More Security in Healthcare: POLAVIS GmbH Submits Web Application for Pentest by usd AG

13. July 2023

POLAVIS develops and implements digital patient portals and innovative eHealth solutions for hospitals. This supports the networking of healthcare stakeholders and the consistent integration of the patient.

The Hospital Future Act (Krankenhauszukunftsgesetz, KHZG) promotes the digitalization of the healthcare system. POLAVIS offers suitable patient portals that cover all requirements on the way to the hospital of the future as a platform solution. The sustainable success is based on experience from many completed implementation projects, the extensive knowledge of clinical structures and on a clearly thought-out software, which permanently convinces customers in the daily hospital routine in all aspects.

The patient portal processes highly sensitive patient information by providing, accessing and managing health data. Due to the high protection requirements of the data, POLAVIS ordered a check of their web application for security-relevant vulnerabilities by the security analysts of the usd HeroLab. The security analysts conducted a penetration test, or short pentest, from the perspective of a patient and a hospital employee. By identifying possible entry gates for attackers and subsequent recommendations for the implementation of suitable protective measures, usd helped POLAVIS to increase the IT security level.

Farid Kanbari, Managing Director at POLAVIS, and his colleagues take IT security very seriously: "As a manufacturer of modern eHealth solutions, we promote the digitalization of healthcare. This is an important step towards improving the quality of care for all patients. However, it is extremely important for us and our customers that our solutions maintain the best possible level of security. usd supported us in achieving this goal in a very structured and efficient manner right from the start. We would like to thank usd for the excellent cooperation and competent advice."

Philipp Santos de Oliveira, Senior Consultant at usd HeroLab, led the Pentest project and summarizes positively as well: "The project with POLAVIS was important for me, because it allowed us as usd together with POLAVIS to make a valuable contribution to the protection of digital patient data throughout Germany. The cooperation with Mr. Kanbari and his team was extremely pleasant and professional. We are looking forward to supporting POLAVIS with our mission "more security" in the future."


About POLAVIS GmbH

POLAVIS was founded to bring together a great understanding of clinical workflows and a clear vision of how to optimize and digitize them with the right technology. Today, POLAVIS develops and implements digital patient portals and innovative eHealth solutions for hospitals. The focus is on patient satisfaction as well as process optimization and revenue assurance for hospitals. The sustainable success is based on experience from many completed implementation projects, the extensive knowledge of clinical structures and on a clearly thought-out software, which permanently convinces customers in the daily hospital routine in all aspects.

More information at https://polavis.de

Also interesting:

DORA Countdown: One Month Left Until the Deadline

DORA Countdown: One Month Left Until the Deadline

DORA, the Digital Operational Resilience Act, will fully apply as of 17 January 2025. We have summarized everything you need to know about the EU regulation, preparation and best practices from our news blog.

Sunset of PCI DSS v4.0 on 31 December 2024: Get Ready!

Sunset of PCI DSS v4.0 on 31 December 2024: Get Ready!

PCI DSS v4.0: In March 2024, version 4.0 of the Payment Card Industry Data Security Standard became mandatory after a two-year transition phase. Just a few months later, version 4.0.1 was released as a minor update of the standard, which will become mandatory on...

Top 3 Vulnerabilities in SSO Pentests

Top 3 Vulnerabilities in SSO Pentests

During their penetration tests (pentests), our security analysts at usd HeroLab repeatedly uncover vulnerabilities that pose significant risks to corporate security. They increasingly encounter the same vulnerabilities. Our blog series "Top 3 Vulnerabilities" presents...

Categories

Categories