Tax pros: PTIN renewal is open. Build your WISP free — and keep it current all year →

Written security plans that actually run.

If you handle client tax or financial records, you're not too small for this — a few computers is the size it's built for. We look at your office first, write the plan, and run the IT behind it. One local technician, from Richfield to Spanish Fork.

Not regulated? The IT half stands on its own, and monitoring starts at $99/mo.

Example: a plan with the IT running behind it

Example
WISP v1.0reviewed this week

Not a document on a shelf — a plan that's running:

  • Backup ran last night· 2:00 AM, no errors
  • Multi-factor sign-in· on for all 5 users
  • Updates installed· 12 patched this week
  • OpenStaff training· 4 of 5 done

The plan says what your office actually does, written to the FTC Safeguards Rule. We write it, then we run it.

See how the plan works →

Not sure where you stand? Start here.

Enter your website or email domain and get a free security grade in seconds — the same things anyone outside your office can see.

Sample security grade

Example
C61/100

We found 3 issues worth attention:

  • highEmail can be spoofed — no DMARC policy
  • mediumWebsite certificate expires in 12 days
  • lowMissing website security headers

What anyone outside your office can see — graded in about ten seconds.

Run yours — enter your website or email domain.

Free, instant, and passive — we only read what’s publicly visible about your domain: its email and DNS records, and its website if it has one.

More than monitoring

Tax and financial records live on office computers. We keep those running.

From Spanish Fork to Richfield, we keep small-business computers, networks, and email running — and secure.

Not ready to commit to anything monthly? Start with a one-time Internal Assessment — from $999. Half a day on site, and a written list of what we’d fix, what it costs, and what can wait. Yours to keep either way.

See what’s included

Something down right now? Call 435-201-2646

Towns we cover

Richfield · Salina · Gunnison · Manti · Ephraim · Mount Pleasant · Nephi · Santaquin · Payson · Salem · Spanish Fork

What's behind your grade

The grade isn't the point. What it protects is.

The scan looks at what anyone outside your office can see. Here's what's behind the letter, in plain English.

Can someone impersonate your email?

Whether a scammer can send email that looks exactly like it came from your business — how fake-invoice and wire-fraud scams start. It burns your customers' trust, not just yours.

Is your data protected as it travels?

Whether the connection to your website and customer portals is properly secured and up to date. If it's not, information can be intercepted.

Is your website's front door configured right?

Whether the security headers browsers rely on are actually set — the settings that stop your page being framed, a session being hijacked, or a file being read as something it isn't.

A grade is a snapshot. We turn it into an ongoing set of eyes.

We watch it every month and tell you plainly what changed since last time.
We explain every finding in plain English — and exactly how to fix it, or who fixes it.
We answer the hard questions on your cyber-insurance and PCI questionnaires.
If you're regulated (tax or financial), we produce the security documentation your rule calls for, from what we actually find.

You get recurring checks on what's exposed, and one local technician who reads the results — without hiring one.

The day-to-day

What actually changes, once we're on.

Security is the part you don't see. This is the part you do.

If something is waiting on me, I'll tell you what it is and why.

What managed IT looks like on an ordinary Tuesday.

The morning something breaks

You call one number, and it's the same person who set up your machines. If I'm on another job, you'll hear that from me.

Someone starts Monday

Tell me ahead, and their email, laptop, and file access are set up before they start.

Someone leaves

Tell me ahead, and we turn off their email, files, and sign-ins.

The printer, the scanner, the machine that talks to your practice software

We deal with the vendor so nobody on your staff sits on hold.

Nobody has to be the office IT person

The one who's “good with computers” can send those calls to me.

What we did, in plain English

Ask what we did, what changed, or what needs a decision from you, and you get a plain-English answer. No dashboard to log into.

Written after looking

A template can't see your office. We look first, then write it down.

In a four-person tax office: a back-room PC that didn't come back on after a power outage, antivirus reporting to nobody, and a file server outside the backup. Nobody there had done anything wrong. Looking just wasn't anyone's job.

IRS Publication 5708 has a free template for a Written Information Security Plan (WISP), and it's a fine one. What it can't do is check whether what you wrote is true at your office. If you already wrote one from Pub 5708, send me what you wrote. I'll read it and tell you what's still open — and if it's fine, I'll say so. One free review per firm.

We write the WISP for your tax or financial firm, keep it current as your office changes, and monitor what it claims. And where there are gaps, it says so. If you carry cyber coverage, pull the application you signed and read what it says about your written security program. The plan we write should say the same thing — and be true.

Who you're working with

KS

Kendall Sorenson

Founder, Kovyr Technology · IT technician · Richfield, Utah

Kovyr is one technician, and the technician is me. I've spent years inside small offices like yours, and I look at what you actually run before I write anything down. If you're waiting, you'll hear it from me.

435-201-2646 · kendall@kovyr.com

Start with the scan. You keep the result either way.

The free scan is at the top of this page. When you want the written security plan, the WISP is $897.

Kovyr Technology — Managed IT & Cybersecurity, Central Utah