All services
Service
Medical Device Security
When a medical device is compromised, the impact can reach patient care and the continuity of essential health services. We test connected medical devices the way an attacker would, while respecting the safety constraints that come with clinical technology.
Discuss this serviceWhat we cover
- Device hardware, debug interfaces and firmware
- Wireless and wired interfaces (BLE, Wi-Fi, USB, proprietary links)
- Companion mobile apps, cloud services and update mechanisms
- Integration with hospital networks and clinical systems (e.g. HL7, DICOM)
How we test
- 01Threat modelling focused on patient safety, data integrity and availability
- 02Hands-on testing of the full device ecosystem, from board to backend
- 03Safety-aware procedures agreed in advance, especially on clinical or production equipment
- 04Findings framed for your risk management and regulatory documentation
What you receive
- Technical findings with evidence, risk rating and reproduction steps
- Impact analysis covering patient safety, data protection and service continuity
- Remediation guidance for engineering teams
- Test documentation that can support EU MDR / IVDR cybersecurity evidence (MDCG 2019-16, IEC 81001-5-1)
- Retest of fixed issues
A good fit for
Medical device manufacturers preparing products for market or post-market updates, and healthcare providers assessing the devices they procure and connect.
Let's talk about what you need to protect.
Tell us a little about your environment and goals. We'll reply with questions, a suggested scope, or an honest note if we're not the right fit.