Why DocketBuddy

Built for solo attorneys, not adapted for them

General practice management tools are built for large firms and scaled down. DocketBuddy is built from scratch around the workflows that actually define each practice package. It is live today for bankruptcy, immigration, family law, Social Security disability, probate, estate planning, workers' comp, and personal injury. It's for solo practitioners who don't have a paralegal, an enterprise budget, or time to waste.

Attorney-controlled outputs
Encrypted client data
No automatic filing or sending
No credit card to start

The buying question

You are not choosing software for a large firm. You are buying back attorney time.

Why not a general case-management tool?

Those systems track matters. DocketBuddy carries the practice-specific routine work: intake, deadlines, forms, client follow-up, work product, and review checkpoints.

Why not templates and ChatGPT?

Templates still leave you re-keying facts. DocketBuddy keeps the client, documents, workflow, and generated output in one attorney-controlled record.

Why not hire more help?

For many solos, the repeatable tasks arrive before a full-time hire makes sense. The flat plan gives you workflow leverage without a payroll decision.

Case Stress Test

Stress-test every case before someone else does.

DocketBuddy can stay fast for repeatable matter work while adding 36 practice-aware stress tests for the moments that decide value, risk, proof, local practice, and post-submission action. The point is not to make attorneys browse another catalogue. It is to show what a trustee, agency, opposing counsel, adjuster, ALJ, court, or beneficiary may question, then turn that issue into a source-backed attorney review question, proof gap, and client request.

The commercial ladder stays simple: sell the $99 automation as the front door, then expand when the file reveals contradictions, missing proof, bad facts, deadline risk, eligibility questions, credibility issues, or scope creep. Practice management records the case. Case Stress Test finds the problems someone else may use as leverage and keeps the next action attorney-controlled.

36

Practice stress tests

10

Case-critical lenses

$99

Workflow entry price

Reviewer lens

What will someone else question?

Signals from intake, uploads, deadlines, notes, and active matters decide when a stress test appears, so attorneys see the issue instead of another practice-management menu.

Issue card

One problem, four next moves

Each issue shows why it surfaced, the source basis, the missing proof, and the attorney-safe next action, then lets the firm copy the client request or open the packet.

Attorney-safe handoff

Proof, client ask, and decision receipt stay together

Source gates, release posture, review questions, and attorney-only decisions are visible before anything becomes client-facing work.

Offer ladder

One simple entry offer, then a clear reason to expand.

1. Start

$99 intake, document, date, and source-fact automation.

2. Stress test

Right-time review that names what may be questioned, why it surfaced, what proof is missing, and what the attorney should decide next.

3. Expand

Paid diagnostic, scope upgrade, risk review, proof package, or follow-up loop.

Scrutiny trigger

One pattern keeps 36 stress tests from becoming 36 things to remember.

Case Stress Test should feel quiet until the matter needs it. Every prompt has to prove the right to appear, name the likely reviewer, explain the source posture, land where the attorney is already working, and preserve the client-release boundary before it suggests a value path.

1. Matter signal

The file has to earn the prompt

A stress test wakes only from a practice-specific fact pattern, uploaded source, deadline, attorney note, or queue signal tied to the matter in front of the firm.

2. Signal proof

Show why it appeared

The first screen names the matched signal, source basis, proof posture, likely reviewer, and reappear rule so the attorney can trust the interruption.

3. Surface slot

Put it where work is happening

Each prompt belongs in intake, upload review, a deadline strip, the matter panel, the attorney queue, or the dashboard queue instead of a separate catalogue.

4. Attorney gate

Keep judgment attorney-controlled

Client release, legal conclusions, strategy calls, fee changes, and outcome language stay blocked until the attorney approves the source and route.

5. Value path

Turn the moment into expansion

When the signal is real, the review can support a paid diagnostic, scope upgrade, proof package, risk review, local playbook, or post-submission control loop.

Just-in-time surfacing

The attorney should not hunt for scrutiny. The file should offer it.

Each review appears only from matched matter facts, source gaps, uploaded documents, timing cues, attorney notes, or queue priority. The first screen tells the firm who may question the issue, why it appeared, which candidates stayed quiet, what to do now, what value can be safely measured, and what must stay source-gated or attorney-only.

