices that can’t afford a CISO and shouldn’t have to pretend otherwise. Fixed fee, said out loud before we start. One invoice per engagement.

Get a fixed quote Call (914) 523-3182
HIPAA RISK ANALYSIS · BRONX NY · SIGNED · FIXED FEE
142

45 CFR Part 164 is the HIPAA Security Rule. It asks every practice for a thorough risk analysis. That paperwork is what we help you finish.

What we do · billed per engagement

Three jobs, priced out loud

01

HIPAA security risk assessment

Your risk analysis, written once, written properly

We walk your office for 90 minutes: front desk, back office, the router in the supply closet. Then we map every place patient data lives. You get a ranked risk register, a report your practice manager can read, and a fix list with a cost beside each line, free fixes included.

  • Up to 10 staff and 12 devices
  • Signed report in 10 business days
  • Extra devices $45 each
FLAT FEE · ONE INVOICE · FLAT FEE · ONE INVOICE ·FROM$2,840 Book the walkthrough
Antique tintype-style photo of a clinic front desk with a clipboard, monitor and patient folders
02

Phishing-resistant MFA rollout

Security keys, so a stolen password stops mattering

Text-message codes get phished. We move your EHR, email and remote access to FIDO2 security keys and passkeys, enrol every person in the practice, and set up a break-glass plan for the Monday someone loses a key in the subway.

  • Two half-days on site, evenings if you prefer
  • Keys billed at cost, about $55 each
  • Break-glass procedure written for your office
KEYS AT COST · PASSKEYS · KEYS AT COST · PASSKEYS ·FROM$1,960 Price my rollout
Antique tintype-style photo of a hardware security key beside a stethoscope on a wooden desk
03

Staff security training

Training your front desk will actually sit through

Ninety minutes, live, in your waiting room after close or over video. Real phishing from real clinics, the fax-and-voicemail tricks, and what to do in the first ten minutes after someone clicks. We leave you a sign-in sheet and a training record, because the Security Rule wants one in your file.

  • Up to 15 people per session
  • Evening sessions $720
  • Training record for your compliance binder
PER SESSION · UP TO 15 STAFF · PER SESSION ·ONLY$640 Schedule a session
Antique tintype-style photo of clinic staff gathered around one monitor at a reception desk

The flagship, side by side

Same budget. Different paper.

The scare-deck audit

What the big vendor hands you

  • A 90-page PDF of red heat maps nobody on staff can read
  • Findings that end in a product demo
  • A price that appears after the third sales call
  • Six weeks of waiting, then a retainer pitch
BUSINESS DAYS · KICKOFF TO REPORT · BUSINESS DAYS ·10

The Dovelio chart

What you get from us

  • One page of ranked risks first, then the detail behind each, written for the practice manager
  • A fix and a rough cost on every finding, including the free ones
  • $2,840 flat for clinics up to 10 staff, quoted before we start
  • Thirty days of email follow-up once the report is signed

The trade-off: we’re a small firm. We don’t run a 24/7 security operations center, we aren’t your breach attorney, and we won’t resell you software.

All three engagementsOne invoice: $4,980

Ask for the bundle

The fine print, up front

  • Fixed fee, quoted before kickoff
  • Written for the practice manager
  • We’ll tell you what not to buy
  • Evening sessions after your last patient
  • Keys billed at cost
  • One invoice per engagement
  • Plain English, no heat maps
Antique tintype-style portrait of a receptionist on the phone at a clinic desk

Who we work for

Built for the practice with one front desk

Two to fifteen staff. One person who “does the computers” on top of their real job. A vendor portal for billing, an EHR you didn’t choose, and a Wi-Fi password taped under the keyboard. That’s the office we know how to fix.

  • Solo and small dental practices
  • Physical therapy & chiropractic
  • Therapy & behavioral health
  • Pediatrics & family medicine
  • Podiatry & dermatology

Probably not us: hospital systems, networks over 50 seats, or anyone who wants a 24/7 pager and a SOC. We’ll say so on the first call and point you somewhere better.

The honest answers

Asked at every first call

Required?

Is this actually required by law?

If you handle electronic patient data, the Security Rule requires an accurate, thorough risk analysis. Our assessment produces that document. We don’t hand out a “HIPAA certified” badge, because no such thing exists, and anyone selling one is selling you a sticker.

Passkeys, plainly

What does “phishing-resistant” mean?

A security key only answers to the real website, so a fake login page gets nothing, even if your staff type their password into it. Text codes and push approvals can be talked out of a tired receptionist. Keys can’t.

After the report

Do you stick around?

You’re billed per engagement, then it’s over. We include thirty days of email follow-up. Hire us again next year for the annual refresh if you want to.

Sales

Will you make us buy things?

No. Roughly half the fixes on a typical list cost nothing: settings, a policy, a habit. When something does need buying, we name two options and the cheaper one first.

Disruption

How much will this get in the way of patients?

The assessment is one 90-minute walkthrough on site, the rest is remote. The MFA rollout is two half-days, and we’ll come in the evening if the schedule is full. Nobody cancels a patient for us.

Worst case

What if we get breached anyway?

Then call your attorney and your cyber carrier first, then us. We’re not an incident-response retainer, and we won’t pretend to be. What we can show is the paper trail that proves you did the work beforehand.

Request a fixed quote

What happens after you hit send

  1. 01

    We read it, a human

    Your message lands in one inbox. We reply by the next business day with the questions we’d ask on a call, not a calendar-booking robot.

  2. 02

    Fifteen minutes on the phone

    Headcount, EHR, how people log in. We’ll also tell you if you’re not a fit. Mon–Fri 11am–4pm, evenings by appointment.

  3. 03

    A number in writing

    A one-page scope with a flat price. You approve it, we invoice per engagement, and we set the date.

NEXT BUSINESS DAY · NEXT BUSINESS DAY ·REPLY1 DAY

Tell us what you’re running

No sales sequence. Your details go to info@doveliocybersecurity.com and nowhere else.

We’d rather talk you out of a $4,000 tool than into it.

— The Dovelio rule, 2600 Netherland Ave

Start with a fifteen-minute call
PICK UP · BRONX NY · MON–FRI 11–4 · PICK UP ·11–4MON–FRI

Phone beats forms

Prefer a voice over a form?

(914) 523-3182

Mon–Fri 11am–4pm · evenings by appointment. Miss us and leave a message: we call back the next business day, from the same number.