DLP
We implement DLP (Data loss prevention) solutions in Israel and Europe to prevent data breaches of credit cards and PHI - protected healthcare information.
Governance
We assess and make strategic and tactical recommendations to ensure good data and security governance in order to protect your domain expertise and implementation know-how.
Monitoring
We provide real time monitoring as a key factor in mitigating the trusted insider threat.

A trusted insider threat can be defined with regard to two primitive actions: Violation of a security policy using legitimate access, and violation of an access control policy by obtaining unauthorized access.
Risk management
We use risk management as an opportunity to improve product security and customer safety and reduce the cost of the security portfolio.
Clients
We specialize in helping clients in the medical device and healthcare space attain cost-effective security and compliance.

Not with fortune-telling, but with robust, quantitative methods.
Cases
We provide world-class professional consulting services to medical device and healthcare companies who develop innovative products.
Compliance
We evaluate your medical device or healthtech product from an attacker point of view, then from the management team point of view, and then recommend specific detailed action steps to close the gap between your product and HIPAA security and privacy requirements. We then train your product development team based on these recommendations.

HIPAA compliance is an opportunity for medical device and healthtech vendors to harden the software security of their products in hostile, heterogeneous networked hospital environments.
Security management
We strategize your management team's action steps in HIPAA compliance activities, asset management, risk assessment and risk analysis so that the most cost-effective security portfolio can be implemented.

The goal of our security management program is to proactively support CEOs to help them maximize their compliance and reach their personal goals.
Threat analysis
We analyze the the risk in innovative medical device and healthcare products using robust, quantitative threat models.

From a software security perspective, threat analysis is best used throughout the entire development life cycle starting with the design - which typically accounts for 50% of all security vulnerabilities.
Software security assessment
We assess the security of cloud-based and mobile software applications.

We team with the management board of our customer to improve security and compliance at the lowest cost and best possible schedule.

Why Choose Us

1

We are independent security specialists

We are a group of expert, independent software security and regulatory compliance specialists. We do not resell products. We’ll help you choose and implement the best security and compliance controls for your budget.

2

We love software development

We are professional programmers that love software. We’ve been doing this for over 30 years and we’ve done and seen a few things. We know that your software is key to your success.

3

We are a boutique, not a retailer

We provide a customized set of security and compliance services: information security management, software security assessment and HIPAA compliance for medical device and healthcare technology firms.

4

We analyze your business needs

Our unique program of business threat analysis accelerates your risk management and reduces your security costs.

5

We will teach you how to fish

We’ll teach how to fish, not sell you fish. We work with management, marketing and engineering staff and teach you to avoid classic SDLC (software development life cycle) mistakes. We insist on software development fundamentals, We perform aggressive risk management and we help you choose the right schedule-oriented practices for your security and compliance project.

6

We are results oriented

Our philosophy is centered on one specific goal – software project success.