Find website security gaps before attackers do.

Continuous, authorized security checks for the websites your practice runs, with clear fixes, retesting and evidence you can show auditors and cyber-insurance carriers.

Add & verify your websites

Prove you control each domain with a DNS record or small file, and record who authorized the scan.

Safe, authorized checks

SSL/TLS, security headers, email/DNS security, exposed files and risky ports — never destructive.

Prioritized, plain-English findings

Every finding shows evidence, severity, the exact fix and the related HIPAA safeguard.

Fix, retest, keep the evidence

Assign owners and due dates, retest to confirm the fix, and export reports for auditors and insurers.

Risk score, severity breakdown and prioritized findings

Each finding with evidence, fix steps, HIPAA mapping and AI guidance

Domain verification and scan authorization before any scan

Included · MediCRM Security Center

Protection built into the CRM, not just your website

Alongside website scans, the Security Center watches your MediCRM workspace itself and alerts you by email and in your dashboard.

Virus scan on every upload

Built-in safety rules plus MetaDefender Cloud (20+ antivirus engines) check every file before it's saved.

Intruder detection

Spots password-guessing attacks, blocks attacking networks and flags sign-ins from new devices.

Lock controls

Auto-lock after 5 wrong passwords, sign-out after 15 idle minutes, and lock any user instantly.

Required two-step sign-in

Every admin account must use two-step sign-in after a 7-day grace period.

SSL/TLS certificate monitor

Daily grade, expiry date and issues, with an alert 30 days before a certificate expires.

Package vulnerability scanner

Checks every software package against public vulnerability databases daily, with severity and fix version.

Patient Access Report

Who viewed, edited, downloaded or exported each patient record. CSV and PDF, ready for HIPAA audits.

Weekly Security Report

A one-page branded PDF every Monday: attacks blocked, scans, certificate health and notable events.

See a real Weekly Security Report

A sample practice's week, with names and addresses masked. This is exactly what lands in your inbox every Monday.

Plans

Essentials

$100/month

Up to 3 websites, monthly scans
SSL/TLS & security headers
Email/DNS security
Risk score dashboard

Professional

$200/month

Up to 15 websites, weekly scans
Exposed files & risky ports
Owners, due dates & retesting
High-risk email alerts

Complete

$300/month

Up to 50 websites, daily scans
HIPAA safeguard mapping
AI fix guidance & risk exceptions
PDF reports & audit trail

What we don't claim: no scanner tests every possible weakness, guarantees protection or certifies HIPAA compliance. IP Security Scanner gives you a reliable, auditable workflow, from authorized scans to verified fixes, as part of your broader compliance program.