Intake capture

Catch scrutiny before the consult hardens

When intake answers reveal a risky fact, missing proof, or scope problem, the stress test turns it into an attorney review question instead of another vague note.

Document upload review

Find the contradiction at the source

Uploaded notices, records, statements, or financial documents wake the review only when they create a real conflict, proof gap, or reviewer question.

Deadline strip

Tie timing risk to case posture

RFE dates, hearing dates, SOL language, appeal windows, and objection periods surface as source-first scrutiny checks with attorney guardrails.

Matter panel

The open file explains what may be attacked

Inside a live matter, the first strip answers who may question the issue, why it surfaced, what proof is missing, and what must stay attorney-only.

Attorney review queue

Rank the problems that change the file

Urgent, high-value, local-practice, post-submission, and red-flag items are ranked by source posture, deadline urgency, and attorney next action.

Dashboard queue

Cross-matter scrutiny, not catalogue browsing

The dashboard shows active matters that deserve review now and stays quiet when there is no matched fact, source conflict, timing cue, or attorney-review reason.

Quiet-state rule: if the file has no matched signal, no source event, no timing cue, and no attorney-review reason, DocketBuddy stays with the ordinary 10-click workflow.

Case-critical review lenses

The package is complete when it sees the case the way a reviewer will.

Consistency

Facts conflict across intake, forms, uploads, prior filings, notes, or evidence.

Proof burden

Claims, elements, eligibility points, or requested benefits lack supporting proof.

Timeline integrity

Dates have gaps, overlaps, missing month/year precision, or impossible sequences.

Bad facts

Scrutiny-worthy facts are hidden, weakly explained, or unsupported.

Deadlines and posture

Response windows, objection periods, appeals, hearings, or filings create timing risk.

Eligibility thresholds

Gatekeeping facts need attorney confirmation before the matter proceeds.

Credibility

The story is vague, contradicted, over-polished, or unsupported by corroboration.

Evidence sufficiency

The packet is coherent but thin against what a reviewer would expect.

Scope and fee risk

The matter is becoming more complex than quoted or needs a paid diagnostic.

Theory of case

The attorney sees the cleanest story, what supports it, what undermines it, and what remains unproven.

These support paid diagnostics, scope upgrades, local playbooks, risk reviews, proof packages, post-submission control, and client request packets without turning the product into a menu attorneys have to remember.

Case selection

Is this case worth taking?

Screen the facts that drive margin, difficulty, and fit before the matter becomes another open file.

Output: Attorney review memo

Revenue expansion

Is there more value in the file?

Surface adjacent claims, higher-value tracks, or premium work that routine intake can miss.

Output: Value-expansion checklist

Risk detection

What could blow this up?

Flag bad facts, missing disclosures, deadline pressure, and evidence problems while there is still time to act.

Output: Red-flag queue

Evidence sufficiency

Do we have enough proof?

Map each claim or agency request to the proof on hand, the gap, and the next document request.

Output: Evidence matrix

Local practice

What does this venue expect?

Capture trustee, court, judge, board, or field-office preferences as attorney-owned workflow guidance.

Output: Local-practice note

Post-submission

What happens after filing?

Keep the case alive after the package goes out: objections, RFEs, follow-ups, hearings, liens, and modifications.

Output: After-filing action plan

Expansion path

Core stays simple. The 36 stress tests become the premium layer when the file starts changing firm economics.

1Immigration
Attorney-review ready

I-864 financial evidence RFE review

Upload the RFE, get the deadline, itemized requests, sponsor flags, client request packet, and attorney-review draft.

Stress-test output

Deadline · Itemized USCIS requests · Sponsor review flags

Common, deadline-driven, and easy to explain to solo family-based immigration firms.

6Estate planning
Attorney-review ready

Trust funding and asset alignment review

Show which assets still need retitling, beneficiary review, or funding follow-up.

Stress-test output

Funding task list · Beneficiary mismatch flags · Retitling checklist

Turns simple planning work into post-signing implementation revenue.

8Probate
Attorney-review ready

Probate accounting exception resolver

Find accounting defects, missing receipts, creditor issues, beneficiary objections, and closing-package gaps before court review.

Stress-test output

Exception list · Receipt gap table · Creditor claim review

Clear pain for probate solos; court/accounting mistakes create expensive rework.

10SSDI
Attorney-review ready

Medical records to hearing theory

Convert records into RFC support, listing gaps, bad facts, and hearing brief outline.

