Find the Outdated Software on One Office Computer
One-time device scan for one computer that lists installed programs and OS versions. It takes about ten minutes of your time and delivers a plain-English vulnerability report. The program is report-only (collects only software names and OS/version, not files or records), and every program is checked against published flaws, including the ones attackers are using right now.
Three Steps, About Ten Minutes of Your Time
Name, email, then pay
Enter your name and email, then pay $59 by card at checkout. That is all it takes to start.
Tell us, sign, check your email
Right after you pay, give us your practice, role, phone, Mac/PC, and earliest date we can scan. We draw up a one-time authorization; you sign digitally, and we email you a copy plus the installer for your computer with a short set of instructional material.
Install, get your report
Once news on vulnerabilities returns, we check the results and email your report within one business day.
Report-Only, and Gone in 3 Days
What it sends us
The computer's name, its operating system version and updates, and the list of installed programs with their versions. Nothing else.
What it never touches
Your documents, email, browsing, passwords, screen or patient records. It does not read logs or watch network activity. The only changes made to the computer are installing itself and, 3 days later, removing itself.
It removes itself
The agent (temporary scanning program that lists installed software) uninstalls itself 3 days after you install it, even if the computer was off at the time. You can also remove it sooner.
What You're Agreeing To, in Two Minutes
A plain-English walk through the one-time scan agreement: what the agent collects, what it never collects, how it removes itself, and what you confirm when you sign.
The agreement you sign online is what counts. You get a copy by email.
Read the transcript+
Before you sign, here's what you're agreeing to for the One-Time Device Scan, in plain English. This is a summary. The agreement you sign is what counts.
Here's what we do. You install our temporary scanning agent on one computer. It sends us a list of what's installed. We check that list against public lists of known security problems, and you get a plain-English report with fix steps.
The agent collects only three things: the computer's name, its operating system, version and update level, and the list of installed programs and their versions. Nothing else.
It never collects files, documents, emails, browsing history, passwords, screen contents, keystrokes, or patient records. And we don't log into the computer, view it, or control it.
The agent is temporary. It only reports, and it doesn't take commands from us. It removes itself automatically three days after it's installed, you can remove it any time with our removal tool, and we take the computer off our scanning server when the report is delivered or the window ends.
Your scan data travels encrypted to our scanning server, which is hosted by a provider that has signed a HIPAA business associate agreement with us (HHS business associate guidance). We delete the raw scan data within thirty days after your report, and the report itself arrives encrypted or by secure link.
By signing, you confirm that you own the computer or are allowed to authorize installing software on it, that only someone allowed to install software will install the agent, and that you'll give your IT provider notice if they need it. Have a current backup first. Your antivirus may flag the agent.
Know the limits. This isn't a manual penetration test or continuous monitoring. It doesn't guarantee it finds every problem, and it doesn't certify HIPAA compliance. The agreement also limits One Guy Consulting's liability, covers indemnification, and is governed by New York law, so read those parts in full.
To sign, type your name and click Sign and authorize. That counts as a handwritten signature, and a copy is emailed to you. Questions? Email hello at one guy consulting dot com.
See Exactly What You Get
Pages from a real scan of one Windows front-desk computer in our own test office, with names removed. Your report lists what is actually on your computer.
What the sample found: five programs out of date. Three were Critical, with flaws attackers have been seen using (7-Zip, Mozilla Firefox and Adobe Acrobat Reader); two were Fix soon (Notepad++ and VLC media player). That computer was set up with older software on purpose; it is not a client's computer.
One Computer, One Price
Every flaw on CISA's known-exploited list (public list of flaws attackers have used) has already been used by attackers in real attacks.
If one of them exposes unencrypted patient records, HIPAA requires a notice to every affected patient and a report to HHS (HHS OCR HIPAA breach notification), and that cost falls on the practice, not the software maker.
“Thank goodness for One Guy Consulting and their expertise in consulting on HIPAA compliance. We were totally lost before Chuck walked us through what we needed to do.”
HIPAA consulting since 2015. Zero clients fined. Zero failed audits.
- Report-only agent for Windows or Mac
- Every flaw checked against CISA's known-exploited list
- Plain-English report with what to fix first
- Report in your inbox within 1 business day
- Agent removes itself after 3 days
Want the Whole Office's Security Monitored?
One computer shows the pattern. To cover every computer in the office all year, book a free 30-minute intro call and we will walk you through the options.
Frequently Asked Questions
What happens after I pay?+
What if it finds something serious?+
Do you offer ongoing monitoring?+
How fast do I get my report?+
Can it see patient data?+
Will it change or slow down the computer?+
How much does it cost?+
We have an IT company. Will this get in their way?+
Do I need an IT person?+
What does the scan collect?+
Is this a penetration test or continuous monitoring?+
How long does the agent stay installed?+
How is scan data protected and retained?+
Who does the vulnerability scan?+
See The Vulnerabilities You're Susceptible To
A one-time vulnerability scan of one computer, from the firm that already runs HIPAA compliance for small practices. Call us at 646-694-8025 or email hello@oneguyconsulting.com.
Questions About the Scan?
Tell us about your situation or question.
