What’s included
- Torva Edge: daily checks of your website, email and public systems: certificates, email authentication, exposed services and known-vulnerable software, with alerts when something changes.
- Internal network scanning (the Torva Core agent): scans of your internal network from an always-on Windows PC: outdated and end-of-support software, weak encryption, risky remote access and exact Windows versions, all inside your overnight scan window.
- Weekly full-port checks of your public addresses (all 65,535 TCP ports), with an alert when a new port opens.
- The compliance workspace for the HIPAA Security Rule, with the FTC Safeguards Rule and NIST CSF 2.0 also available.
- The Executive summary: grades, trends and what needs attention, as a page and a one-page PDF.
Your HIPAA risk analysis, built from real evidence
Most practices answer a risk-analysis questionnaire from memory once a year. Torva starts from what it actually found. Your scanned networks and websites become assets automatically, scan findings become suggested risks in your risk register, and each HIPAA safeguard shows what Torva’s data says about it. You answer the rest, add the systems a scan can’t see, and finalize a dated, signed analysis to keep on file.
Used HHS’s free SRA Tool before? Import your previous assessment (version 3.x): locations, asset inventory, vendors and business associates, rated risks and answers come straight in, organized in the same seven topics you already know.
A summary leadership can actually read
The Executive summary shows each site’s letter grade and trend, what’s on the network, and the issues that matter, grouped by what you do about them, with the HIPAA requirement each one relates to. Issues you’ve signed off as verified or as an accepted risk (a medical device that can’t be updated, for example) are listed separately by severity, so nothing is hidden from the grade quietly.
One list of what to fix, inside and out
Torva groups findings by the change that fixes them, across your internal network and your public systems together: “Outdated OpenSSH: 8 internal devices and 1 public server” is one issue, not nine alerts. Each issue opens with why it matters, step-by-step fix instructions and the affected devices, and you can send it straight to your IT provider by email, no Torva login needed.
Safe for clinical networks
Tell Torva where your imaging, lab and monitoring equipment is, and it only confirms those devices are present, or doesn’t contact them at all. When a scan sees signs of clinical equipment you haven’t listed, Torva protects it automatically until you review it.
Pricing
$75/month includes 60 devices. Additional devices are $1.25/device/month, and you never pay more than $375/month: 300 devices and above are all included. Every plan starts with a 14-day free trial; add a card at checkout and cancel anytime before day 14 to pay nothing.
What Complete doesn’t do
Torva supports your compliance program; it isn’t a certification of compliance, a penetration test or an audit. It doesn’t log in to your devices, so device types and some findings are estimates from what each device shows on the network, and it doesn’t cover policies, workforce training or physical security, which the compliance workspace helps you document.
About Edge · How internal scanning works · Healthcare & HIPAA · See exact coverage and limitations · Compare plans