Stress-test output

RFC support table · Listing gap report · Bad-fact list

Capped-fee practices win by reducing prep time and finding proof gaps early.

12Workers comp
Attorney-review ready

AWW and settlement prep review

Find wage-rate issues and assemble settlement prep in state-specific workflows.

Stress-test output

AWW input checklist · Settlement prep memo · Lien checklist

A math-and-settlement wedge that can change case value quickly.

13Personal injury
Attorney-review ready

Policy-limits demand and treatment-gap review

Find demand-package upside, causation gaps, preexisting-condition problems, liens, and treatment patterns before sending the demand.

Stress-test output

Demand outline · Treatment-gap flags · Lien review list

Demand packages are competitive, but solo-priced risk review plus package prep is a sharper wedge.

15Family law
Attorney-review ready

Financial disclosure deficiency matrix

Turn income, assets, debts, account statements, tax records, and support facts into a missing-document and affidavit-readiness matrix.

Stress-test output

Disclosure gap matrix · Affidavit readiness score · Client request packet

A practical intake-to-disclosure wedge for family-law solos.

19Bankruptcy
Attorney-review ready

Student-loan AP candidate screen

Find bankruptcy clients who may justify student-loan discharge review and produce hardship-factor evidence gaps.

Stress-test output

AP candidate memo · Hardship-factor map · Evidence gaps

Turns an ordinary bankruptcy into a high-value add-on when facts support attorney review.

27Firm economics
Attorney-review ready

Fee and scope control packet

Spot matters likely to become underpriced, over-scoped, high-conflict, or poor-fit before the engagement letter locks the firm in.

Stress-test output

Fee-risk memo · Scope limit notes · Engagement checklist

Speaks directly to solo margin protection without adding another practice-specific workbench.

30Firm economics
Attorney-review ready

Source-backed proof binder

Tie every draft, checklist, and attorney-review packet back to the source document, fact, or client answer that supports it.

Stress-test output

Source table · Proof map · Document citations

Trust layer for serious firms: not just AI output, but source-backed work product the attorney can verify.

31Firm economics
Attorney-review ready

Upgrade and add-on trigger packet

Find the paid legal work hiding inside a routine matter and turn it into an attorney-reviewed quote path.

Stress-test output

Upgrade trigger · Quote suggestion · Client explanation

Directly connects Case Stress Test to attorney revenue without asking the buyer to understand the whole architecture.

33Firm economics
Attorney-review ready

Matter health and stuck-case rescue queue

Surface files that are stale, blocked by client response, drifting past internal targets, or missing the next action after filing.

Stress-test output

Stale-matter queue · Next-best action · Client follow-up task

Easy dashboard value for every practice: fewer stale files and fewer surprise client calls.

Compare by practice

The strongest comparison is the workflow your clients actually create

Jump to the practice you sell today, then start a free workspace or open the live demo from that lane.

See pricing

Bankruptcy

Prospect roadmaps, intake, documents, means test prep, PACER events, calendar, and billing.

Immigration

Intake, forms, USCIS/EOIR status, RFE response work, visa bulletin tracking, and client updates.

Family Law

Financial intake, support calculations, asset division, parenting/custody workflows, and draft agreements.

Social Security Disability

Evidence, appeal deadlines, five-step evaluation, RFC/grid analysis, and ALJ hearing preparation.

Probate

Estate + Probate package

Administration timelines, creditor deadlines, asset inventory, beneficiaries, accounting, and distributions.

Probate and Estate Planning are included together in one subscription.

Estate Planning

Estate + Probate package

Planning intake, asset capture, document drafts, execution rules, signing checklist, and follow-up.

Estate Planning and Probate are included together in one subscription.

Workers' Comp

WC + PI package

Notice deadlines, wage/medical proof, carrier/state-board workflow, hearings, and settlement support.

Workers' Comp and Personal Injury are included together in one subscription.

Personal Injury

WC + PI package

SOL tracking, treatment timeline, medical records, liens, demand work, adjuster log, and disbursement.

Personal Injury and Workers' Comp are included together in one subscription.

Subscription packages

Some product pages share one paid package

Estate + Probate

Estate Planning and Probate have separate landing pages because the workflows are different, but one Estate + Probate subscription unlocks both.

