Santa Clara, CA – November 9th, 2022 – Ordr, the leader in connected device security, announced today that it has partnered with Sodexo Healthcare Technology Management to deliver a managed HTM and cybersecurity solution that combines the strengths of Ordr’s connected device security platform with Sodexo’s healthcare technology management services expertise. The combined solution — Sodexo Managed HTM Cybersecurity services built on the Ordr platform — delivers the people, process, and technology that healthcare technology management (HTM) teams need to mitigate risks and secure all connected healthcare devices.

In healthcare facilities, connected devices, including Internet of Medical Things (IoMT), have transformed care delivery and are used every day by providers and staff to deliver high-quality, efficient, life-saving medical care. However, while providers depend on the ever-increasing number of connected devices to deliver care, these devices create challenges and complexity for the HTM and IT users responsible for operating and securing them.

At scale, it can be difficult to accurately identify and classify these devices, understand their specific vulnerabilities and risks, determine whether they are available for maintenance, or to locate them for patching. Without strong security protections, unprotected devices can provide an opening for attackers to breach a system or spread ransomware. Addressing security and compliance is especially challenging because these devices often run outdated operating systems and because FDA or manufacturer guidelines may preclude updates.

“Visibility and security of medical devices is critical for healthcare organizations. HTM users need to be able to discover, profile and manage risks associated with these devices. With attacks such as ransomware increasing, it is important to be able to prioritize issues that have the highest impact when it comes to mitigating risks,” said Jim Hyman, CEO of Ordr. “The combination of the Ordr technology with Sodexo’s expertise and deep knowledge of the healthcare environment, will enable HTM teams to securely manage their connected medical devices and improve operational efficiencies.”

The Ordr platform, with successful deployments across hundreds of leading healthcare facilities, can discover and secure everything connected – from traditional servers, workstations, and PCs, to IoT, IoMT, and OT devices. Ordr Clinical Defender is optimized for HTM teams to automate the discovery and inventory of medical devices, accelerate day-to-day tasks, identify and prioritize medical device vulnerabilities, and drive operational efficiencies with device utilization insights.

“Successfully managing today’s expansive healthcare networks requires best-in-class technology that delivers real-time device, utilization and risk insights along with guidance on how to optimize security and performance,” added JT Surgener, Senior Vice President, Technical Services, Sodexo Healthcare. “Through the Ordr and Sodexo managed services offering, organizations will gain access to a powerful, yet easy-to-use healthcare device security platform – along with leading HTM and cybersecurity services, that will help them drive to greater efficiencies and security.”

Sodexo Healthcare Technology Management (HTM) services are tailored to specific hospitals or healthcare systems. Sodexo’s services help optimize medical equipment inventory, advise on equipment replacement and purchases, and provide on-site maintenance and repair.

Key benefits of the Sodexo’s Managed HTM Cybersecurity Solution include:

• Strategic Insights, Guidance, And Expertise – Sodexo’s highly skilled and motivated technical team integrates with local healthcare teams to solve problems, provide solutions, and continually find innovative ways to maximize assets to ensure smooth and effective patient care.
• Best-In-Class Tailored Solution – The Sodexo solution combines decades of HTM service delivery expertise with Ordr’s leading connected device security platform. The combined service helps healthcare providers of all sizes drive performance, efficiency, and security.
• Comprehensive Visibility – Discover and profile every connected device in an environment, with granular details that help maintain an accurate, up-to-date inventory of all assets – and help locate devices for maintenance and patching.
• Actionable Risk Insights – Understand vulnerabilities and clinical risks to the healthcare environment, prioritize risks and actions, and continuously monitor for threats.
• Improved Cyber Response – Improve incident response to stop active attacks, while accelerating efforts to improve overall security posture. Tailored recommendations and dynamically generated policies support segmentation and zero trust efforts.

Sodexo’s Managed HTM Cybersecurity Solution leveraging Ordr is available now. For more information on how you can gain insights and control over the connected devices on your healthcare network, contact Sodexo.

