How a Top 5 MedTech Company Assessed Vulnerabilities 80% Faster
A top 5 MedTech Surgical Robotics company partnered with Ketryx to modernize its post-market cybersecurity risk posture (CYRP) and accelerate vulnerability assessments. After improving their Cybersecurity System Architecture (CSA), they began identifying more vulnerabilities, which exposed gaps in their existing workflow. Their vulnerability review process had become a costly, major bottleneck: dispersed tools, inconsistent data, and manual handoffs made it difficult to efficiently identify and prioritize the vulnerabilities that posed the greatest patient and business risk.
Ketryx simplified workflows into an AI-driven system that improved prioritization, increased review throughput, and significantly reduced operational risk.
Impact
6x
Increase in Release Cadence
80%
Faster
33%
Cost Savings
Industry
MedTech
Device Type
Surgical Robotics, SiMD
Tech Stack
Gussnet, Cybeats, Black Duck, Polarian, Excel, Word
Pain Point: Expensive Security Work Crawled
- Infrequent and expensive assessments: Quarterly vulnerability reviews relied on external vendors, leaving long gaps between assessments and increasing exposure to emerging threats while driving up costs.
- Too much manual work in spreadsheets: Thousands of vulnerabilities were managed manually through Excel, making it difficult to identify which items actually mattered the most.
- Fragmented toolchain and data silos: Disconnected tools for SBOM generation and risk management left data scattered, forcing the team to manually piece together information across spreadsheets and systems.
Solution: Automated, Focused Cybersecurity Workflow
- Automated data collection and centralized scoring: Ketryx automatically collected data from trusted vulnerability sources and streamlined scoring, enabling faster, more accurate impact assessments. Review throughput increased from 30–40 assessments per day to 50–60, improving review rates by 57%.
- Intelligent filtering and prioritization: Patched, duplicate, and obsolete vulnerabilities were automatically excluded, reducing the volume requiring human review by 70%. This allowed the team to eliminate dependence on external assessors and run assessments fully in-house.
- Simplify cybersecurity workflow: Ketryx replaced most legacy tools, unifying SBOM generation, vulnerability tracking, and cybersecurity risk scoring into a single, traceable workflow.
Business Outcome: More Efficient and Safer Cybersecurity Posture
- Stronger security posture: A 6× increase in assessment cadence, from once a quarter to twice a month, enabled earlier identification and remediation of emerging vulnerabilities.
- Reduced patient and operational risk: Vulnerabilities were identified and addressed 80% faster, improving patient safety and system resilience.
- Higher throughput at lower cost: Reduced annual assessment costs by 33% by simplifying workflows and eliminating the need for external assessment resources.
"Ketryx gave us a scalable way to manage product cybersecurity risk. We’re running assessments more frequently, prioritizing the right issues, and improving our overall security posture without increasing effort."
Director of Product Security
.png)