Annual Penetration Test
A complete internal, external, and web application penetration test each year, with findings scored by severity and a clear plan to fix them.
Your Cybersecurity Service Provider
Cybersecurity assessments done by people, not just tools.
Expert led security assessments mapped to the compliance frameworks your organization is required to meet.
How it worksThe Threat Landscape
$16.6 billion
Reported cybercrime losses in 2024
Source: FBI IC3 2024 Internet Crime Report
33%
Increase in cybercrime losses over the prior year
Source: FBI IC3 2024 Internet Crime Report
259 million
Americans' health records reported hacked by end of 2024
Source: HHS Office for Civil Rights (OCR)
81%
Of large healthcare breaches caused by hacking
Source: HHS OCR 2024 Report to Congress
What We Do
Expert led assessments across two practice areas.
Compliance & Risk Assessments
Earn trust and meet your obligations by demonstrating a documented, audit ready security program mapped to the standards you answer to.
- HIPAA Security Risk Assessment The risk analysis every healthcare organization is required to have.
- NIST CSF 2.0 Assessment See where your security program stands against the framework most agencies follow.
- CJIS Security Assessment Get ready for the CJIS v6.0 requirements before the 2027 deadline.
- Ransomware Readiness Assessment Find out how well you could survive a ransomware attack without paying.
- Vulnerability Assessment Find and prioritize the weak spots across your systems.
- Cloud Security Assessment Check whether your cloud setup is actually configured to keep people out.
Penetration Testing
Know your weaknesses before an attacker exploits them. Manual, expert led offensive testing that proves real world impact.
How It Works
Six steps, start to finish.
01
Scoping Conversation
A short, no obligation call. No cost.
02
Scoped Proposal
Fixed scope, fixed cost, no surprises.
03
Authorization in Writing
Signed rules of engagement before work begins.
04
Testing and Assessment
Expert testing with no operational disruption.
05
Reporting
Risk ranked findings with a remediation roadmap.
06
Remediation Support and Retest
We verify your fixes held before closing out.
Five Deliverables. One Annual Investment.
Think of the BCPP as penetration testing as a service, taken further. You get the recurring testing and reporting that a PTaaS model promises, delivered on a set schedule through the year, plus compliance work, a dedicated device that runs the testing from inside your network, and a direct line to the person doing the work. Every BCPP agreement includes the five components below. Everything is included. Nothing needs a separate purchase order.
Quarterly Vulnerability Scans
Credentialed scans four times a year, with issues ranked by priority so you can see your posture improve from one quarter to the next.
Ransomware Readiness Check
A mid year review of how well you could detect, respond to, and recover from ransomware without paying, aligned to Florida statute and compliance requirements.
Quarterly Compliance Reporting
Clear NIST CSF 2.0 or HIPAA status reports sent to your leadership at the close of each quarter, ready for audit whenever you need them.
BCPP Client Portal
Live access to your findings, documents, schedule, and a direct line to your Barkrum practitioner all year.
Ready to strengthen your security?
Tell us about your organization and what you need, whether that is a compliance assessment, a penetration test, or an ongoing program. We will scope the right engagement for your obligations and your risk.
Prefer email? Reach us directly at Hello@Barkrum.com.