Medmo

CHALLENGE

Meet complex compliance needs with a lean team

Barak Poker, Medmo’s CTO, had big compliance requirements. As the business scaled to serve larger organizations, Barak needed proof that their product was secure.

In order to strengthen the company’s security posture, Barak needed to identify and remediate any potential security risks. He also needed all of their documentation organized to complete their SOC 2 audits and ongoing HIPAA compliance and be more prepared for audit requests. But Barak couldn’t do it alone.

SOLUTION

Medmo chooses Thoropass to conduct pentesting and close security gaps

Barak engaged Thoropass as a comprehensive compliance partner to conduct penetration testing and ensure readiness for both the SOC 2 and HIPAA frameworks. With a team of experts and an easy-to-use platform that streamlined the process, Barak found the support he needed to ensure the Medmo product was audit-ready.

“They fully understood what our application was, what our stacks were, what the breadth of each application was. I was really impressed by their organization and professionalism in terms of all their communications,” said Barak Poker, CTO at Medmo.

Thoropass’s experienced pentesters found several optimization opportunities, which were mostly focused on internal applications requiring high-level credentials. With Thoropass’s detailed reports and recommendations, Barak’s team was able to immediately run patches to optimize and further secure the Medmo platform.

RESULTS

Improved security posture opens the door to larger customers

Partnering with Thoropass allowed Barak to mitigate potential security risks and open the doors to new, larger customers. Now, when healthcare organizations ask for evidence of Medmo’s compliance, Barak has reports at the ready.

LOOKING AHEAD

Staying ahead of vulnerabilities with ongoing compliance monitoring

With ongoing compliance monitoring from Thoropass, Barak and his team know exactly what steps to take to keep risk at bay. Customers and stakeholders alike can have confidence in Medmo’s cybersecurity strategy.