It has become painfully obvious that medical device manufacturers (MDMs) can’t keep up with the ever-expanding list of discovered vulnerabilities affecting the equipment they make and ship to market. Security researchers recently published a report claiming that as many as 75% of 200,000 devices reviewed have security flaws that make them vulnerable to exploitation by threat actors. More than half of those had multiple vulnerabilities, including many that have been known since at least 2019.

Healthcare delivery organizations (HDOs) like hospitals, urgent care clinics, private practices, and more have taken note. And while they rely on the capabilities that connected medical devices provide to deliver a superior quality of treatment, they also recognize that they can’t count on MDMs to address vulnerabilities promptly. Flaws in operating systems and software used to create the devices may include vulnerabilities that aren’t discovered until long after equipment is put in service. And once in service, it may be difficult to patch devices because they are in use providing critical care.

A Bad Time for Healthcare Security

These findings could not come at a worse time for the healthcare industry, which is already besieged by risk. In another recent report, security researchers found that the industrial control systems and other network-connected systems—devices comprising the internet of things (IoT), operational technologies (OT), and the internet of medical things (IoMT)—used in hospital and healthcare environments had seen a 110% increase in vulnerabilities since 2019. And that was before cybercriminals took advantage of the chaos brought on by the Covid-19 pandemic, increasing cyberattacks on healthcare organizations by 55%, along with an expected spike in attacks associated with the war in Eastern Europe.

This dilemma has necessitated a need to find alternative methods to ensure vulnerable medical devices, critical to the treatment of patients, are secured from threats and that the organizations and patients that rely on them are protected. Rather than wait for fixes, organizations have learned that they can take action now to execute security policies capable of segmenting at-risk devices on the network, allowing them to remain in services, and ensuring only the communication necessary for the device to function are allowed.

See. Know. Secure.

The process of isolating medical devices through network segmentation sounds simple, but it is not. Many MDMs lack complete knowledge of how, once deployed, their devices communicate within their respective hospital networks. The communication patterns, although similar, are not the same even for devices that have similar functions. At the same time, HDOs often lack the tools necessary to understand what devices they have and how they work in every given environment. They may not even know how many devices they have operating on their networks as our own research has shown a visibility gap of as large as 30%.

This has created a market for tools that can passively identify devices and automate the process of segmentation, while ensuring medical devices can continue to function correctly. Ordr is one such tool. Ordr is able to scan a hospital’s network and detect and identify all the devices that are connected and operational, providing full visibility of the organization’s complete asset inventory. That includes not only connected medical devices, but building controls, vending machines, exercise equipment, and even consumer-grade devices that may be in use.

Take Action to Mitigate Risk

Once all devices have been identified and inventoried, they are monitored and compared against a baseline of expected activity. This is done either because a certain device is already known to Ordr, or operations are established through use. Because medical devices must operate within narrow parameters, anomalies are easier to identify. Ordr can then apply security policies that keep medical devices on secure VLANs, isolated from other systems. Should an attack occur, automated response ensures that mission critical systems are kept out of harm’s way, limiting an attack’s “blast radius” within the connected environment.

If your organization is concerned over its potential risk exposure due to the use of vulnerable medical equipment, or if you need to take steps to fortify your network against the increasing threat of cyberattacks, get in touch with us. Many of the world’s most respected healthcare providers trust Ordr to protect their networks, patients, and reputations from the effects of a cyberattack. We can help you, too.

Benjamin Stock

Benjamin Stock is the Director of Healthcare Product Management at Ordr. Previously, Ben worked as the Director of Clinical Equipment Systems and Project Support at SSM Health St. Louis, MO. With more than 15 years of experience in healthcare technology management, his wealth of knowledge in the Clinical Engineering space allows him to be a wonderful advocate for Ordr healthcare customers. Ben is also a Certified Biomedical Equipment Technician (CBET).

SANTA CLARA, Calif., Aug. 10, 2023 /PRNewswire/ — Ordr, the leader in connected device security, today announced that it was named a Representative Vendor in the Gartner Market Guide for Cyber-Physical Systems (CPS) Protection Platforms.

