The challenge
Care can’t go offline. Attackers knew it.
Verdant’s 40 hospitals ran thousands of connected infusion pumps, imaging systems, and building controllers — most unpatchable, many invisible to IT. Flat clinical networks meant one phished workstation could reach devices that keep people alive.
Downtime wasn’t an operational metric here. It was a patient-safety metric.
Approach
Segment, back up, watch everything.
Segment
Clinical micro-segmentation
Medical devices were isolated into monitored enclaves with strictly defined clinical flows — care workflows untouched, lateral movement eliminated.
Back up
Immutable recovery
Backup chains were rebuilt with immutability and offline copies, then restore-tested per facility — because an untested backup is a rumor.
Watch
Always-on monitoring
Continuous telemetry tuned to clinical environments, with on-call escalation paths drilled alongside hospital incident teams.
Outcome
The attack came. It failed.
Months after handover, a ransomware affiliate breached a vendor VPN and deployed encryptors inside one hospital’s IT network. Segmentation held the clinical enclaves, monitoring flagged the blast radius in minutes, and immutable backups made the ransom demand irrelevant.
“The clearest security report I’ve read in 20 years. My board finally understood our risk — and signed off on the budget.” — Sofia Lund, CTO, Verdant Health
Protect systems that can’t go down.
More work: 47-second containment · Zero-trust at Orbital
Keep exploring
More works.
Caught a supply-chain breach in 47 seconds.
Red Team · Aegis Bank · 2025 — behavior-based detection, isolation and rollback with zero loss.
View case →Zero-trust across 14,000 endpoints in 30 days.
Pentest · Orbital · 2024 — unified identity, micro-segmentation and adversarial verification.
View case →Ransomware-proofed 40 hospitals.
Hardening · Verdant · 2024 — clinical segmentation, immutable backups and 24/7 monitoring.
View case →