Your backups have never been tested. Here's what that actually means.
The five backup failures we find most often, and the 30-minute self-audit that surfaces them.
ARTICLES & FIELD NOTES
Resources
What we learn running drills, written down so you can use it, with or without us. No scare pieces.
4 min read
The HIPAA 2026 Security Rule update, translated for a 6-person practice.
The 72-hour restore rule, mandatory MFA, vendor verification: what the proposed rule means for a small practice, in plain English.
What actually happens in the first 6 hours of a ransomware attack.
An hour-by-hour composite of an incident, and why rehearsed companies recover in days while improvisers take weeks.
Why we tell prospects they're going to get hacked (and why they hire us anyway).
A founder's note on the assume-breach shift, the Mandiant retainer model, and the case for proof over promises.