A Fortify 24x7 brand. Records room habits, applied to clinical systems.Your shelfRecords desk
MediTrust Cyber
Jacket 521ThreatLocker

A roster of what may start. Everything else is turned away.

One line, carrying the shortest argument in this catalog. Rather than inspecting each new arrival and forming a view on how dangerous it looks, the machine keeps a roster of software cleared to start and refuses whatever is missing from it. Across the desks reaching charting, imaging and payment, that stance stands up considerably better.

In this jacket

Prices arrive live from billing. Whatever goes into the file waits for you, however long the reading takes.

Why turning everything away suits clinical hardware

A clinical desk opens a short and knowable set of programs. Practice management, a clearinghouse client, an imaging viewer, some printer utility, an office suite, a browser. That set barely shifts between one quarter and the next, which makes it an excellent candidate for a roster and a poor candidate for the endless guessing a scanner is obliged to do.

The awkward part deserves saying plainly. That opening fortnight is genuine work. A watching phase observes what your office truly runs and assembles the roster out of it, and questions need answering while that happens. Pretend otherwise during a rollout and you buy a wretched opening month plus colleagues who resent the software right through the term.

Ringfencing, the half that gets no attention

Past whether something may start at all, ringfencing bounds what a cleared program is then free to do: processes it may launch, documents it may read, addresses it may reach. That is how an ordinary and perfectly legitimate utility gets stopped from moonlighting as a handy route for somebody else's records out of the building.

It is also how a permitted but compromised application is kept small. Approval is not innocence, and the fence is where that gets expressed.

Lines filed here

What each line is, and what it costs.

Prices land on this page straight from billing the moment it opens. Shelve what you like while you read. None of it leaves your hands before the card is signed.

Fortify-ZeroTrustFiled spec

Execution Control

ThreatLocker, holding the roster of what may start

Allowlisting over applications. A machine starts whatever has been signed off and turns everything else away. Across desks reaching charting, claims and imaging, that stance stands up far more solidly than asking a scanner to recognise whatever arrives in a fortnight.

  • A watching phase draws the roster from the clinical and office software your people actually open.
  • Whatever your vendors release gets followed, so no Monday update shuts an office out of its own systems.
  • Ringfencing sets bounds on what a permitted program may launch, may read, and may talk to.
  • An elevation request goes to somebody already on shift, whatever the hour it is raised.
Filed underThreatLocker, jacket 52
CoversOne endpoint for each unit, over the machines you nominate
RetainedThe roster and each approval decision taken against it, kept through the term
Released byOur desk, handling elevations without a gap in the day
Checked againstA dated approval trail showing what was let through, when, and on whose word
Reading the rateper endpoint
one month at a time, paid ahead
QTY
Honest scope

The roster rules on code. It holds no view on consent.

This line settles what may execute. Whether a person ought to have done what they did lies outside it, and that distance is worth reading about before a card gets signed.

  • Somebody typing a password into a convincing page consulted no roster. They opened a cleared browser and reached a cleared site. Jacket 63 and the drills inside it cover that road. This one goes nowhere near it.
  • A browser extension never resembles new code. Something added by the ordinary store route is not a new binary as far as a roster is concerned. Keeping extensions sane is a written policy, and we would sooner help you draft one than sell you a line against it.
  • It cannot be installed on locked clinical equipment. Where a manufacturer forbids third party software, the answer stays separation on the network with a recorded decision. Nothing filed in this jacket alters that.
  • The watching phase is a genuine fortnight. Budget it, staff it, and tell your office it is coming. That is the entire risk carried by this line, and it is thoroughly manageable when nobody is caught out by it.
Filed note

Heads up: card statements show FORTIFY 24X7 - MediTrust Cyber is a Fortify 24x7 brand, and your subscription is billed by Fortify 24x7.

Elsewhere on the rack