ProbateEstate Planning

Workers' Comp + Personal Injury

Workers' Comp and Personal Injury have separate product pages, but one WC + PI subscription unlocks both injury workflows.

Workers' CompPersonal Injury

Sample work product

See the kind of client-facing analysis DocketBuddy produces

Tangible output matters. Review a bankruptcy sample roadmap/report before you open a workspace.

Bankruptcy

Keep your filing tool, replace the stack around it

You keep your filing tool either way. The question is everything you bolt on around it, and right now that's a separate tool for each job, none of which talk to each other.

DocketBuddy
NextChapter
Petition prep & e-filing
Your filing tool, unchanged. DocketBuddy adds one-click packet prep (Form 101, Schedules A/B/C/D/E/F/I/J, SOFA, 106 Sum/Dec, B108, 122A-1, creditor matrix). Attorney reviews and files.
Client intake
Included
Prospect intake (white-label)
Firm-branded page; plain-language summary in seconds
Client portal
Included
Court-notice & docket monitoring (PACER)
Included for bankruptcy
Deadline & hearing tracking
Included
Client messaging (email / text)
Included
Supported document & docket analysis
Included where supported
Bankruptcy Case Stress Test
Trustee Review: student-loan AP candidate screen live; transfer/exemption/non-dischargeability review live; Chapter 13 post-filing queue scaffolded
Conflict check with audit log
Fuzzy-matches existing clients + stored opposing parties, both directions; every run written to the activity log
Search & navigation (⌘K / Ctrl+K)
Jump to any client, form, or setting from anywhere in the app
Firm website (/firm/{your-slug})
Firm website: $249 one-time launch, hosting included.
Consultation booking
Native booking with Google Calendar sync, or paste your Calendly link
Starting price (as of July 2026)
Core starts at $99/mo per practice package · 20% off annual
see current pricing

Competitor pricing as of July 2026 where verified. NextChapter and Jubilee list pricing behind sales portals (see current pricing).

Immigration

Status workflows and H-1B analysis, not just forms

Forms-only tools cover intake and filing. DocketBuddy organizes USCIS/EOIR status workflows where credentials are connected, analyzes H-1B specialty occupation with O*NET citations, and automates the routine work that eats your week.

DocketBuddy
Docketwise
USCIS forms library
20+ USCIS and EOIR forms with field-level mapping
100+ forms
USCIS status workflows
Available where credentials/API are connected
Included
RFE notice parsing + countdown timer
Included
Not included
RFE and NOID response drafts (AI-drafted, attorney review)
Included
Immigration Case Stress Test
Agency Review: I-864 RFE workbench live; H-1B risk packets live; O-1 / EB-1 / NIW evidence matrix scaffolded; post-filing queue live
Priority date / visa bulletin tracking
Included + CSPA age-out calculator
H-1B specialty occupation analysis
O*NET + CFR citations
Not included
H-1B PAF compliance tracking
Included per client
Not included
VAWA self-petition support
Included with confidentiality handling
Partial
Asylum + removal defense
Included. EOIR-42A/42B, I-589
Partial
EOIR court tracking + calendar events
EOIR court surfaces + Google event creation where connected
Not included
IOLTA trust accounting
Included
Not included
Conflict check with audit log
Fuzzy-matches existing clients + stored opposing parties, both directions; every run written to the activity log
Search & navigation (⌘K / Ctrl+K)
Jump to any client, form, or setting from anywhere in the app
Firm website (/firm/{your-slug})
Firm website: $249 one-time launch, hosting included.
Starting price (as of July 2026)
Core starts at $99/mo per practice package · 20% off annual
$69–$109/user/mo

Competitor pricing as of July 2026. USCIS monitoring reliability noted in verified user reviews on Capterra and G2.

Family Law

Calculates support, drafts the agreements, flags DV on every intake

General practice suites provide case management but not the calculation and drafting tools family law requires. DocketBuddy focuses the repeatable family-law workflow: intake, financials, support calculations, draft agreements, deadlines, and client updates.

