CREST Penetration Testing

Medical device security testing can be done in many ways, either part of your development lifecycle in line with IEC62304, or through a traditional penetration test. The challenge with generic penetration testing is that it may not cover all of the aspects that you would expect to see for your medical device. For example, integrity is a big part of medical device security and penetration tests often miss this as they focus on the OWASP top 10 only. We perform our penetration tests in line with medical device security standards such as IEC TR 60601-4-5:2021

Web Application Penetration Testing is the process of evaluating the security of a web application by identifying vulnerabilities that could be exploited by attackers. It helps ensure that the application is secure against potential threats.

Mobile Application Penetration Testing involves assessing the security of mobile applications to identify vulnerabilities that could be exploited by attackers. It helps ensure that the application is secure and protects user data.

Penetration Testing helps identify potential vulnerabilities in your digital infrastructure, allowing you to proactively address them before they can be exploited by attackers. It helps protect your sensitive data and ensures the security of your systems.

The type of penetration test you need depends on the specific device, its connectivity, and the potential risks it faces. At Periculo, we offer tailored assessments based on factors such as network interfaces, data sensitivity, and regulatory requirements. Common tests include wireless, software, and hardware security evaluations. Our experts will work with you to determine the most appropriate test to safeguard your medical device against potential threats and ensure compliance with industry standards.

The duration of Penetration Testing depends on the scope and complexity of the project. It can range from a few days to several weeks. Our team will work closely with you to determine the appropriate timeframe for your specific requirements.

After completing the Penetration Testing, you will receive a comprehensive report detailing the vulnerabilities identified, along with recommendations for remediation. Our team will also provide ongoing support to help you address any security issues. For medical device security testing, we will provide you with a table of hazards considering standards and requirements that you choose, for example; IEC TR 60601-4-5:2021, EUMDR , IEC 62304 and MDCG 2021-5 Rev.1

The cost of Penetration Testing varies depending on the scope and complexity of the project. We offer competitive pricing tailored to your specific requirements. Contact us for a detailed quote.

Penetration testing for medical devices involves assessing the security of connected medical equipment to identify potential vulnerabilities that could be exploited by cyberattacks. At Periculo, we simulate real-world threats to ensure that your devices are resilient to breaches, protecting patient data and the integrity of your systems. This is crucial for maintaining both compliance and patient safety in healthcare environments.

Yes, We can conduct physical penetration testing. We simulate real-world intrusions to identify vulnerabilities in your physical defences, such as access controls and surveillance. Our detailed assessments help you strengthen your security measures and protect against unauthorised access.

To get started with our Penetration Testing services, simply contact us to discuss your requirements. Our team will guide you through the process and provide you with a tailored solution to meet your security needs.