Case Study: a major healthcare system reduces critical vulnerabilities with Zafran

major healthcare system reduces critical vulnerabilities by 99% with Zafran

The customer, a major healthcare system, faced significant challenges in vulnerability management due to scanner noise, siloed tools, and the unique patching constraints of its FDA-regulated clinical devices. Their lean security team struggled with prioritization and could not efficiently account for existing compensating controls, leading to an inaccurate view of their risk. They implemented Zafran to gain a unified, evidence-backed view of their true exploitable risk.

Using Zafran, the healthcare system integrated its security tools to assess true exploitability by factoring in its existing compensating controls. This solution enabled them to accurately represent isolated devices as mitigated, drastically reduce ticket volume, and provide executive dashboards. As a result, Zafran helped the customer reduce 99% of their CVSS critical vulnerabilities to low or medium criticality, uncover 42 unknown internet-facing assets, and identify 871 available mitigations using their current defenses.