If you've ever run an SBOM tool on a C/C++ codebase and gotten results that felt wrong, you're not imagining it. Teams evaluating tools like Black Duck, Syft, Trivy, and FOSSA on embedded projects routinely find that outputs are incomplete, inconsistent, or so noisy...
Download RunSafe’s 2025 Medical Device Cybersecurity Index
Industry-defining insights from 605 healthcare decision-makers on medical device cybersecurity
Medical device cybersecurity has evolved from an IT concern to a patient safety imperative. Our comprehensive survey of 605 healthcare executives reveals how cyberattacks on medical devices are reshaping procurement decisions, budget priorities, and patient care across the healthcare ecosystem.
Key Findings At-a-Glance:
- 22% of healthcare organizations have experienced cyberattacks on medical devices
- 75% of these incidents affected patient care
- 46% have declined device purchases due to cybersecurity concerns
- 79% are willing to pay premium prices for devices with advanced security
- 35% now identify medical devices as their biggest cybersecurity concern
What’s Inside the Report:
- Real-world examples of how cyber incidents are affecting patient care
- How security is changing procurement and vendor expectations
- Where healthcare budgets are shifting—and why
- What healthcare buyers now demand from medical device manufacturers
- What forward-thinking leaders can do to stay ahead
Who Should Read This Report:
- Healthcare executives and decision-makers
- Medical device manufacturers and vendors
- Healthcare IT and security professionals
- Healthcare procurement professionals
- Healthcare investors and analysts
Check Out Our Latest Blog Posts
Questions to Ask When Evaluating SBOM Tools for Embedded C/C++
If you're running a proof of concept on Software Bill of Materials (SBOM) tooling for C/C++, you've probably already discovered that vendor demos don't tell you much. Tools that look capable in a sales presentation frequently fall apart when pointed at a real embedded...
The FDA Is Asking for VEX with SBOMs: Here’s Why That Matters
Key Takeaways: The FDA is asking medical device manufacturers to submit VEX (Vulnerability Exploitability eXchange) files alongside SBOMs in some premarket cybersecurity submissions. VEX artifacts document whether known vulnerabilities in SBOM-listed components are...



