IT + security · businesses and nonprofits, 10 to 200 people
Your IT, run to certification-level security. Without the certification bill.
Help desk, computers, accounts and email, run to CLEAR 2026:55, our security standard. Checked every day, gaps closed, proof ready when an insurer, funder, customer or auditor asks.
Check your company for security vulnerabilities
Free, about a minute, no demo call. We fix the two worst things we find, free.
Every change approved by a person on our team
22 of 23
Oakland nonprofits we checked had at least one setting left open
19 of 23
had email anyone could fake in their name
5.0
from 123 Google reviews
1 bill
IT and security together, no surprise invoices
Three companies, three bills, and the gaps fall between them.
Most organizations your size pay an IT company, then a security firm when an insurer or a big customer asks hard questions, then audit prep if they ever want a certificate. Nobody owns the whole picture.
The IT company
Fixes what breaks. Nobody checks the settings that don't break until the day they do.
The compliance tool
Hands you a checklist and a dashboard. The work is still yours.
The security firm
A report once a year, then gone. The findings sit in a PDF.
You
Three invoices, and a former employee who can still read your email.
One service. Everything the other three leave out.
We built our own software to do the daily checking, so security is how we run your IT, not an extra project you pay someone else for.
* Except the controls for writing software, which only apply if you build software.
CLEAR 2026:55 Our security standard.
55 controls covering both halves of what auditors check: the settings, and the program around them. Every SOC 2 and ISO 27001 requirement maps to one of them, so you can show an insurer, a customer, an investor or an auditor exactly where you stand.
Who controls your domain, your DNS records, your website's secure connection
Admin access, fake email blocked, hidden forwarding rules
Your shared drives, and who can open what
Your office network, Wi-Fi, web filtering, safe remote access
Password manager, strong passwords, two-step sign-in for everyone
Encryption, device management, threat protection, wiping old devices
Alerts, logs kept, updates on schedule, known holes patched
Locked equipment, cameras where they matter, fire and power, visitors
A real backup, tested restores, a plan for getting back to work
Training, practice phishing, offboarding, background checks
How staff report it, the response plan, written policies, roles
Every app you pay for, who has access, how safe your vendors are
The rules that apply to you, personal data, breach notices
Two-person approval for payments, a yearly review you sign
Your checklist, by area, in your portal
The guide walks your team through each step in plain English
CLEAR 2026:55 is our own standard. Only an audit firm can issue a SOC 2 report, and only an accredited body can certify you for ISO 27001. What you get from us is everything those audits check, with the evidence behind each item. If you decide to get certified, your auditor starts from our record instead of a blank page.
Not just software
Software checks.
A person approves.
"Small organizations deserve the security big companies pay auditors for. We build it into how we run your IT."
Matt Moglia, owner, CLEAR Technology
And everything you'd expect from an IT company. The security is on top of it, not instead of it.
One place for every request
Email, phone or the portal. It all lands in one tracked list, so nothing gets lost in someone's inbox.
People who know your setup
The same small team every time. No explaining your whole setup again.
Help when it's urgent
When something critical breaks after hours, you can reach us, and we stay on it until you're back up.
01
Check
Type your website address. In about a minute you see what anyone on the internet can see about you.
02
Fix two, free
We fix the two biggest problems the check found, this week. No contract.
03
Reach the standard
We take over your IT and close every gap in CLEAR 2026:55, one by one, in your portal.
04
Stay there
Our software checks every day. When a gap comes back, we close it and record it.
5.0 from 123 Google reviews. Read every one, unfiltered.
Start with two free fixes. I'd rather show you than tell you.
What day and time over the next couple of weeks works to share a coffee on Zoom and go over your setup together?
Check your company now
The two worst problems fixed this week
Up to two hours of work, about $440 at our regular rate, free. No contract.
No monthly fee for your first three months
If you'd like us to keep going after the fixes, your monthly fee is waived for your first three months.
Every control decided within 90 days, or your fee stays waived
Within 90 days of starting, every control in your plan is in place, or marked not applicable or risk accepted with your signature. Otherwise your monthly fee stays waived until it is.
3 new organizations a month
We bring on 3 new organizations a month, so every start gets done right.
After the first three months it's month to month, with 30 days' notice to stop.
Straight answers. Ask us anything else on the call.
It's our own standard, and we say so plainly. Only an audit firm can issue a SOC 2 report, and only an accredited body can certify you for ISO 27001. What CLEAR 2026:55 gives you is everything those audits check, with the evidence behind each item, so you can answer an insurer, customer or funder questionnaire with confidence. If you later go for SOC 2 or ISO, your auditor starts from our record.