What's open to the internet
Once you're set up, it checks hourly from outside for open ports on your office's internet addresses. Only addresses you've shown are yours and signed for.
Retroworks / Products / GateWatch
For dental offices and law firms
GateWatch is in early access. We're setting it up with a small number of offices. Book a call to see if it fits yours.
See the weak spots in your office network. In plain English.
GateWatch looks at the parts of your office that get small practices in trouble: what's open to the internet, your email security settings, the devices on your network and how your staff sign in. Once your office is set up, it sends a morning note on what it found, with the proof and a suggested fix. Your team or your IT provider makes the change.
What it checks
Some on day one. More after setup.
You choose how far to go. The day-one checks won't need anything installed in your office.
Day one
Nothing installed.
Email security settings
Your SPF, DKIM and DMARC settings, which decide how easy it is for someone to send mail pretending to be you. Plus any change to your DNS.
Things about to expire
Your website certificate and your domain name, flagged before they lapse.
A morning summary
Once you're set up, one short email each morning: what's new, what's still open and what changed.
After setup
Each one is optional.
Devices on your network
A list of what's connected, with an alert when a new device joins. Needs a small sensor at the office.
Servers you connect
Software versions checked against published security advisories, plus break-in signs like repeated failed logins. Connected servers only, not staff Windows PCs.
Staff sign-ins
Who's signing in and which accounts don't use two-step sign-in. Needs a read-only grant in your Microsoft 365 or Google admin.
Backups that didn't run
Whether last night's backup actually ran, if your backup tool reports it.
Dental offices
The network around the chair.
GateWatch never touches patient records, your practice-management software or your imaging software's data. It looks at the office network, your email security settings and staff sign-ins.
A device nobody recognizes
A phone, laptop or gadget joins the office Wi-Fi and nobody claims it. GateWatch flags it so someone can check.
Front desk email on a password alone
Shared and staff mailboxes without two-step sign-in, named one by one.
Email that's easy to fake
Patients get reminders and bills from your address. GateWatch flags email settings that make it easier for someone else to pose as your office.
A backup that quietly stopped
A nightly backup that didn't run, the next morning, if your backup tool reports it.
GateWatch gives findings in words everyone in the office can read. It does not make an office HIPAA compliant; your IT provider and advisers decide what to fix.
Law firms
A second set of eyes, next to your IT provider.
Most firms already have an IT provider. GateWatch doesn't replace them. It gives the partners a plain-English view of what it finds, and your IT provider makes the fixes.
Sign-ins that don't look right
Repeated failed sign-ins and blocked attempts on firm mailboxes, on one timeline.
Accounts on a password alone
Every account without two-step sign-in, including shared inboxes like intake or billing.
A domain that's easy to imitate
Closing and settlement emails attract fakes. GateWatch flags SPF, DKIM and DMARC settings that make your domain easier to pose as.
Doors left open
Remote access or file-sharing ports open to the internet, flagged by the hourly outside check once your office is set up, on the addresses you've signed for.
How it works
Found by GateWatch. Fixed by your people.
- A short call. You tell us what's in the office and who handles your IT. Pricing is quoted after the call.
- Your office gets set up. You confirm which internet addresses and domains are yours and sign for them. Checks start once your office is set up. Nothing is installed for the day-one checks.
- Add more if you want. A small sensor for the device list, a read-only grant for sign-ins, the servers you choose and your backup tool.
- Then a summary every morning. Each finding says what's wrong, the evidence it saw and a suggested fix, ranked from critical to low.
- Your team or IT provider makes every fix. GateWatch never changes anything itself. When a fix is done, the finding is marked fixed and stays on the timeline.
Screens
The console, on a made-up company.
These come from a demo company with invented devices, addresses and domains. Yours shows your own office.
No security degree needed.
Every finding reads like a note from a careful IT person: what's wrong, why it matters and what to do next. Hand it to your IT provider as is.
The rules
Straight answers.
It never changes anything
GateWatch looks and reports. Your team or your IT provider makes every change.
Only what you sign for
Outside checks run only on internet addresses you've shown are yours and signed for.
Read-only access
Sign-in checks use a read-only grant in your Microsoft 365 or Google admin.
Not your patient or case files
It doesn't open patient records, case files or the data in your practice software.
No magic promises
No tool can stop every attack. GateWatch helps you spot common problems early and know what to do next.
Quoted after a call
Every office is different, so pricing follows a short call about yours.
Your move
Want to see where your office stands?
Thirty minutes. Tell us about your office and who handles your IT, and we'll walk you through the demo console.