en flag +1 214 306 68 37

Our Cybersecurity Projects

20 results:

Pentesting to Safeguard PHI for a SaaS Provider Serving 9K Pharmacies

Pentesting to Safeguard PHI for a SaaS Provider Serving 9K Pharmacies

As a result of black box pentesting of a patient engagement platform, ScienceSoft identified 13 vulnerabilities that could lead to MITM, DoS, XSS, and other attacks. With our remediation advice, the Client fortified the protection of its IT assets and patient data.

Telehealth App Audit and Refactoring to Launch a HIPAA-Compliant MVP

Telehealth App Audit and Refactoring to Launch a HIPAA-Compliant MVP

In just three months, ScienceSoft audited and refactored the code of a telehealth software platform, fixed critical defects, and stabilized the features. The outcome was a high-quality HIPAA-compliant software MVP ready to enter the market.

HIPAA Compliance Roadmap for Eye Diagnostics iOS Apps

HIPAA Compliance Roadmap for Eye Diagnostics iOS Apps

ScienceSoft's compliance officer provided 40 hours of HIPAA compliance guidance to a US-based eye diagnostics startup. Along with the consulting sessions, the officer delivered a 30-page guidebook covering HIPAA requirements for the development of the Client's iOS apps.

Mobile Device Pentesting for a Healthcare IT and Research Company with 80K Employees

Mobile Device Pentesting for a Healthcare IT and Research Company with 80K Employees

As a result of black box and gray box pentests of the Client’s corporate Android and iOS devices, ScienceSoft spotted critical vulnerabilities previously missed by another vendor. Our remediation guidance helped the company ensure HIPAA-compliant PHI protection.

Pentesting for a Remote Patient Monitoring Vendor to Ensure HITRUST CSF and HIPAA Compliance

Pentesting for a Remote Patient Monitoring Vendor to Ensure HITRUST CSF and HIPAA Compliance

ScienceSoft conducted gray box penetration testing of web, iOS, and Android apps for a remote patient monitoring solution. Following our remediation guidance, the Client effectively enhanced its security level, which was confirmed by a retesting round.

Penetration Testing for a Healthcare Software Vendor

Penetration Testing for a Healthcare Software Vendor

To help enhance the protection of sensitive health information, ScienceSoft performed gray box penetration testing of 4 web applications, 45 APIs, and 60 public-facing IPs.

Annual Pentesting and Phishing Simulation for a Healthcare IT Provider

Annual Pentesting and Phishing Simulation for a Healthcare IT Provider

As part of an ongoing cybersecurity partnership, ScienceSoft performed a black box pentest and phishing simulation for a US healthcare IT services provider. The annual checkup was completed in 5 days and helped the Client promptly fix newfound vulnerabilities.

Gray Box Pentest for a Pharma Company Revealed Severe Intranet Vulnerabilities

Gray Box Pentest for a Pharma Company Revealed Severe Intranet Vulnerabilities

ScienceSoft verified intranet security for an American biopharmaceutical company. The pentest covered 49 internal IPs and revealed several issues of high and medium severity, which helped the Customer improve its cybersecurity posture and protect sensitive data.

Security Testing Paves the Way for Secure Expansion of Clinical Trial Platform With eRegulatory Module

Security Testing Paves the Way for Secure Expansion of Clinical Trial Platform With eRegulatory Module

ScienceSoft conducted gray-box pentests and AWS & Azure infrastructure reviews for a US provider of clinical trial software. The client securely expanded its CTMS with an acquired eTMF module, strengthened PHI protections, and complied with HIPAA, Part 11, and SOC 2.

Pentesting for Health Insurance Guaranty Association Revealed Vendor Vulnerabilities

Pentesting for Health Insurance Guaranty Association Revealed Vendor Vulnerabilities

ScienceSoft conducted a black-box pentest for a US non-profit guaranty association, covering its public website, infrastructure, and 11 integrated 3rd-party services. The client gained crucial insights for compliance, data protection, and vendor risk management.