DocketBuddy
Clio
State-specific child support calculator
Alimony / spousal support estimator
Asset division + marital/separate classification
Financial affidavit + supported document extraction
Financial disclosure package (state forms + summary)
One action: mapped disclosure forms (GA, FL, NY, CA) filled from intake + affidavit data, honest availability labels elsewhere, readiness summary included
Financial analysis and red-flag review
Supported workflows
Family-law Case Stress Test
Opposing Counsel Review: financial disclosure matrix live; high-asset marital estate command center scaffolded; DV / fee-risk screen live; post-judgment queue planned
Settlement offer tracking
Attorney-review MSA draft workflow
AI-drafted, state-specific terminology, attorney review
Attorney-review parenting plan draft
AI-drafted, attorney review
DV intake flagging
Custody schedule builder
QDRO intake, draft support + referral
Attorney-review draft + referral
Court forms across 13 states (47 total)
GA, FL, TX, NY, CA, NC, VA, IL, WA, NJ, PA, OH, MI
IOLTA trust accounting
Conflict check with audit log
Fuzzy-matches existing clients + stored opposing parties, both directions; every run written to the activity log
Search & navigation (⌘K / Ctrl+K)
Jump to any client, form, or setting from anywhere in the app
Firm website (/firm/{your-slug})
Firm website: $249 one-time launch, hosting included.
Starting price (as of July 2026)
Core starts at $99/mo per practice package · 20% off annual
$49–$149/user/mo

Smokeball FamilyPro financial tools available as a paid add-on. Competitor pricing as of July 2026.

Social Security Disability

Built around SSA's sequential evaluation, RFC through ALJ hearing

Enterprise litigation platforms track deadlines but aren't built around SSA's administrative process. DocketBuddy organizes SSDI intake, DLI, SGA thresholds, sequential evaluation, RFC, medical evidence, MSS requests, appeal deadlines, fees, and ALJ hearing prep.

DocketBuddy
Filevine
SSA five-stage pipeline tracking
Partial
Sequential evaluation (5-step) tracker
RFC documentation organizer
SSDI Case Stress Test
ALJ / Hearing Review: medical records to RFC/hearing theory live; onset / SGA / DLI case-selection screen scaffolded
ALJ hearing prep checklist
ALJ pre-hearing brief
AI-drafted, attorney review
Hearing brief package (ALJ / Appeals Council)
AI-drafted, attorney review
VE hypothetical builder
VE cross-examination outline
AI-drafted, attorney review
Appeal deadline workflow + reminders
Attorney-verified deadlines
Manual
IOLTA trust accounting
Add-on
Flat-fee disability billing
Conflict check with audit log
Fuzzy-matches existing clients + stored opposing parties, both directions; every run written to the activity log
Search & navigation (⌘K / Ctrl+K)
Jump to any client, form, or setting from anywhere in the app
Firm website (/firm/{your-slug})
Firm website: $249 one-time launch, hosting included.
Starting price (as of July 2026)
Core starts at $99/mo per practice package · 20% off annual
Custom / quote-based (enterprise)

Competitor features and pricing based on publicly available information as of July 2026.

Probate

Asset tracking, beneficiaries, accounting, and court deadlines for probate administration

Document assembly tools build documents but skip administration. General practice suites track tasks but not beneficiaries, inventories, distributions, or probate-specific deadline workflows. DocketBuddy treats probate as its own workflow.

DocketBuddy
WealthCounsel
Estate intake & case details
Asset inventory & distribution calc
Court deadline workflows
Sourced + manual attorney review
Beneficiary management
Attorney-review probate drafts
AI-drafted, attorney review
Court accounting package (AI-drafted, attorney review)
Final Accounting + Creditor Notice generated as one court-ready closing set with a readiness plan
Probate Case Stress Test
Court / Beneficiary Objection Review: accounting exception resolver live; fiduciary conflict and beneficiary dispute packet scaffolded; closing readiness live
Client portal
SMS reminders to clients
Unlimited matters on self-serve plan
Plan-dependent
Conflict check with audit log
Fuzzy-matches existing clients + stored opposing parties, both directions; every run written to the activity log
Search & navigation (⌘K / Ctrl+K)
Jump to any client, form, or setting from anywhere in the app
Firm website (/firm/{your-slug})
Firm website: $249 one-time launch, hosting included.

Competitor pricing and features as of July 2026. Verify independently before purchasing.

Estate Planning

Planning intake, documents, signing workflow, and follow-up (not probate administration)

Estate planning buyers need intake, asset capture, wills, trusts, POA, healthcare directives, execution rules, signing checklists, and funding reminders. DocketBuddy separates that proactive workflow from probate.

