Your clinic's defence against cyber threats

Not in real time, and we want to be upfront about that. Netxafe identifies the vulnerabilities that make attacks possible before an attacker can exploit them. Think of us like a locksmith who inspects every lock, window, and door in your practice and tells you exactly which ones need fixing. Once those gaps are closed, your clinic is significantly harder to breach. Netxafe Guard also alerts you the moment something new appears, like a staff credential turning up in a breach database, so you can act before damage occurs.

No. Netxafe is built specifically for clinic owners and practice managers with no technical background. Every report is written in plain language. Our recommendations include specific steps, estimated effort, and estimated cost so you know exactly what to do and can instruct anyone, your receptionist, a local IT contact, or your software vendor, to carry it out. You do not need to understand cybersecurity to act on our findings.

PIPEDA is the federal private-sector privacy law of Canada. It applies to every dental and veterinary clinic in Canada that collects personal information from patients or clients. It requires you to protect that information with appropriate safeguards, report certain breaches to the Privacy Commissioner, and give patients the right to access their records. Failure to comply can result in fines of up to $100,000 per violation. Every Netxafe assessment is mapped directly to your PIPEDA obligations.

The free teaser is a one to two page summary of your clinic external security exposure, generated from your domain name alone with no obligation and no technical setup required on your end. It covers your SSL certificate status, whether your email domain can be spoofed by criminals, any high-risk ports visible from the internet, and whether your website is missing key security protections. It is a genuine assessment, not a marketing brochure.

Yes. Our scans are passive and we only assess publicly available information about your domain. For email breach checks, we use a privacy-preserving method called k-anonymity, which means your staff email addresses are never sent to any external service in plain text. All reports are prepared exclusively for you and are never shared with third parties. We operate under Canadian law and our privacy practices comply with PIPEDA.

A one-time scan shows you where you stand today. Guard watches your clinic every month. It detects new staff credentials appearing in breach databases, alerts you when your SSL certificate is approaching expiry, flags new exposed ports, and tracks your security posture over time with a monthly trend chart. You receive a monthly report written in plain language, as well as a summary email, and your data stays protected between assessments, not just on the day we look.

The free scan teaser is typically delivered within 24 hours of your request. Paid full scan reports are delivered the same day. Netxafe Audit reports, which include a deeper technical assessment and a structured compliance interview, are typically delivered within 48 hours of your consultation call.

We tell you exactly what was found, which staff account is affected, and what to do first. For Guard clients, we flag new breaches the month they appear and include specific remediation steps in your monthly report. If you need guidance beyond the report, we are available by email and can walk you through any action on a brief call. We do not just hand you a list of problems, we help you understand how to resolve them.