Know what’s exposed
Your website, email and public systems are checked every day. Inside the network, Torva finds outdated software, weak encryption, risky remote access and computers past their end of support.
On watch, edge to core.
Find exposed systems. Give your IT provider a clear fix list.
Torva watches your website, email and internal network, tells you what to fix first, and keeps the evidence for your HIPAA risk analysis.
- Plans from $30 a month
- No security staff needed
- 14-day free trial, cancel anytime
Sample: Edge score 64, up 6 this month
Core: inside your network, outbound only
Check your website and email security
See what anyone on the internet can learn about your website and email security right now. Free, no account needed.
Reads only public records and what any browser receives.
An annual assessment sees one day a year.
Your network changes every week. A vendor leaves a remote-access port open, a certificate expires, a server misses an update. Torva keeps checking between assessments, so you hear about it the next morning instead of at next year’s audit.
What Torva does for your practice
Know what to fix first
Issues being actively exploited in real attacks come first. Each one comes with plain-English steps and the affected devices, and you can send it to your IT provider in one click.
Document it for HIPAA
Scan results become dated evidence for your HIPAA risk analysis: assets, risks and fix records. You answer the safeguards a scan can’t see, with guided questions, and keep a signed record.
See your grade, then fix what matters.
Your dashboard shows each site’s grade and one list of what to fix. Open any issue for the steps.
Sample data for a fictional practice. See the full sample report
What you need to get started
- Verify your domain. You or your IT provider needs access to its DNS settings. Add the verification record, approve the hosts, then run your first Edge scan.
- Install Torva Core on an always-on Windows PC (Complete). You need local administrator access and approved network ranges. Review sensitive equipment and exclusions with your IT provider before the first scan.
- Fix and document. Work through “How to fix”, sign off what you’ve checked, and share the Executive summary with leadership.
Torva does not attempt exploits or sign in to scanned devices. Choose light checks or exclusions for sensitive equipment; paced scanning cannot guarantee that fragile systems will be unaffected.
Choose external checks or combined coverage.
← swipe to compare →
Website & Email
Torva Edge watches the outside: your website, email and public systems.
- $30/month includes one registered domain; additional domains $5/month each
- Scans your internet-facing systems every day and on demand
- Checks HTTPS, security headers and email authentication
- Flags outdated public software with known vulnerabilities (CVEs)
- Groups findings into clear next actions
- Tracks your score so you can see every change's effect
Complete
Edge outside and Core inside your network, plus evidence for your HIPAA risk analysis.
- Internal network scanning with the Torva Core agent, 60 devices included
- Exact Windows versions and end-of-support alerts
- Evidence for your HIPAA risk analysis, with HHS SRA Tool import
- An Executive summary for leadership
- $75/month; $375 device cap, plus extra domains
Compare plans and pricing · IT provider managing several practices? See Torva Partner
Built to be safe on a practice network
- Torva LLC, formed in Indiana
- Hosted in the US (Virginia), backed up daily
- No patient information: Torva never touches PHI
- Read-only scanning, outbound-only agent, signed updates
Why Torva exists
I run IT for a medical practice. When our annual security assessment came back at $14,000, it didn't get approved. Budgets are tight sometimes, but I still knew we needed something watching our systems.
I built Torva to be the check that's always running: what the internet can see, what's open inside the network, and a plain list of what to fix. I built it for my own practice first.
Common questions
Does Torva scan inside our network, or only the outside?
Both. Torva Edge checks what the internet can see: public addresses, websites and email records. Torva Core is a Windows agent you install on one computer inside the network; it scans the private ranges you approve, including devices on separate VLANs.
Does Torva make us HIPAA compliant?
Torva provides technical observations and dated evidence for part of your risk analysis. Your organization must assess the full scope of its risks and address administrative, physical and technical safeguards. Torva does not certify compliance.
How does the free trial work?
New customers get a 14-day free trial. A card is required at sign-up, and you won’t be charged if you cancel before the trial ends.
Could a scan slow down or break my systems?
Scans use paced checks without attempting exploits or signing in. Any network probe can affect fragile equipment. Review approved ranges and equipment exclusions with your IT provider before scanning. Scheduled scans start in your configured scan window; manual scans start when requested.
Can I cancel anytime?
Yes. Cancel from your account and your plan stays active until the end of the billing month.