DocketBuddy
WealthCounsel
Planning intake & asset capture
Last Will and Testament
AI-drafted, attorney review
Revocable Living Trust + Pour-Over Will
AI-drafted, attorney review
Durable Financial POA
AI-drafted, attorney review
Healthcare Directive & Healthcare POA
AI-drafted, attorney review
Annual plan review package (AI-drafted, attorney review)
Review letter with life-changes checklist + refreshed drafts from the existing plan set
Signing workflow + funding reminders
Estate-planning Case Stress Test
Funding / Beneficiary Misalignment Review: trust funding and asset alignment scaffolded; Medicaid / long-term-care screen planned; annual review expansion scaffolded
Client portal
Conflict check with audit log
Fuzzy-matches existing clients + stored opposing parties, both directions; every run written to the activity log
Search & navigation (⌘K / Ctrl+K)
Jump to any client, form, or setting from anywhere in the app
Firm website (/firm/{your-slug})
Firm website: $249 one-time launch, hosting included.

Estate planning and probate share back-office tooling; buyer-facing workflows are separated. AI-drafted planning documents are attorney work-product and require attorney review before execution.

Workers' Comp

Notice deadlines, wage proof, medical records, hearings, and settlement support

Workers comp is not a PI demand-letter workflow. DocketBuddy treats comp as a deadline, proof, carrier, hearing, and settlement process.

DocketBuddy
Filevine
Sourced SOL / notice workflow by state
Attorney-review workflow
Not included
Medical record tracker
Not included
Adjuster communication log
Not included
Demand and counteroffer tracking
AI-drafted demand outline, attorney review
Not included
AI demand package (AI-drafted, attorney review)
Damages, medicals, liens, timeline pulled from panels
Injury and comp Case Stress Test
Adjuster Review: policy-limits demand and treatment-gap review live; SOL/lien/disbursement queue live; AWW and settlement prep scaffolded
Wage loss calculator
Not included
Client portal with document upload
Not included
IOLTA trust accounting
Not included
Unlimited matters on self-serve plan
Plan-dependent
Conflict check with audit log
Fuzzy-matches existing clients + stored opposing parties, both directions; every run written to the activity log
Search & navigation (⌘K / Ctrl+K)
Jump to any client, form, or setting from anywhere in the app
Firm website (/firm/{your-slug})
Firm website: $249 one-time launch, hosting included.
Starting price (as of July 2026)
Core starts at $99/mo per practice package · 20% off annual
Custom / quote-based (enterprise)

Workers comp and personal injury currently share some internal tooling, but buyer-facing workflows and pages are separated.

Personal Injury

SOL tracking, adjuster logs, and demand drafting

General practice tools don't track SOL deadlines by state, log adjuster communications, organize medical records, manage liens, or draft demand letter outlines. DocketBuddy treats PI as its own workflow.

DocketBuddy
Filevine
Sourced SOL / notice workflow by state
Attorney-review workflow
Not included
Medical record tracker
Not included
Adjuster communication log
Not included
Demand and counteroffer tracking
AI-drafted demand outline, attorney review
Not included
AI demand package (AI-drafted, attorney review)
Damages, medicals, liens, timeline pulled from panels
Injury and comp Case Stress Test
Adjuster Review: policy-limits demand and treatment-gap review live; SOL/lien/disbursement queue live; AWW and settlement prep scaffolded
Wage loss calculator
Not included
Client portal with document upload
Not included
IOLTA trust accounting
Not included
Unlimited matters on self-serve plan
Plan-dependent
Conflict check with audit log
Fuzzy-matches existing clients + stored opposing parties, both directions; every run written to the activity log
Search & navigation (⌘K / Ctrl+K)
Jump to any client, form, or setting from anywhere in the app
Firm website (/firm/{your-slug})
Firm website: $249 one-time launch, hosting included.
Starting price (as of July 2026)
Core starts at $99/mo per practice package · 20% off annual
Custom / quote-based (enterprise)

Competitor features and pricing based on publicly available information as of July 2026.

The right tool for your practice package

Each practice gets purpose-built workflows, not a general tool adapted for it.

Core starts at $99/mo per practice package

Client data encrypted at rest and in transit on security-reviewed cloud infrastructure. See our security practices →