HackFirstAid for Law Firms
PlaybooksTrainingRegulationsPricingResourcesAboutContactvCISO
Sign inTriage a live incident

Services & Pricing

Productized packages, not consulting hours.

Partners and administrators need to predict the expense and the timeline. Every offering below is a fixed-fee package, a per-seat license, or a monthly retainer. Annual billing, calendar-year-aligned by default.

Who runs this

Travis Barlow — 25+ years in incident response, 580+ engagements, founder of AtlSecCon.

AtlSecCon is one of Canada’s longest-running security conferences. No SDR, no junior associate — you talk to the person who’s run this incident before.

Prices in CAD

Three anchor tiers by firm size.

Solo & Small CA$10,500/yr · Mid-Size CA$25,500/yr · Regional from CA$51,000/yr.

See full pricing →

Available add-ons

  • IR Retainer — named on-call IR lead, SLAs, quarterly drill.CA$8,500 / year
  • vCISO — ongoing security oversight. Learn more →from CA$1,800 / month

Prices in CAD. Annual billing, calendar-year-aligned by default.

What’s included

Four pillars, across every tier.

  • Risk assessment & client readiness

    The hook pillar. Outside Counsel Guidelines responses are the wedge — a recurring, revenue-threatening event that pulls the firm into the full assessment.

    • •Firm Security Risk Assessment (CIS v8.1 / NIST CSF)
    • •Outside Counsel Guidelines & questionnaire response
    • •Written Information Security Program (WISP)
    • •Cyber & LPL insurance application support
    • •Trust-account wire-fraud control setup
  • Security awareness for legal staff

    Generic phishing training fails legal staff. We use the lures legal staff actually see — wire-instruction changes, fake e-filing notices, opposing-counsel impersonation.

    • •Legal-staff awareness program
    • •Phishing simulation with legal-realistic lures
    • •Wire-fraud-specific staff training
    • •Practice-area add-ons (real estate, PI, estate, CJIS)
  • Incident response & breach readiness

    Sold as a retainer because the value is in availability. Firms that buy IR after the wire has left pay far more and often miss the recall window.

    • •Named on-call IR lead with 2-hr business SLA
    • •Tabletop exercises tuned to firm systems
    • •Breach Readiness Pack (notification templates, runbooks)
    • •Opinion 483 notification guidance
  • Managed security / vCISO

    Ongoing security oversight without an in-house hire. Monthly retainer with quarterly partner reviews and MSP coordination.

    • •Quarterly review with managing partner & MSP
    • •WISP kept current, OCG response support
    • •Management-committee briefings
    • •Vendor / co-counsel risk review

Free, always available

Triage is free.

If you think you have an incident — especially if money has just moved — the first call costs nothing.

Open the triage tool

HackFirstAid for Law Firms

The first hour after an incident decides whether your firm keeps the client's money, the client's secrets, and the client's trust. We walk firms through it in plain language.

Advisory, training, and incident response — not legal advice. Reading this site creates no attorney-client relationship.

The site

  • Home
  • Playbooks
  • Training
  • Pricing
  • Services
  • Regulations
  • Resources
  • Triage tool
  • About
  • Contact
  • Client sign in

Family

  • hackfirstaid.com
    Free for your household
  • business.hackfirstaid.com
  • municipal.hackfirstaid.com
  • education.hackfirstaid.com
  • medical.hackfirstaid.com
    HIPAA Business Associate overlay
  • boards.hackfirstaid.com
  • leadership.hackfirstaid.com
  • it.hackfirstaid.com
  • lawfirm.hackfirstaid.com
    This site
  • pensions.hackfirstaid.com
  • familyoffice.hackfirstaid.com
  • household.hackfirstaid.com
  • The HackFirstAid hub →
  • Partners →
© 2026 HackFirstAid. All rights reserved.Privacy·Terms·Scope of Use·lawfirm.hackfirstaid.com