HowyGuardCyber security for therapists and clinics.
Keep your practice and your clients' records safe.
A protected practice, without becoming an IT person. Upload your cyber insurance form and Howy shows you what's protected, what isn't, and how to fix each gap. Free.
Upload the blank form. Howy only needs the questions your insurer is asking, not your answers. PDF, Word file or a photo of the paper copy. Leave out any client information.
Howy is an AI agent. He reads your insurance form, shows you what's protected and what isn't, and gives you the steps to fix it yourself. Free. Read the small print
Free. No catch.
Howy's check
Upload your cyber insurance form. Howy finds every gap and gives you the step-by-step fixes so you can do it yourself.
Guides and answers
Plain-English guides to every question on the form, what insurers mean by it, and a glossary for the jargon.
Read the guidesQuotes
Ask for a price and you get a straight one. No pressure, no sales games. If the answer is no, that's the end of it.
Or have a tech do it for you, from $345.*
*Exact price in your free quote. It depends on your setup.
If something goes wrong, the bill is yours
Picture the week after a breach. You're telling clients their private notes may have been seen. You're paying a lawyer, getting your files and computers back, and cancelling sessions while you sort it out. Cyber insurance is meant to carry that weight.
But the form asked whether you require two-step sign-in, whether your laptops are encrypted, whether you keep a backup that ransomware can't reach. Those are real protections, and a lot of practices don't have all of them yet.
It's easy to answer Yes in good faith. These questions are written for IT departments, and a small business usually doesn't have one.
Howy's job is to show you what's protected and what isn't, with the steps to fix each gap. You get a protected practice without becoming an IT person.
How it works
Upload your form.
Upload the blank form: Howy only needs the questions, not your answers. A PDF, a Word file or a photo of the paper copy works. No form handy? Howy uses a general form with the questions most insurers ask.
Answer a few plain questions.
Which email you use, what computers you have, how you back up your files. "Not sure" is always an allowed answer.
Get your report.
Every question on your form, marked Yes, Partly or Not yet based on what you told Howy, plus a readiness score, on screen. The exact steps to reach a true Yes come to your inbox as a PDF.
Every question on your form, in order
Insurer forms differ in wording, but they keep asking about the same things:
- Two-step sign-in (often called MFA) on your email, your client records system and any remote access
- Encryption on laptops and phones
- Backups: whether you have one, whether a copy sits apart from your main files, and whether you've ever tested a restore
- Updates and antivirus on every computer
- Email settings that make it harder for someone to send mail pretending to be you
- Phoning to confirm before you change any bank or payment details
- Phishing training for anyone who handles email, and a written plan for a bad day
For each one you get the answer, a line on why, and numbered steps for the tools you use. Steps are written for Google Workspace, Microsoft 365, personal Gmail and Outlook.com, Windows and Mac. Where Howy doesn't have steps for your setup, the report says "Ask a tech" instead of guessing.
Business questions, like revenue or past claims, are marked "You fill this in." Howy doesn't guess those either.
Here's what one answer looks like
Example only. The question is worded the way many insurer forms put it.
Is multi-factor authentication required for all users to access email?
Based on what you told Howy, two-step sign-in is turned on for some people in your Google Workspace, but it isn't required for everyone.
Get to a true Yes
Require 2-Step Verification for everyone in Google Workspace
Google Workspace, needs your Google Workspace admin sign-in
- Sign in at
admin.google.comwith your admin account. - Open the Menu, then go to Security, then Authentication, then 2-Step Verification.
- On the left, pick the top organizational unit so the setting applies to everyone.
- Tick Allow users to turn on 2-Step Verification.
- Under Enforcement, choose On from date and pick a date about a week away. This gives everyone time to set it up.
- Under New user enrollment period, choose 1 week, then click Save.
- Tell everyone to go to
myaccount.google.com, open Security, and turn on 2-Step Verification before that date. The Google prompt on their phone is the easiest method.
How to show it's true: After the enforcement date, take a screenshot of the 2-Step Verification page showing Enforcement is on. In Directory, then Users, add the 2-step verification enrollment column and screenshot it too, so you can see every person is enrolled.
Rather not do it yourself? A tech can.
Howy is AI. Our people aren't.
Pick the fix that fits your list.
One of our cyber technicians goes through Howy's report with you and does the fixes. Your quote is free, and you see the price before any work starts.
Quick Fix
One or two gaps, all in your email or account settings.
from $345*
Full Fix
Three to six gaps, or a shorter list that includes work on your computers.
from $745*
Complete Fix
Seven gaps or more. We work through the whole list.
from $1,295*
*USD. Exact price in your free quote. It depends on your setup.
Questions business owners ask
Is this AI?
Yes. Howy is an AI agent. He reads your insurance form, shows you what's protected and what isn't, and gives you the steps to fix it yourself. Free. The AI reads your form and works out what each question is asking. Your answers come from fixed rules applied to what you told Howy, and the steps come from our step library, so the AI doesn't make them up on the spot.
What happens to my form?
We don't store it. Your file is read once, in memory, and dropped when Howy is done. Howy's reading is done by Google's Gemini, which may process it outside Canada. Your score and answers show on screen. If you ask for your full report by email, we build it as a PDF and send it through Resend, an email service in the US. We don't keep a copy of the report. If you leave your email, we keep it with your business name, your phone number if you give one, and a short summary of your results on Vercel's servers in Canada, so one of our cyber technicians can follow up. Please leave client information off anything you upload.
Does this mean I'll be covered?
No. Only your insurer decides that, and nobody can promise what they'll decide. Howy shows you how secure your business is and how to fix every gap. That's the part you control.
Who fills in and signs the form?
You do. Howy never signs, submits or answers anything on your behalf. Use the report to fix what needs fixing, then fill it in yourself.
Is it really free?
Yes. Howy's check, the guides and your quote are all free. You only pay if you want a tech to do the fixes for you.
What if I'm not sure how to answer one of Howy's questions?
Pick "Not sure." Howy will never turn a "Not sure" into a Yes. That question shows up as Partly or Ask a tech, with what to check.
What if I don't have my form?
Upload whatever you have, even a photo of the blank paper copy. With no form at all, press "I don't have my form" and Howy uses a general form with the questions most insurers ask.
What if a step doesn't match what I see on my screen?
Software makers move their menus around now and then. If a step doesn't line up with your screen, stop there and ask one of our cyber technicians to reach out. They'll walk through it with you.
A quick note. Howy is a free tool. It's general information to help you get your security in order. It isn't professional, legal or insurance advice. We can't take responsibility for decisions you make from it, or for anything your insurer decides about your application, policy or claim. You fill in and sign your form, so the answers are yours. Run them past a person you trust, like your broker, or ask one of our cyber technicians to reach out to you.