Cybersecurity Services in San Diego
Microsoft 365, cloud and network audits plus HIPAA and SOC 2 readiness for San Diego healthcare, life sciences and technology companies.
Cloud and identity audits for fast-growing teams
Microsoft 365, Entra ID and Azure reviews at a fixed $3,500 each, with findings your engineers can act on.
Answer security questionnaires with evidence
SOC 2, HIPAA and customer security reviews: we help you prove the controls behind each answer.
Security audits for San Diego healthcare, life sciences and tech companies
San Diego has a strong base of healthcare providers, life sciences and biotech companies, software firms and professional services, many of them growing fast and answering customer security questionnaires.
We review the systems those questionnaires ask about: Microsoft 365 and Entra ID, cloud access, endpoints, backups and the network. Each finding comes with the evidence you need to answer customers, auditors and insurers.
We plan on-site days in San Diego County for kickoffs and findings reviews, and run most testing remotely with read-only access.
Cybersecurity services for San Diego businesses
Fixed-price audits and written scopes. See all prices on the pricing page.
Microsoft 365 security audit
200 checks across identity, admin access, email, SharePoint and Teams, data protection, logging and devices.
Fixed price: $3,500See the service →
Firewall security audit
Rules, open ports, VPN, logging and firmware on Palo Alto, Cisco, Meraki and other firewalls.
Fixed price: $3,500See the service →
Network, router and switch audit
Management access, segmentation, end-of-life devices, logging and configuration backups.
Fixed price: $3,500See the service →
Vulnerability assessment
Internal and external scanning, false positives removed, findings ranked by real exploitability.
Starting at $3,500See the service →
Compliance readiness
HIPAA, PCI DSS, SOC 2, NIST CSF, ISO 27001, CCPA and IRS WISP gap assessments with the evidence auditors ask for.
Starting at $3,500See the service →
Virtual CISO
Security strategy, risk register, policies and board reporting without a full-time executive hire.
Starting at $3,500 per monthSee the service →
San Diego organizations we commonly help
Healthcare, technology, engineering and financial firms each face different requirements.
Healthcare and medical practices
HIPAA safeguards, patient data, backups and email security.
Engineering and technology
Intellectual property, customer security questionnaires and cloud access.
CPA, tax and financial firms
IRS WISP, FTC Safeguards Rule and client portal security.
MSP and IT provider clients
An independent second opinion on environments your provider manages.
Planned on-site days, remote testing
We schedule on-site days for kickoff meetings, office network walkthroughs and findings reviews in San Diego County.
Cloud, Microsoft 365 and internal scanning run remotely with read-only access, so the engagement does not depend on travel.
Where we work in San Diego County
On-site visits across San Diego County, including:
How a San Diego engagement works
Consultation
A short call to understand your environment, deadlines and what prompted the review.
Scope and quote
A written scope and fixed quote before any work starts.
Read-only review
We review settings and evidence with read-only access, on-site or remote.
Report
Executive summary, technical findings and a risk register ranked by severity.
Roadmap
A practical remediation plan your IT team or provider can act on.
Guided by Ali Hassani, CISO
Every review is led by Ali Hassani, a CISO with more than 25 years of IT and cybersecurity experience, and written so executives, engineers and IT teams can act on it.
- Certified CISO (C|CISO) and CISSP
- 25+ years in IT, networking and cybersecurity
- Microsoft and Cisco certifications, including CCNP, CCNA, MCSE, MCITP and MCSA Security
- Headquarters in Irvine; on-site across Orange County, Los Angeles and Southern California; remote nationwide
Questions about cybersecurity services in San Diego
Do you work on-site in San Diego?
Yes. We schedule on-site days in San Diego County for kickoffs and findings reviews, and run most testing remotely.
Can you help us prepare for SOC 2?
Yes. We run a readiness assessment against the SOC 2 criteria, list the gaps and help you collect evidence before your auditor arrives. See SOC 2 compliance services.
Can you help with customer security questionnaires?
Yes. We review the controls behind each answer and help you collect evidence, so your answers hold up when customers ask for proof.
How much does a cybersecurity audit cost?
The Microsoft 365, Entra ID, Azure, Intune, firewall, Cisco network, Cisco Meraki, Palo Alto, Active Directory, internal and AI security audits are $3,500 fixed. Vulnerability assessments, compliance readiness and vCISO engagements start at $3,500. See the pricing page.
Do you work with healthcare providers?
Yes. We assess HIPAA safeguards, document the risk analysis and give you a remediation plan you can show an auditor.
Do you also fix the findings?
We stay independent and do not implement our own findings. IT Perfection or your current IT provider can work from the remediation roadmap.
Related services and pages
Need the gaps fixed, not just found?
OC Security Audit stays independent and read-only. If you want hands-on administration, IT Perfection can implement the fixes and support ongoing operations. Your current IT provider can also work from the same roadmap.
Schedule a cybersecurity consultation in San Diego
Tell us about your team, your cloud and your deadlines. We will suggest the right first audit and send a written scope.
Independent and read-only. Headquarters in Irvine, California; on-site across San Diego County and Southern California; remote nationwide.