CyberMDX Healthcare Security Suite

Additional Info

CompanyCyberMDX
Websitehttps://www.cybermdx.com/
Company size (employees)50 to 99
Headquarters RegionNorth America
Type of solutionCloud/SaaS

Overview

CyberMDX’s solution helps healthcare delivery organizations protect their critical assets, including medical devices and networks, from dangerous external actors. We provide our clients with state of the art cybersecurity solutions so that they can continue to focus on providing the highest level of medical care instead of worrying about their vulnerabilities and cyber threats.

The CyberMDX Healthcare Security Suite provides endpoint visibility, network threat prevention, and operational analytics to any connected medical, IT, or IoT device, with a focus on the healthcare sector. Our solution identifies endpoints and assesses vulnerabilities to detect, respond to and prevent cyber incidents and is designed to integrate with our customers’ existing environments through its scalable, easy-to-deploy architecture.

Our solution is cloud-based and will automatically gather threat detection updates and medical device classification updates in a granular manner. Using our smart isolation approach, the solution enforces policy such that only authorized traffic from authorized nodes can reach a protected device, resulting in a dramatically reduced attack surface.

The solution also interfaces with SIEM systems (such as Splunk and Qradar) via CEF/LEAF/syslog, to send anomaly detection alerts, bringing medical devices’ visibility to the organizational SOC.

The multi-site system is purpose-built for distributed deployment. While allowing to get the broad picture in a single view, notion of distinct sites is preserved and access to the system is possible both from the remote sites and the main site (where the controller resides). CyberMDX sensors continue monitoring in case the WAN links connecting them to the CyberMDX controller go down.

CyberMDX’s Vulnerability Research and HTM Analysis team regularly works with medical device organizations, CISA and medical networks in the responsible disclosure of security vulnerabilities. The team’s researchers, white hat hackers, and engineers collect information to understand attacker motives, means, and methods to deliver the best protection possible.

How we are different

CyberMDX has developed a layered security solution focusing on medical devices and clinical networks that ensures 100% visibility and network protection. We systemically apply our expertise in self-learning Artificial Intelligence (AI) technology and map that to our medical device vulnerability research, as well as a wide range of cyber capabilities.
While other solutions might content themselves governing how ePHI is processed,


CyberMDX takes a wider and more holistic view to govern and enhance security and privacy across the entire digital organization and computing environment. The rules engine empowers organizations to improve security and streamline compliance by defining management priorities, enforcing policies and procedures, tracking the progress of short-term initiatives and objectives (including remediation efforts) and reviewing risk metrics.


CyberMDX’s Vulnerability Research and HTM Analysis team regularly works with medical device organizations in the responsible disclosure of security vulnerabilities. The team’s researchers, white hat hackers, and engineers collect information about possible attack paths to understand attacker motives, means, and methods in an effort to prevent future breaches. Since 2019 the team has discovered and disclosed over 10 vulnerabilities in medical devices from major medical device manufacturers including GE and BD Alaris.