“Gartner defines the cyber-physical systems (CPS) protection platforms market as products and services that use knowledge of industrial protocols, operational/production network packets or traffic metadata, and physical process asset behavior to discover, categorize, map and protect CPS in production or mission-critical environments outside of enterprise IT environments.” Gartner defines CPS as “engineered systems that orchestrate sensing, computation, control, networking and analytics to interact with the physical world (including humans).”

“As threats multiply, a once generic operational technology security market is rapidly evolving into distinct categories. Cyber-physical systems protection platforms that discover and protect assets in production or mission-critical environments are emerging as a leading market category,” noted Katell Thielemann, Distinguished VP Analyst, and Wam Voster, VP Analyst at Gartner.

“Due to their very nature, cyber-physical systems in industries such as manufacturing, smart cities and healthcare are increasingly targeted by attackers,” said Jim Hyman, CEO of Ordr. “We’re seeing organizations embrace an asset-centric approach to cybersecurity, to address the complexity and variety of old and new assets. Ordr differentiates not only via the depth of our asset and attack surface visibility capabilities, but more importantly – for our ability to secure every asset via automated policies including Zero Trust segmentation.”

Key findings of the Gartner Market Guide include:

• The CPS protection platforms market is growing, as adoption accelerates due to increased threats, existing and new vendors position more aggressively in the market, and new entrants target underserved vertical industries.
• Once focused mainly on passive deep packet inspection, most vendors now seek differentiation and richer inventories with a variety of additional techniques, including native protocol active queries.
• They also rapidly deploy additional functionalities such as vulnerability management, threat intelligence, visualizations, alerts, playbooks or feeds into other IT security (and inventory) tools, thereby creating a new asset-centric security discipline for CPS security.

Ordr is the only purpose-built platform to discover and secure every connected asset, including traditional IT, IoT, IoMT, OT, and cyber-physical systems. The platform quickly grants visibility into the make, model, serial number, location, and application/port usage of each device, establishing an accurate view of the attack surface, highlighting vulnerabilities, end-of-support, recalls, and weak passwords. Risk scores are calculated to help teams prioritize remediation and mitigation, and security policies for Zero Trust segmentation or threat response are established.

For more information, learn how Ordr helps enterprise organizations discover and secure every connected device in the network.

Gartner, Market Guide for CPS Protection Platforms, By Katell Thielemann, Wam Voster, Published 29 June 2023. 

Gartner Disclaimer

GARTNER is a registered trademark and service mark of Gartner, Inc. and/or its affiliates in the U.S. and internationally and is used herein with permission. All rights reserved.

Gartner does not endorse any vendor, product or service depicted in its research publications, and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner’s Research & Advisory organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.

SANTA CLARA, Calif., February 1, 2021 — Ordr, the leader in security for enterprise IoT and unmanaged devices, has been named a Representative Vendor in the Gartner 2020 Market Guide for Medical Device Security Solutions.

The Gartner Market Guide identifies the growth and importance of medical device security solutions in Healthcare Delivery Organizations (HDO). Medical device security solutions enable organizations to securely manage Internet of Medical Things (IoMT) devices, ensure IoMT endpoint and data security, and perform asset discovery.

According to Gregg Pessin, Sr. Director Analyst at Gartner, “The variety and scale of security risks in an IoMT-rich healthcare environment is high, with a large and complex threat surface. Most sensor-based things have minimal internal computing resources, with limited opportunities for antivirus, encryption and other forms of protection within these things,”

As described in the report, “HDOs have, on their own, developed a set of requirements needed to address the inherent risk for medical devices operating within their environments. The vendors in this market space have responded with capabilities designed to meet these requirements.” Major functional requirements for medical device security solutions include:

• Asset Discovery
• Risk Analysis
• Risk Mitigation
• Event Detection and Response
• Device Analytics

“We work with many leading healthcare organizations, and for our customers, security starts with asset discovery,” said Greg Murphy, CEO of Ordr. “Ordr’s comprehensive visibility and classification of all connected devices, from medical devices critical to patient care, to HVAC systems and video surveillance cameras that may serve as an attack vector, is what differentiates our platform. Once we classify devices and profile device behavior, decisive steps can be taken and enforced to mitigate risks. This is particularly critical with expensive medical devices that may have obsolete operating systems that are unable to be regularly patched or updated.”

