A Fortify 24x7 brand. Plating over the equipment that holds patient records.Client sign inAsk an engineer
Patient Data Armor
Plate 01 / Managed security for healthcare

A password is the thinnest layer you can put over a patient record.

Patient Data Armor fits security layers over the equipment a practice genuinely depends on. Reception desktops. The mailbox referrals arrive in. Whatever box the practice management database sits on. The cloud accounts holding duplicates of all three without anybody having decided that they should. Twenty four separate lines, each sized by what it wraps, each charged once a month.

24 lines / 10 platforms / billed once monthly
THREAT SIDELAYER 0101STRIKE FACELAYER 0202HARD PLATELAYER 0303MAIL SEAMLAYER 0404FIELD PLATINGLAYER 0505RECORD SEALLAYER 0606DEEP STOREPATIENT RECORDTOTAL BUILD, 24 LINESPLATE01SUBJECTLAMINATE STACKDEPTHSIX LAYERSISSUEA
Run byFortify 24x7
Operating sinceEleven years as an MSSP
Behind the suiteThirty years of engineering
PaymentCard only, month by month
Plate 01 / Thin spots

Nobody reverses a truck up to the records room.

Clinics are almost never taken apart by anything that would make a decent film. The way in is an account four people share, a machine a vendor forbade anybody to touch, a conversation that had been entirely ordinary until Tuesday afternoon, and a folder of records whose existence nobody remembers. Those four surface on nearly every assessment we run.

FIG 01

The account four people share

One login for the whole front desk, because a schedule does not wait while somebody hunts for a password. It has not changed since the last practice manager left. Nothing done through it can be traced to a human being, and that is precisely why somebody else would want it.

FIG 02

The machine you may not touch

The imaging unit. The chairside scanner. The analyser in the back room. Locked down by whoever built it, running a version of Windows that stopped getting fixes several years ago, and wired into the same flat network as everything else because that is how the installer left it.

FIG 03

The thread that turned on Tuesday

Eleven messages with the dental lab, every one of them genuine. Message twelve asks you to update where payment should go, and it reads exactly like the eleven before it, because whoever composed it spent two weeks inside that mailbox studying how the lab writes.

FIG 04

The folder nobody remembers

An extract somebody produced for an audit in 2021, parked on a desktop that has since changed hands twice. Nine thousand rows, no encryption, no entry in any register saying it is there. Until something goes looking, it is a liability with no price on it.

Plate 01 / The stack

Six layers. One schedule. One desk that picks up.

Buy the layers that solve something for you and skip the ones that do not. Pricing is per unit and per month across the board, and however many you take, one invoice turns up. Each plating sheet states the job, the number, and the point at which the layer stops helping.

LAYER 01SentinelOne + Fluency

Strike face

Agents that judge behavior on the machine, a correlation layer holding the whole practice in one view, and engineers who act on what surfaces rather than forwarding it to you.

  • Judgment reached on the machine itself: Windows, macOS, Linux, cluster nodes.
  • Fluency stitches machine activity to logins, mail traffic and network records.
  • Three tiers, from telling you, through to cutting a machine off and undoing the damage.
Open the plating sheet
LAYER 02ThreatLocker

Hard plate

A roster of permitted software on the machines that reach charting, imaging and money. Anything absent from that roster is refused, without a debate about whether it looks bad.

  • A watching period assembles the roster out of what your practice already runs.
  • We follow vendor releases, so no update halts a clinic at eight in the morning.
  • Ringfencing pins down what a permitted program may open, launch and talk to.
Open the plating sheet
LAYER 03Ironscales

Mail seam

Cover working from inside the tenant you already own, whichever of Microsoft or Google runs it, plus short training aimed at the three seconds staff really spend looking.

  • Joined by API, which lets it act on a message that landed an hour ago.
  • Impersonation and takeover spotted against the way your own practice writes.
  • Simulations lifted from campaigns aimed at clinics, labs and billing offices.
Open the plating sheet
LAYER 04N-able N-sight, Addigy, Zimperium

Field plating

Every machine known, updated, filtered and reachable. Apple hardware treated as Apple hardware. Handsets that somebody is finally watching.

  • N-sight does the monitoring, the updates, the scripting and the remote sessions.
  • Name filtering is carried by that same agent, so no appliance enters the supply closet.
  • Addigy takes the Apple estate and Zimperium sits on the handsets themselves.
Open the plating sheet
LAYER 05Actifile

Record seal

Locate the regulated material before anybody writes rules about it, since a folder that was never located cannot be governed. Then rule on what may be done with it.

  • Sweeps machines and shares for health, financial and identity material.
  • Returns a count plus an exposure score per machine, which is what orders the work.
  • Encryption, plus rules on the handful of routes data really departs through.
Open the plating sheet
LAYER 06N-able Cove and Dropsuite

Deep store

Duplicates parked somewhere the original estate cannot reach, and recoveries that get rehearsed instead of assumed.

  • Image and file copies from desktops, physical boxes and hypervisor guests.
  • Cove takes Microsoft. Dropsuite takes Google, Entra ID and the accounting books.
  • Recovery drills on a calendar, which turns a claim into something you have witnessed.
Open the plating sheet
Plate 01 / Materials

We did not make these. We run them.

Plenty of providers imply the whole apparatus was invented on their own premises. Ours was not. Underneath this brand are commercial products picked because they survive contact with small clinical sites, licensed by Fortify 24x7, and driven by people whose job is watching them. Knowing which parts you are getting beats a diagram with our badge printed on it.

SentinelOne

Behavior based conviction and autonomous action on every platform we take on, cluster nodes among them.

