A free, plain-English Security Risk Assessment built for the clinic where the office manager is the Security Officer. See where you stand against the 2026 Security Rule — without your patient data ever leaving your machine.
Ward mirrors the ONC/HHS SRA Tool's rigor and adds the one thing nobody in the small-practice price band ships well: a one-click 2026 readiness report.
Administrative, physical, and technical safeguards across the full HIPAA Security Rule — each question in plain English, tied to the exact 45 CFR citation.
Rate each gap by likelihood × impact into Low / Moderate / High, ranked into an audit-ready risk-management plan.
Encryption everywhere, MFA on ePHI, the end of "addressable," 72-hour breach expectations — mapped to a live readiness score.
It runs in your browser. Your answers and patient data stay on your machine. Nothing to leak, nothing in someone else's cloud.
Export a full SRA, executive summary, POA&M, and risk register to Markdown/CSV, or print an audit binder — all client-side.
Track every business associate, their ePHI access, and BAA status — and the 2026 vendor-verification expectation.
Work through the 7 safeguard areas. Each has plain-English guidance — no security background needed.
For each gap, pick a threat and rate likelihood and impact. Ward computes Low / Moderate / High automatically.
The meter shows exactly which new mandatory items you've met and what's left — with what to do for each.
Generate the SRA, risk-management plan, and POA&M. Print to PDF for your records or an OCR auditor.
The free local SRA is genuinely complete — an ONC-tool replacement that runs on any machine. Start now; no signup, no card, no PHI in anyone's cloud.
Start your free SRAWhat "free" actually includes — and how it replaces the ONC tool.
The ONC tool is Windows-only. Ward runs on Mac, Linux, and the browser.
Run a templated SRA across every client and bulk the 2026 gap report.
vs. the ONC SRA Tool, Accountable, Medcurity, and Compliancy Group.