A Fortify 24x7 brand. Lock work for practices, clinics, and the offices that bill for them.Client sign inAsk a locksmith
Health Lock Solutions
Keyway 03 / The mail slot

Almost all of it still arrives through the slot in the door.

Practices get approached by message. A referral that turns out not to be one, a remittance notice shaped exactly like your payer's, a portal alert wearing the correct logo. This keyway sets protection inside the mailbox and sets rehearsals in front of whoever is reading.

IronscalesIt works inside the mailboxPractice runs, scheduled
2 lines / inside the mailbox / no MX change asked of you
Lines on this keyway2
PlatformIronscales
Counted byMailbox or user
PlacementInside the mailbox

Why the placement matters more than the marketing

Ironscales is mailbox-level API protection, explicitly not a gateway. That reads like a technical footnote and is nothing of the sort. Anything posted at the boundary examines post as it comes past and afterwards has no further view of it. Reaching in through the mail platform's own interface keeps protection present after delivery, so something reading as harmless at nine and proving hostile by eleven gets pulled out again from wherever it came to rest.

It also brings internal post into scope. Once a colleague's account has been taken, the message travelling to the billing manager passes no boundary whatsoever, so anything sitting at one is blind to it. In a practice where people trust each other by first name, that is exactly the message which succeeds.

A gateway never sees the message a colleague's stolen account sends to your billing manager.

Training that is not a box being ticked

Simulation earns its poor reputation by being run once a year as a formality nobody takes anything from. Done properly it answers particular questions. Which roles are being aimed at, which shapes of message survive, and whether a member of staff who smells something wrong passes it on or quietly deletes it and mentions nothing.

The figure worth watching is how often something gets reported. A practice whose staff pass the odd suspicious item to somebody able to examine it stands far better placed than one where people are simply careful. Campaigns are constructed and run by us, and results arrive in a shape an insurer will accept unedited.

Cut cards

Two cut cards, with live rates.

Rates below are read out of billing at the moment you load the page. Add either one and it waits on the keyring.

Fortify-FES+SATCut card

Mailbox Defense with Training

Ironscales, working inside the mailbox itself

Ironscales is mailbox-level API protection, explicitly not a gateway. Working through the mail platform's own interface, from within the mailbox, leaves something delivered an hour ago still within reach, along with internal post that went nowhere near a boundary.

  • Spam and malware handling, link defence, attachment detonation, and detection aimed at business email compromise.
  • Because it acts on delivered mail, a message that later turns out to be hostile can be pulled back out.
  • Carries the training and simulation programme described on the line below it.
P13P22P35P44P54
Cut forEvery mailbox you want covered, shared and departmental boxes included
Turns onIronscales, mailbox-level API protection, explicitly not a gateway
Held inMessage metadata and verdicts in the Ironscales tenant raised for you
RekeyedBanners, policy and reporting tuned as staff feedback comes back in
Master levelFortify 24x7 works reported messages and the escalations behind them
Readingper mailbox
billed monthly, in advance
QTY
Fortify-SATCut card

Phishing Simulation and Training

Ironscales, running the practice campaigns

Practice runs on a schedule, aimed at people who are busy and not expecting a test. The reporting shows who clicked, who reported it, and where teaching is genuinely needed rather than where it happens to be convenient.

  • Simulations run without a cap, so campaigns follow your calendar and your quiet weeks.
  • Short teaching modules assigned from what the runs actually turn up.
  • Reporting fit to lay before an insurer or an auditor as proof the training runs.
P13P24P31P42P52
Cut forStaff accounts you want trained, clinical and administrative alike
Turns onIronscales
Held inCampaign results and completion records in the Ironscales tenant
RekeyedCampaign difficulty and cadence adjusted as results improve
Master levelFortify 24x7 builds and runs the campaigns for you
Readingper user
billed monthly, in advance
QTY
Honest scope

What this cut does not open

Mail is the busiest door in a practice and no control on it is total. Here is what these two lines will not do.

  • Nothing here stops every message. Something crafted by a person who has read your website and aimed at one named member of your staff will get past any product sold anywhere. These two lines exist to cut volume hard and to shorten the gap between something landing and something leaving.
  • Training does not eliminate clicking. People under time pressure with a patient waiting will click things. Simulation reduces the rate and improves reporting. Any vendor promising you a workforce that never clicks is describing a workforce that does not exist.
  • Nobody here will call this thing a gateway. Nothing gets rerouted and no MX record moves. Where a perimeter gateway is specifically the thing you must have, this line will not satisfy it, and the moment to say so is now rather than in month three.
  • Faxes, portals and phone calls are outside it. Plenty of healthcare traffic still comes in by fax line, payer portal or telephone. None of it passes through a mailbox, and nothing on this page reaches any of it.
  • Your clinical mail is not ours to browse. Access exists so that reported and suspicious messages can be worked. It is not a licence to browse. What we may look at, and when, is set out in your agreement rather than left to good intentions.
STAMP 01

Heads up: card statements show FORTIFY 24X7 - Health Lock Solutions is a Fortify 24x7 brand, and your subscription is billed by Fortify 24x7.