We help healthcare technology companies build safe and effective solutions to ensure patient safety.
.jpg)
.jpg)
.png)
.svg)
Medcrypt is the first company to combine cybersecurity technology products with management consulting, decision science, and regulatory strategy. We are a team of medical device experts who are laser-focused on supporting MDMs and bringing cybersecurity to the next generation of healthcare technology.
Medcrypt helps healthcare technology companies ensure medical devices are secure by design. We provide cybersecurity products and strategic consulting to expedite the go-to-market process of medical device manufacturers' new life-saving connected technologies.
Medcrypt’s aim, from inception, has been to solve new and growing cybersecurity concerns that plague the medical device manufacturing sector. We aim to enable medical device manufacturers to bring innovative clinical technology to market that is secure by design
FDA issued pre-market cybersecurity recommendations, focusing on identify, protect, detect, respond and recover principles.
Medcrypt founded
We started Medcrypt in 2016 to ensure that the medical devices we and our loved ones rely on were as safe and secure as technologically possible.
FDA issued the NIST-centric post-market guidance, with particular emphasis on addressing vulnerabilities that may result in patient harm.
Given the rapidly evolving landscape, FDA issued an updated draft guidance with recommendations for device design, labeling and documentation.
Series A
As a Y Combinator graduate (Winter ‘19), we raised a Series A led by Section 32, with participation from Eniac Ventures and Y Combinator.
FDA updates premarket cybersecurity guidance
The eSTAR (electronic submission template and resource) program will enforce the refuse to accept policy, positioning product cybersecurity as a business imperative.
Series B
This round included participation from Intuitive Ventures,Johnson & Johnson Innovation, and Dexcom Ventures, bringing funding to date to $36.4M
FDA updates premarket cybersecurity guidance
The eSTAR (electronic submission template and resource) program will enforce the refuse to accept policy, positioning product cybersecurity as a business imperative.
.svg)
.svg)
.svg)
.svg){kind=logo}
Medcrypt is obsessed with medical device cybersecurity, and that's reflected by the team we have put together.
Mike is passionate about new advances in the intersection of internet technology and healthcare. Prior to starting MedCrypt, he was the founder of Gamma Basics, a radiation oncology focused software startup. Gamma Basics was acquired by Varian Medical Systems in 2013. Mike holds an MBA from the Wharton School, and a Master of Medical Physics from the University of Pennsylvania.
Eric Pancoast, MedCrypt's CTO, was a co-founder of Gamma Basics, a radiation oncology focused software startup that was acquired by Varian Medical Systems in 2013. Prior to Gamma Basics Eric served as the Lead Architect and software engineer at Mimeya Technology, building Cloud-based Big Data SaaS applications. Eric has experience with a wide variety of cybersecurity engineering. Eric holds a BS in Computer Science from Drexel University.
Vidya has worked in security for 15 years, with emphasis on healthcare and medical devices for the last 8. Vidya began her career in consulting, she realized a passion for healthcare and worked for global medical device manufacturer Becton Dickinson. She has since joined MedCrypt, a company focused on bringing cybersecurity leading practices to medical device manufacturers. Vidya holds an MBA from the Wharton School.
As Chief Security Strategist, Axel Wirth provides strategic vision and industry leadership to MedCrypt and its customers. In this role, he helps guide the company in critical security strategy decisions and supports the adoption of leading security technologies by the healthcare industry. He’s an advocate for compliance, privacy, and security - and ultimately patient safety - in healthcare. Wirth draws from over 30 years of international experience in the industry.
Bob brings 30 years of industry experience to passionately lead Medcrypt’s sales and marketing efforts. Prior to joining Medcrypt, Bob was previously the CRO of MergeBase (acquired by Finite State) and Cybeats. Bob was also co-founder and CEO of Valona Labs, the mobile device security startup acquired by HMD Global in 2020. He has held executive roles at multiple high-technology venture-backed startups, as well as public companies to include Qualcomm, Samsung, Motorola, and Absolute.
In addition to his role at Medcrypt, Bob serves as the Deputy Chair of the GSMA’s Device Security Group (DSG). Bob has a BSEE and MSEE from Purdue University, was a Fulbright Scholar to Australia during his graduate studies, and also holds an Executive MBA from Arizona State.
Seth has 10 years of medical device experience and provides strategic direction for cybersecurity products and services for the regulated device market.
Prior to Medcrypt, he spent 8 years at the FDA, architecting technology policy and laws that impact software-enabled medical devices, including the FDA’s medical device cybersecurity policies. His industry leadership and strategic direction extends to several high-profile industry frameworks including the Joint Security Plan (HSCC), MITRE’s Rubric for Applying CVSS to Medical Devices, and MDIC’s Playbook for Threat Modeling Medical Devices. He has authored several medical device cybersecurity papers and won several information security awards. He holds a PhD in Chemistry from Indiana University.
Naomi is a regulatory, compliance, and standards expert. She employs gap analyses, proposes mitigation strategies, and optimizes cybersecurity frameworks to address risk and uncertainty for device commercialization and to meet regulatory requirements and guidelines. Naomi has 20+ years of systems engineering experience.
Prior to Medcrypt, she was a premarket reviewer and consumer safety officer in CDRH for 6+ years, focusing on software, interoperability, and cybersecurity for connected diabetes devices. Her industry leadership and strategic direction include crafting standards and recommended practices for wireless diabetes device security, managing postmarket triage for cybersecurity vulnerability disclosure. She holds an MS in Electrical and Computer Engineering from Carnegie Mellon University and is a Certified Quality Auditor.
