Brantford Health Network · Healthcare provider network

Nine hospitals, one exposure model, and a clinical estate nobody had mapped

Brantford knew its clinical network was the risk and could not describe it. Mapping the estate took eight weeks; the first three choke points removed more exposure than the previous two years of patching.

8 weeksto map the clinical estate

4 of 9sites with segmentation gaps found

-44%paths reaching clinical systems

0clinical outages caused by security change

The challenge

Clinical devices and imaging systems were outside every existing inventory.
Segmentation had been designed on paper and never verified against the running network.
Security work competed with clinical uptime and usually lost.

The approach

Discovery ran passively on clinical segments before any active checks were considered.
Paths were scored on clinical impact, not on generic severity.
Three choke points were selected that could be applied inside existing maintenance windows.

The outcome

The clinical estate is described in the same model as everything else.
Segmentation gaps were found in four of nine sites and closed within the quarter.
Security change now fits the clinical maintenance calendar rather than fighting it.

“The model did not tell us we were bad at security. It told us exactly which three changes to make first, and we could schedule those.”
Dr. Priya SandhuDirector of Information Security, Brantford Health Network

See your own surface the way an attacker reads it

A four-week proof of value connects one cloud account, your DNS and your identity provider, and ends with a written readout of what was found.

Book a walkthrough Open the console demo

Illustrative product data. Nothing on this site performs a live scan.