Security testing for law firms that hold client confidences

The ABA 2023 survey found 29% of firms experienced a security breach. We test the systems where your client confidences live so you can fix the gaps before a breach finds them.

What we test for law firms

We focus on the systems that hold client confidences, not a generic checklist. Every engagement is paired with a web application penetration test mindset and our cloud security assessment approach where it applies.

Microsoft 365 setup, including admin roles, conditional access, and guest access
Document management permissions, so client matters stay visible only to the right people
External attack surface, including exposed login portals and forgotten subdomains
Email account compromise, and how far an attacker could get into the document system once inside one mailbox

What is at stake

In the firm's language and the managing partner's language, these are the exposures a breach creates

Client data

A breached mailbox or misconfigured document library can expose client confidences that the firm has a duty to protect.

Ethics duty

ABA Model Rule 1.6(c) puts the duty to prevent unauthorized access to client information on the lawyers, not the IT vendor.

Lost matters

When a breach becomes known, clients question whether their matters are safe, and new business can stall while the firm responds.

Downtime

Recovering from a compromised account or ransomware can take days, and during that window the firm cannot bill or file.

Engagement and pricing

Assessments start at $5,000 and include a free 30-minute consultation. We scope the work to your firm's systems and the matters you need to protect.

Based in Long Island and serving firms across the region. See our Long Island security services page, compare options on our pricing page, or contact us to schedule a call.

Protect your client confidences

Book a free 30-minute call. We will walk through your Microsoft 365 and document management setup and tell you where a breach would start.