Why Echo Hill Security exists
Small professional firms are held to the same security expectations as large enterprises — by insurers, by regulators, by their own clients — without the budget, the staff, or anyone whose job it is to know. Working across compliance, operations, and technology, one pattern kept repeating: most incidents were preventable with a handful of foundational controls that nobody had confirmed were actually in place.
Not because these firms are careless. Because there's no practical way for a six-person firm to check.
Echo Hill Security exists to close that gap. Thirty controls, in plain language, scored by fixed arithmetic, with a dated report at the end and twelve months of guidance to work through it.
How we work
Findings first, not a task list. The assessment starts with the controls that prevent the incidents small firms actually experience — account takeover, wire fraud, unrecoverable data loss — and orders the findings by what matters most. You get a maturity score from 1 to 5, a 30/60/90-day plan, and steps sized for a firm without an IT department.
Computed, not judged. Your score comes from your own answers by fixed arithmetic. The report appendix shows every control and every point.
Every control you can't confirm becomes a specific question for your IT provider, platform, bank, or insurer — with what a good answer looks like written next to it. That's the difference between knowing you have a gap and being able to do something about it.
What this is, and isn’t
A self-attestation assessment. Nothing is independently verified. Not an audit, not a penetration test, not a certification, not a legal or regulatory opinion. It won't tell you how an examiner or an insurer will respond — nobody honestly can.
What it will do is give you a dated, structured, honest picture of what's in place and what isn't, in language you can act on.
— Echo Hill Security LLC, Woodstock, Georgia
Ready to see where you stand?
The Baseline Assessment covers thirty controls in about twenty minutes and includes twelve months of advisory support. Founding price for the first ten firms is $1,495.