Citizen-facing services reviewed, fixed and documented for council.
The Web Application Security Review + Fix Sprint scoped to citizen-facing portals, forms and third-party integrations, mapped to MFIPPA and PHIPA obligations and to O. Reg. 51/26 expectations, with a council- or board-ready summary and procurement-friendly documentation sized under invitational thresholds.
Built for: Municipalities, hospitals, colleges, school boards and agencies in Ontario
Ask about this service Start with the free snapshotPrices in CAD before tax. Scope confirmed in writing before any work starts.
| Tier | Starts within | Price | Notes |
|---|---|---|---|
| Standard | 10 business days | List | Starts within 10 business days. |
| Priority | 5 business days | +15% | Starts within 5 business days. |
Maturity assessment due July 1, 2027; municipal privacy-impact and breach obligations from January 1, 2027; insurer requirements; a group-purchasing re-tender.
Triage clusters the raw findings, Warden drafts WAF exceptions with expiry and rollback, Scribe drafts the report and attestation from validated evidence. A practitioner validates every finding, approves every change and signs every letter. How the human gates work