Cybersecurity for small businesses in Chapel Hill and the Triangle
Security reviews, help meeting HIPAA and SOC 2, staff training and part-time security leadership, for clinics, law firms and small software companies across the Triangle. Fixed prices, agreed in writing before any work starts.
What cybersecurity actually means at your size
You do not have a security team and you are not about to hire one. What you have is a handful of systems holding client information, a few people with logins, and some software suppliers you signed up to without reading much. At this size cybersecurity is not a product you buy. It is knowing where that information sits, who can reach it, and what you would do if something went wrong.
Most small firms have never had anyone look. Not through carelessness, but because it has never been anybody's job.
Which piece you need
Nobody has ever checked
Start with a Security Health Check. A review of your systems, where your information goes and who can reach it, written up as a fix list in priority order. From $1,800.
A client or insurer is asking
Questionnaires about HIPAA or SOC 2 usually mean Compliance Readiness: where you stand, a plan for the gaps, and policy templates. From $4,500.
You need someone senior, part time
A vCISO gives you a named expert for risk reviews, supplier checks and the security questions your clients ask. From $2,500 a month.
Your staff are the weak spot
Most incidents start with someone clicking something. Team Security Training is practical workshops on phishing, passwords and handling client information. From $900 a session.
Your team is already using AI
AI Strategy & Adoption works out which tools are in use, what they can reach, and what your suppliers do with your information. From $1,500.
You need technology direction too
A vCTO covers systems, software and supplier choices, and pairs naturally with the vCISO work. From $2,500 a month.
Where we work
The business is based in Chapel Hill. We work in person across Chapel Hill, Carrboro, Hillsborough, Durham, Raleigh and Apex, and remotely with businesses anywhere else. More on each area.
What this is not
This is advisory and assessment work. There is no round-the-clock monitoring, no security operations center and nobody on call at 3am. If that is what you need, you need a different kind of provider and we will tell you so rather than sell you something adjacent.
Common questions
A Security Health Check starts at $1,800 and takes about one to two weeks. Compliance Readiness for HIPAA or SOC 2 starts at $4,500. Part-time security leadership as a vCISO starts at $2,500 a month, month to month. Every price is agreed in writing before any work starts, and there is no hourly billing.
Both. The business is based in Chapel Hill and we work in person across Chapel Hill, Carrboro, Hillsborough, Durham, Raleigh and Apex. Anywhere further out, we work remotely.
Most incidents at this size are not someone choosing you. They are automated, and they find whatever is exposed. A password reused across two services, an account that still works after someone left, a supplier with more access than the job needed. None of that requires anyone to have singled you out.
No. This is review and advisory work: we look at how your systems are set up, where your information goes and who can reach it. We do not try to break in. If a penetration test is what you need, say so on the call and we will point you at someone who does them properly.