Request a proposal
Free AssessmentCISO Readiness Snapshot
Identify
Risk Assessments
What’s Your Cyber Risk Profile? QuizFreeCyber Risk Priorities SurveyFreeFree Cybersecurity Risk AssessmentFreeCyber Risk Assessment Checklist$150Cyber Security Scorecard$150Cyber Risk Starter Guide$150Cyber Risk Register Poster$150Cyber Risk Assessment$497
Vulnerability Management
Network Security ScoreFreeNetwork Vulnerability Snapshot$300Attack Surface + Data Exposure Report$300Grid Infrastructure Audit Report$300
AI Security
AI Risk ChecklistFreeAI Risk Exposure Report$300AI Risk Assessment$3,997
Vendor & Third-Party Risk
Vendor Security Questionnaire TemplateFreeThird-Party Risk Management PlaybookFree
Protect
Zero Trust
Zero Trust Deployment$4,997Zero Trust Architecture Build$5,000Zero Trust Reference Architecture Blueprint$997Network Architecture Review & Redesign$2,997Identity & Access Architecture Design$3,497Cloud Architecture Security Design$3,997Zero Trust Solution Architecture Design$4,997
Network & Edge Security
Edge Security Readiness AssessmentFreeNetwork Security Policy TemplateFreeEdge Security Configuration Audit$300Managed Edge Security (WAF & DDoS)$497 · $497/moNetwork Security & Edge Protection$1,497Network Security Servicesfrom $497Managed Network Security Plans$300–$797/mo
Email Security & Awareness
Cybersecurity Awareness Training SlidesFree12-Question Wire Fraud TestFreeCallback Verification SOP Pack$300Phishing Defense 30-Day Pilot$300Phishing + Awareness Training Program$1,997/mo
Infrastructure Security
Grid RMM Quickstart Guide$300Security Stack Implementation Sprint$5,000Grid Shield — Full SMB Security Implementation$12,500
Detect
AI SOC
AI SOC Readiness ChecklistFreeAI SOC Gap Report$300AI SOC Onboarding & Log Pipeline Setup$4,997
Threat Intelligence
Free PDF: Attacker Threat BriefingFreeDefender Circle$300/mo · $397/yrMulti-Modal Threat Intelligence Program$3,500/mo
Security Monitoring
Security Posture Dashboard$300Managed AI Risk Monitoring$1,497/mo
Respond
Incident Response
Stop Breaches and Ransomware GuideFreeGrid Command — Managed Security Retainer$6,500/mo
Managed Detection & Response
MDR Essentials$497/moMDR Complete$997/moManaged AI SOC / MDR$2,997/mo
Manage
Managed Security Plans
Security Protection Bundles$300–$1,997/moSMB Security Essential (5–10 endpoints)$497/moSMB Full Stack Managed Security$1,500/mo
vCISO & Advisory
Compliance Consulting Package$497CISO-as-a-Service$7,500/mo
Managed Compliance
Security Compliance Suite$2,497/moContinuous Compliance$2,500/moSMB Premium + Compliance$3,500/mo
Vendor & Third-Party Risk
Trust Center Document ChecklistFreeTrust Center Care Plan$300/moTrust Center Managed$1,200/moTrust Center Services$997 · $6,997 · $1,497/moCybersecurity Trust Center Build$4,997
Risk Platform
Risk Platform Fit Check$297Risk Register Platform Setup$4,997Managed Risk Platform Operations$1,997/mo
Optimize
Security Testing
Penetration Testing Engagement$12,500
Compliance Audits
Website Compliance Checkup$300SOC Readiness Assessment$497SOC 2 Type I — Prep + Audit$15,000HIPAA Compliance Audit$18,000SOC 2 Type II Audit$28,000ISO 27001 Audit$35,000
Compliance Build & Remediation
Compliance Audit + Remediation Project$7,500Full Compliance Build (HIPAA or SOC 2)$25,000
Data & Decisioning
Enterprise Data Infrastructure Advisory$7,500Realtime Adaptive Decisioning$12,500
HomeAboutBlogContactRequest a proposal

HIPAA Compliance Audit (Thoropass)

Prove HIPAA compliance to covered entities and partners

A HIPAA Security, Privacy and Breach Notification Rule assessment with a third-party attestation report, managed by TenGrid and delivered through Thoropass.

$18,000

Reserve your audit window — $2,500 deposit Book a Scoping Call

The $2,500 engagement deposit reserves your audit window and is credited in full against the $18,000 project price. The balance is invoiced after the scoping call, before fieldwork begins. Deposits are refundable if we determine on the scoping call that we are not a fit.

How this is delivered

TenGrid Security is a white-label partner of Thoropass. TenGrid scopes and manages your engagement and is your single point of contact; the readiness platform, evidence collection and the independent CPA audit are delivered through Thoropass and its licensed audit firm. Your report is issued by the independent auditor, not by TenGrid.

Who this is for

Health-tech vendors, business associates and covered entities that need an independent HIPAA report for hospital, payer or partner due diligence.

What’s included

  • HIPAA scoping: PHI data flows, systems and business associate relationships
  • Security Rule risk analysis and control mapping on the Thoropass platform
  • Policy and procedure set aligned to the Security, Privacy and Breach Notification Rules
  • Gap tracking to closure before the assessment
  • Independent HIPAA assessment and attestation report through Thoropass
  • Report delivered, plus BAA and ongoing risk-analysis guidance

How it works

  1. Scoping call: frameworks, systems in scope, timeline and auditor availability
  2. Readiness: Thoropass platform connected to your stack, gaps and evidence tracked to closure
  3. Audit: independent CPA firm performs fieldwork through Thoropass; TenGrid manages requests and evidence
  4. Report delivered, plus a plan for what comes next

Questions

Timeline?

Typically 8–12 weeks.

Is this a government certification?

No. HHS does not certify HIPAA compliance. This is an independent third-party assessment and attestation, which is what partners and customers request.

Can we add SOC 2?

Yes. A HIPAA + SOC 2 combined program shares most evidence; ask on the scoping call.

Is the assessment fee included?

Yes. The $18,000 covers engagement management, platform access for the engagement period and the independent assessment.

HIPAA Compliance Audit (Thoropass)

$18,000

Reserve your audit window — $2,500 deposit Book a Scoping Call

The $2,500 engagement deposit reserves your audit window and is credited in full against the $18,000 project price. The balance is invoiced after the scoping call, before fieldwork begins. Deposits are refundable if we determine on the scoping call that we are not a fit.

Editorial & AI Disclosure