See Your HIPAA Online Tracking Risk in Minutes
Get a free HIPAA OTT assessment of your website to identify third-party tracking technologies and scripts, see where PHI is collected or transmitted, review vendors that may require a BAA, and uncover potential security risks.
- No signup required
- No installation
- Results in about 60 seconds
Trusted by teams at
What Your HIPAA OTT Assessment Reveals
The assessment analyzes only what’s publicly available on your website and provides privacy, compliance, and security teams with a clear view of the technologies, data flows, vendors, and findings that may be increasing HIPAA compliance risk.
-
HIPAA Online Tracking Technologies
View all analytics, advertising pixels, session replay, cookies, and other third-party tracking technologies and scripts operating on your site.
-
PHI & Data Exposure
See where personal and health information is collected or transmitted, and which technologies and jurisdictions have access to it.
-
Vendors & BAA Coverage
Inventory vendors that require a BAA and where BAA status needs further verification.
-
Security & Remediation Findings
Identify potential malicious scripts, suspicious activity, data exfiltration paths, and prioritized recommendations for what to review next.
OTT Risk Posture
High6 critical and 11 high findings.
Meta Pixel
Meta Platforms
Google Analytics 4
Alphabet
TikTok Pixel
TikTok Inc.
Google Ads Remarketing
Alphabet
Hotjar Session Replay
Hotjar Ltd.
HHS-1
Tracking technology inventory
Risk FoundHHS-8
Marketing authorization
Risk FoundHHS-7
Minimum necessary
Action RequiredHHS-9
BAA determination
Verify InternallyPHI sent to advertising vendors with no BAA on file
Session replay captures form field input site-wide
Cookies observed without the Secure attribute
BAA status unconfirmed for 19 vendors
As Your Website Changes, So Does Your HIPAA Compliance Exposure
Analytics tools, advertising pixels, chat widgets, embedded content, and third-party scripts are added and updated all the time. That makes it difficult for privacy, compliance, and security teams to maintain visibility into the technologies operating, the data being collected or transmitted, and the places additional review may be needed.
The HIPAA OTT Assessment gives you an evidence-based view of your current posture so your team can focus on what is exposing your organization to compliance risk.
Get Your HIPAA OTT Assessment in Three Steps
Enter your URL
Provide your public website URL.
We scan your digital experience
Feroot analyzes publicly accessible pages for third-party scripts, online tracking technologies, data collection, vendor activity, and security signals.
Review your assessment
Get a prioritized report with HIPAA OTT findings and recommended next steps.
Need More Than a Point-in-Time Assessment?
Your free assessment shows what’s happening today. Feroot provides continuous visibility and control as your websites, mobile apps, vendors, and scripts change over time.
24/7 continuous AI monitoring
Monitor third-party technologies and changes across all websites and mobile apps.
Automated script blocking
Automatically block malicious scripts and scripts from vendors with no BAA.
Cookie consent enforcement
Ensure scripts and tracking technologies don’t run or collect data after opt-out or before consent.
Payment & data security
Protect PHI and payment data from skimming, formjacking, exfiltration, and more.
Start Your HIPAA OTT Assessment Now
Enter your website url to surface unauthorized tracking, PHI exposure, and other potential HIPAA OTT compliance risks.
Prefer to see how it works live? Schedule a Demo
