Sector package
Cyber security for hospitals, clinics and diagnostic labs
Healthcare is attacked because it pays. Patient records sell, downtime is intolerable, and the systems were built for clinicians, not attackers.
Request a scopeWhat goes wrong in hospitals & clinics
- Ransomware on hospital information systems
Encryption of HIS, PACS or lab systems halts admissions and billing within hours. Backups are often on the same network.
- Patient data leaks
Reports, prescriptions and ID copies exposed through misconfigured servers or WhatsApp groups. Now a DPDP Act breach with notification duties.
- Fake "insurance" and "test report" calls
Patients phished with details that only the hospital should know, pointing to a leak upstream.
Rules that apply to you
- DPDP Act 2023: health data is personal data; consent, purpose limitation and breach notification apply.
- CERT-In directions (April 2022): report incidents within six hours, keep logs for 180 days.
- NABH and insurer requirements increasingly include information-security controls.
The package
Vulnerability assessment and penetration testing (VAPT)
Manual testing of your web apps, mobile apps, APIs, networks and cloud by people who think like the attacker, with findings ranked by what would actually be exploited first and a report your engineers can act on.
What is included →Incident response and digital forensics
Ransomware, a compromised mailbox, a data leak or an insider walking out with the database. We contain first, investigate properly, handle the CERT-In and DPDP reporting, and leave you with evidence that holds up.
What is included →DPDP Act 2023 compliance
A practical path to compliance with the Digital Personal Data Protection Act 2023 and its rules, from gap assessment and consent design to breach notification planning and a DPO you can call.
What is included →Phishing simulation and employee security awareness
Realistic phishing, vishing and WhatsApp simulations with short training that changes what people do, measured over time, and built around the scams actually hitting Indian companies.
What is included →