William, our VP of DevOps, has developed large, enterprise, cloud-native systems for over 20 years. As an early cloud adopter, he aggressively advocated for and led transitions and initial deployments to AWS since its inception in 2006. William co-founded Gamma Basics, a radiation oncology focused CAD software startup that was successfully sold to Varian Medical Systems in 2013. William holds a BS in Computer Science from The College of New Jersey.
Om leads Product at MedCrypt, helping build innovative cybersecurity products for healthcare. He enjoys speaking at conferences about the latest trends in cybersecurity and how they impact healthcare and patient safety. His interests in privacy and technology led him to join a cybersecurity startup after studying Computer Engineering at Drexel.
Clayton McNeil, our VP of Engineering, has spent his career developing products in a wide range of fields including robotics, fiber optics, virtual reality and medical devices. His development role has primarily been focused on embedded devices and their security. At MedCrypt, he has reviewed the architecture of over 40 systems, advising customers on cryptographic infrastructure. He holds a BS in Computer Engineering from Drexel University and an MBA from West Chester University.
.svg)
.svg)
New technology comes with both risks and rewards. Our team is motivated by our purpose to improve health, and our mission of impact at scale. As a high-performing team with big ambitions, we expect a lot of ourselves and of our customers.
When working with our internal teammates and external partners, we commit to:
The best innovations come from diverse teams. Medcrypters have a wide range of perspectives and experiences and we deeply respect the knowledge, skills, ideas, and capabilities each employee brings.
We earn the trust of our partners by providing realistic, practical, and evidence-based cybersecurity solutions and counsel. There is not always an easy answer and we value honesty above all else.
We strive to offer a “customer-first” approach. Our success is contingent upon partnership with medical device manufacturers to bring new healthcare technology to market.
We provide evidence-based risk assessments and practical recommendations tailored to the development stage of our partners’ devices, thus ensuring progress towards our shared goal — bringing innovative medical devices to market at scale.
Our cybersecurity experts are deeply ingrained in the healthcare industry because regulatory constraints require a healthcare-first approach, meaning clinical functionality, patient safety, and care delivery are always the highest priority.
We know medical device security is a challenging problem. We are working hard to take on big challenges, but know that solving this problem is an incremental process. The steps we are taking will create the future of medical devices.
.svg)
Here at Medcrypt, we’re firmly committed to hiring, supporting, and growing new Medcrypters from all backgrounds to create a more equitable and inclusive workplace for everyone, and it shows in how we have grown our team and nurtured our culture.
We know that a more diverse and inclusive workforce facilitates better decision-making and increased innovation, leading to improved employee satisfaction, engagement and retention. In addition to the awesome culture we’ve created at Medcrypt, we’re in the process of formulating our next step towards strengthening our commitment to DEIB (Diversity, Equality, Inclusion, and Belonging). If you’re excited about what Medcrypt offers, want to help build the future of medical device cybersecurity, and would love to get involved in DEIB, let us know!
From patients to providers to our people, we are actively working to protect the delivery of care for all by taking the steps to help build a system of verifiable trust. We are innovators, committed to creating and holding space for unique perspectives, and we believe that diverse minds and lived experiences are the key to sparking innovation.
As an organization, we vehemently stand against racism, sexism, ageism, ableism, religious intolerance, transphobia, homophobia, and all forms of oppression through not only what we say, but what we do and how we do it. Medcrypt encourages a culture of inclusion and belonging, and empowers everyone to show up authentically, ask questions, and raise issues without fear. Creating this psychological safety in our organization drives us to grow together as a community.
We hold our Diversity, Equity, Inclusion, and Belonging commitment at the forefront of our actions from our transparent hiring practices, to our people-first way of working, and the way we embrace each other’s differences.
We welcome the challenges ahead and remain accountable by developing initiatives which bring awareness to inequities, cultural sensitivity, and the importance of standing with integrity.
.svg)
We’ve partnered with Kansas State University to finance development of a customizable and scalable platform that integrates qualitative and quantitative metrics to provide actionable and prioritized recommendations to address current and future technological, regulatory, and business risks.
These findings will be disseminated to provide a foundation that others can build on, and Medcrypt will integrate this research into our cybersecurity solutions, helping medical device manufacturers reduce cybersecurity risks and meet regulatory requirements, ensuring that they’re focusing on fixing the most exploitable cybersecurity issues that have the biggest impact on patient and operator safety, which leads to increased trust between healthcare providers, patients, and the technology we all rely on.
.svg)
We’ve also financed a fellowship with Tufts University to focus on medical device security and threat modeling. Although threat modeling is an essential component of the Secure Product Development Framework (SPDF) and processes and has been shown by the Food and Drug Administration (FDA) and Cybersecurity and Infrastructure Agency (CISA) to result in more secure devices, 49% of device makers do not follow guidance to mitigate or reduce security risks.
This research will focus on identifying common gaps in device threat models and support the development of new guidance and tools to help medical device manufacturers ensure that their devices are secure, working towards the goal of reliable, repeatable, and effective threat modeling.
Medcrypt is not only building solutions and services that meet the needs of medical device manufacturers today, we’re supporting the research initiatives our esteemed colleagues in academia are working on in the medical device space.
.svg)
.svg)
As proactive healthcare cybersecurity continues to grow in importance, buyers, patients and media are taking note of Medcrypt’s innovations and impact.
Get the latest healthcare cybersecurity news right in your inbox.
We'll never spam you or sell your information
.png)
