Office hardening
Hardware-key sign-in on email, a password manager everyone actually uses, encrypted laptops, backups we restore once to prove they work, and a call-back rule that stops wire fraud. Fixed scope, a few days, one plain report.
Security · Chicagoland
Security for the small offices that can't afford a breach.
Law firms, dental and medical practices, and the offices that keep a town running. Nothing changes on your systems without two keys: yours and ours.
Taking first conversations now · engagements start January 2027
What we do
HIPAA security risk analysis
The risk analysis the Security Rule requires, reviewed every year in practice, and the one most practices never finish. We do it with you, write it down, and leave you a short list of fixes in the order that matters.
AI without leaking client files
An AI-use policy, an approved-tool list and the hardening behind them, built around your confidentiality duty. We draft, you decide. More at chilegalcyber.com.
Small towns & utilities
Assessments for village halls, water systems and the control equipment nobody has looked at since it was installed. Written authorization first, always.
How we work
- Permission in writing.Nothing is tested or touched until the owner signs a scope and an authorization. No exceptions, no favors.
- We look before we touch.The first visit is watching and listing: who logs into what, where the files live, how money moves. No changes.
- Two keys for every change.You approve each change before we make it, and every change comes with the step that undoes it.
- You get the receipts.A record of everything we ran on your systems: what, when, who, and how to reverse it. Most firms can't hand you that page. We start with it.
Why “2keys”
A bank vault opens with two keys held by two people. Neither can open it alone. That's the rule we run on: your key and ours, on every change, on every system.
Receipt for this page
- Requests made
- 5
- Fetched, about
- 64 KB
- Requests to other sites
- 0
- Cookies visible to this page
- 0
- Scripts
- 1, from this site
- Trackers, analytics, embeds
- none
- Sent anywhere
- nothing
- Counted in your browser at
- page load
This page counts itself, in your browser, from the browser's own records. Its security policy forbids scripts from calling any server (connect-src 'none'), and the one script on this page is small enough to read: it doesn't try. Open the developer tools and check.
A record of everything we did on your systems, what, when, who, and how to undo it, is the first page we hand a client. This is the same habit, on our own front door.
Content-Security-Policy: default-src 'none'; style-src 'self'; img-src 'self'; script-src 'self'; font-src 'self'; connect-src 'none'; base-uri 'none'; form-action 'none'; frame-ancestors 'none'
Contact
Mailboxes are being set up.Contact details appear here the day they're live.
Found a problem with our sites?Read this first.