Fluency

Joins sources together and holds the history, so a case turns up already carrying the context somebody needs to judge it.

ThreatLocker

Permitted software rosters, ringfences and elevation handling, aimed at whichever machines you would least like to lose.

Ironscales

Threat handling that lives inside the mailbox and joins by API. Ironscales works as a mailbox-level API rather than as a gateway, and no amount of marketing turns it into one.

N-able N-sight

Monitoring, updates, scripting, remote sessions and name filtering, every one of them riding a single agent.

Addigy

Apple management for the Macs on desks and the iPads that live in operatories.

Zimperium

Conviction happening on the phone itself, across the iOS and the Android hardware clinical staff never put down.

Actifile

Locates regulated material, scores each machine for exposure, and encrypts what needs encrypting.

N-able Cove

Image and file duplicates lifted from desktops, from bare metal boxes, from hypervisor guests, and from inside a Microsoft tenant.

Dropsuite

Duplicates of a Google tenant, of the Entra ID directory settings, and of the QuickBooks Online books.

Thirty years of engineering under the suite
Plate 01 / Fitting

What the opening two weeks actually look like.

None of this wants a steering committee or a discovery phase ending in a deck. Two weeks is typical for a practice to be covered and quiet, and the hours go into settling things down rather than into installing anything.

Sizing call

Half an hour. Machine counts, which platforms, who holds administrative keys, what runs on the sealed clinical kit, and which loss would be worst to absorb. You finish the call holding a list and a figure.

Card on file

Pick out your lines and check out. Stripe receives the card and we never do. Charging is monthly, collected up front, and the wording on a statement is FORTIFY 24X7.

Agents out

Enrollment links and installers appear in the portal, generally before the day ends. Windows, Apple, Linux and handsets each take a different route, and none of them requires you to open a console.

Settling in

The roster completes its learning, the filter accumulates exceptions, and duplicate schedules get measured against whatever volume is actually present. That week is what decides whether a rollout stays quiet.

Running

Findings arrive on our desk, not yours. Your lines, installers matched to your hardware, and every case raised sit in the portal, with a human being behind it.

Plate 01 / Material limits

What the plating does not cover.

Healthcare security pages tend to leave the reader believing compliance came in the box. This one refuses to do that, so the boundary is set out here before you spend a dollar. None of it is fine print. It is the actual reach of what a subscription can do.

  • Nothing sold here makes anyone HIPAA compliant. What these products do is support the technical safeguards inside a security program. Operating that program belongs to the covered entity or business associate whose name is on it, and no quantity of software stands in for running it.
  • No agency certifies security products against HIPAA. There is no official mark to hold up. A badge implying one exists was designed by whoever is showing it to you, and saying that out loud beats letting an image carry authority it never earned.
  • Your risk analysis stays your obligation. Discovery and inventory lines hand over measurements a risk analysis can be built on, which is genuinely useful. They do not perform one, they do not sign one, and they do not discharge the duty to have one that gets revisited.
  • Policies, training records and sanctions remain yours. Per person training results and platform evidence are things we can supply. Deciding what your workforce is required to do, writing that down, and acting when somebody ignores it, are practice decisions, and we will not pretend to make them.
  • A signed agreement is paperwork, not protection. Where the relationship calls for one, Fortify 24x7 signs a business associate agreement. Signing shifts who carries which legal duty. It shifts nothing whatsoever about how well any system is defended.
  • Breach determination belongs to you and your counsel. After an incident you get the sequence of events, the evidence, and a straight description of what the systems recorded. Whether that triggers notification, to whom, and inside what deadline, is decided by your practice on legal advice. Never by us.
  • Sealed clinical equipment generally cannot take an agent. Imaging modalities, chairside units and lab analysers arrive locked by their manufacturers, and putting software on them can void a support contract or a regulatory clearance. Those are protected by fencing them off and watching their traffic, which is design work rather than something you add to a basket.
  • Cover follows enrollment, without exception. Every line reaches only the devices somebody enrolled and the tenants somebody connected. A personal laptop that was never enrolled, an unregistered phone, and any system left off the list fall outside all twenty four.
Plate 01 / Catalog

Twenty four lines, each against a unit, each month.

Each figure below is fetched from billing while this page opens, so what shows on screen is what your statement will carry. Add whatever you need, correct counts inside the panel, and then check out when the schedule reads right. It arrives as one monthly subscription.

The rates did not arrive. Reloading usually settles that. Should the catalog stay blank, mail support@patientdataarmor.com and a person will assemble the numbers for you.
Layer 01

Strike face

SentinelOne + Fluency

Six lines. Machines plus cluster nodes, three degrees of response. Open the plating sheet.

Fetching rates
Layer 02

Hard plate

ThreatLocker

One line. A permitted software roster on whatever reaches records and money. Open the plating sheet.

Fetching rates
Layer 03

Mail seam

Ironscales

Two lines. Cover that works inside the tenant, and the training beside it. Open the plating sheet.

Fetching rates
Layer 04

Field plating

N-able N-sight, Addigy, Zimperium

Four lines. Windows, Apple, handsets: current, governed and filtered. Open the plating sheet.

Fetching rates
Layer 05

Record seal

Actifile

Two lines. Locate regulated material, then decide where it may be sent. Open the plating sheet.

Fetching rates
Layer 06

Deep store

N-able Cove and Dropsuite

Nine lines. Desktops, servers, plus cloud accounts that nobody ever duplicates. Open the plating sheet.

Fetching rates
BILLING

Heads up: card statements show FORTIFY 24X7 - Patient Data Armor is a Fortify 24x7 brand, and your subscription is billed by Fortify 24x7.

Stack0 on the bench$0.00/mo