Your backups have never been tested. Here's what that actually means.
The five backup failures we find most often, and the 30-minute self-audit that surfaces them.
ARTICLES & FIELD NOTES
Resources
What we learn running drills, written down so you can use it — with or without us. No scare pieces.
4 min read
The HIPAA 2026 Security Rule update, translated for a 6-person practice.
The 72-hour restore rule, mandatory MFA, vendor verification — what the proposed rule means for a small practice, in plain English.
What actually happens in the first 6 hours of a ransomware attack.
An hour-by-hour composite of an incident — and why rehearsed companies recover in days while improvisers take weeks.
Why we tell prospects they're going to get hacked (and why they hire us anyway).
A founder's note on the assume-breach shift, the Mandiant retainer model, and the case for proof over promises.