Fewer than 5,000 consumers
Essentials
$2,500a year
You name your own Qualified Individual, and we coach them.
For auto dealers, tax preparers, and lenders
FTC Safeguards Rule
compliance, done for you
and kept current.
Did a cyber insurance renewal or a lender just ask for your written security program? We build it, test your network in-house, and can serve as your Qualified Individual. Independent of your IT company, at a fixed price from $2,500 a year.
Fixed price, in writing
From $2,500 a year. Testing included on Complete.
Findings within eight weeks
Your fix list, written program, and plans.
Qualified Individual from $500 a month
We hold the role the rule requires.
Industries we serve
Auto Dealers
Tax Preparers
Mortgage Lenders
Investment Advisers
Finance Companies
Settlement & Money Transfer
Also: boat and RV dealers, title agencies, insurance agencies, SEC-registered advisers, schools, and any business with Massachusetts or Connecticut customers.
Not sure where you fit? Check which safeguards apply to you
From assessment to action
A Clear Path to Compliance.
Whether you're facing an insurance renewal or building your first formal program, we help you take the next right step.
- DiscoverKnow where you standTake a free self-assessment to find which safeguards need your attention.
- BuildGet the right programReceive a prioritized assessment, written guidance, and a practical fix list.
- MaintainKeep moving forwardChoose clearly scoped annual support that fits your business and its obligations.
What you receive
Real deliverables. Clear next steps.
Every engagement delivers a findings report in plain English, a fix list ranked by risk, and a written security program built around how your business runs.
See how it works-
01 / EXECUTIVE SUMMARY
A summary your owner can read
What's in place, what's missing, and the few things to fix first.
-
02 / RISK FINDINGS
Every finding explained
The risk, the part of the rule it ties to, the fix, the cost, and who owns it.
-
03 / REMEDIATION ROADMAP
A fix list your IT provider can act on
Sequenced by risk, with owners, deadlines, and estimated costs.
Excerpts from a sample report for a fictional dealership. Read the full 12-page sample (PDF)
Simple pricing
Know the scope and the price up front.
Your size sets the plan. At 5,000 or more consumers, the rule adds a yearly penetration test, an incident response plan, and an annual report.
Compare plansFewer than 5,000 consumers
Essentials + Qualified Individual
$6,000a year
No one to name? We hold the role for you.
5,000 or more consumers
Complete
$13,000a year
Adds the yearly penetration test, done in-house, an incident response plan, and the annual report.
Pay yearly or monthly. Every plan comes with our first-report guarantee. Not ready for a full year? Start with a $750 gap review, credited toward your plan.
The Leloup & Co. approach
Independent advice. Clear commitments.
-
Independent
We don't sell the products we recommend, and we take no vendor commissions. The recommendation is the whole product.
-
Fixed price
One annual price, in writing before any work starts. Testing included. No per-device fees.
-
First-report guarantee
A clear, ranked fix list in your first report. If it falls short, we revise it, and if it still does, we refund your first payment.
How the guarantee works -
Financial-industry experience
Security risk management at a regulated financial institution.
- October 30, 2026 Does the FTC Safeguards Rule require a penetration test? Yes, at 5,000 or more consumers without continuous monitoring: a test every year and scans every six months. What counts as a test, and how to scope it.
- October 28, 2026 The scams aimed at tax preparers, not taxpayers One practice holds data on hundreds of clients, so criminals target tax preparers. The four scams the IRS is warning about in 2026, and how to stop them.
- October 28, 2026 Template or program? Five tests for your written security plan A template is a fine start. A program counts only when it describes your business and matches what you do. Five tests, and why the wrong plan can hurt you.
You'll talk with Alex Leloup, who does the work.
Not sure the rule applies to you? Ask.
A free 20-minute call. We'll tell you where you stand and what to fix first. No pitch.