TOUGH LOVE SECURITY · SHOP

HIPAA tools for practices that don't have a CISO

Built by an actual healthcare pentester. Not consultant-ware. Each PDF maps to specific HIPAA rules and 2024-26 OCR enforcement actions.

Why this matters now: HHS-OCR fined Novant Health $6.6M in 2024 for tracking pixels left firing on appointment pages. Four more settlements since. Most healthcare web vendors STILL ship these pixels by default.

★ BUNDLE — Best Value

The Solo Practice HIPAA Survival Pack

All 4 individual products PLUS a 30-min consult call with Lemorris and the bundle-only Novant $6.6M case deep-dive. Buy à la carte = $340 + can't book a consult. Bundle = $497 with consult.

$497 $340 + can't book consult

Open the bundle →

$29 · cheapest path in

Healthcare Breach First-24-Hour Kit

The 1-page crisis checklist you'll thank yourself for buying. 8 evidence-preservation steps, legal-hold notice template, "do not do this" list, 72-hr insurance notice template. 8 pages.

$67

Breach Response Communication Templates

14 fill-in-the-blank documents: OCR §164.408 individual notice, substitute notice, HHS Wall of Shame submission, cyber-insurance 72-hr notice, all-staff briefing, provider clinical briefing, board summary, press statement, vendor notice, patient FAQ. 24 pages.

$97 · most popular

HIPAA Tracking-Tech Audit Checklist

47 line-items, plain-English mapping to HIPAA rules. 12-step Patient Portal Audit, BAA Coverage Map, browser DevTools walkthrough. Catches the Novant $6.6M pattern.

$147

30-Day HIPAA Hardening Playbook

One task per business day for 30 days. ~12 hours total spread across a month. Risk-assessment evidence at the end. v1 distilled (30pp); v2 full edition (90pp) ships free to buyers Q3 2026.