Gartner Disclaimer
Gartner does not endorse any vendor, product or service depicted in its research publications, and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner’s Research & Advisory organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.

About Ordr
Ordr makes it easy to secure every connected device, from traditional IT devices to newer and more vulnerable IoT, IoMT, and OT. Ordr Systems Control Engine uses deep packet inspection and advanced machine learning to discover every device, profile its risk and behavior, map all communications and protect it with automated policies. Organizations worldwide trust Ordr to provide real-time asset inventory, address risk and compliance and accelerate IT initiatives. Ordr is backed by top investors including Battery Ventures, Wing, and TenEleven Ventures. For more information, visit www.ordr.net and follow Ordr on Twitter and LinkedIn.

SANTA CLARA, Calif., April 8, 2021 — Ordr, the leader in security for all connected devices, today announced a dramatic increase in its channel partner portfolio, including new international partnerships in Europe and APAC. Ordr grew the number of active strategic partners by three-fold, while expanding into new regions and vertical industries. Today, Ordr channel partnerships broadens Ordr’s reach to over 50 countries, with international sales growing by more than 400% in the past 6 months.

As the number of connected devices on corporate networks—from IP-enabled video surveillance cameras, medical devices and smart displays to building automation systems—has grown exponentially, they have become lucrative targets for attack. These connected devices, including critical and expensive Internet of Medical Things (IoMT), Internet of Things (IoT) and Operational Technology (OT) devices, commonly run legacy software, cannot support endpoint security agents, and cannot be patched easily and are thus an inherent risk to an organization. The only way to reduce threat exposure is to first identify every connected device, understand its behavior and the risks it brings, then proactively apply proactive segmentation policies through firewall rules or NAC policies that permit only necessary and safe communications.

Ordr launched an IoT and Asset Discovery Program for partners last year to help their customers quickly address asset inventory needs, and uncover shadow IoT devices and their corresponding risks. The program participation by partners has grown by three-fold. Thanks to Ordr’s unprecedented visibility, this program has accelerated sales cycles and has netted key customer wins for partners across critical verticals including manufacturing, higher education, healthcare and financial services.

Carousel Industries, an active participant in the Ordr IoT and Asset Discovery Program, has been announced as Ordr Partner of the Year due to its demonstrated excellence in delivering, integrating and building solutions enabled by Ordr. “In the past year, Carousel Industries has built a methodology to seamlessly incorporate the management of IoT and connected devices into their existing network and security practices. Carousel has been able to use the IoT and Asset Discovery Program insights to more effectively position Ordr for device visibility, NAC acceleration and segmentation use cases and help our joint customers better take advantage of their infrastructure investments,” said Eric Berkman, VP Channel Sales, Ordr.

“We are honored to be Ordr’s Partner of the Year,” said Jason Albuquerque CIO/CSO of Carousel Industries. “The number and complexity of threats that we defend against on a daily basis, requires a proactive approach to security. A critical strategy in protecting an organization’s most sensitive assets, is having complete visibility of all devices on the network, with the capability to automatically generate policy protections and network segmentation.  That is a critical value proposition and this is why we partner with Ordr.”

Ordr’s focus on global channel partnerships provides new opportunities to protect customers of all sizes around the world from the inherent vulnerability in any network-connected device on a corporate or guest network. Ordr has signed with global distributor SYNNEX Corporation, leveraging their GOVSolv GSA Schedule program. From a feature perspective, Ordr boasts deep product integrations that include network and security leaders such as Cisco, Splunk, Check Point, Anomali and Fortinet.

“We are excited to be one of Ordr’s first Value-Added Resellers (VARs) in the DACH region.  We not only trust in their leadership but worked with Ordr on one of their largest German customers and were impressed with the ease of deployment of such a large scale rollout.  Ordr is our choice for IoT and unmanaged device security, and we are excited to represent Ordr throughout the region,” said Fritz Eberhart, CEO, Secadm, now part of MCL Group.

“Massive attacks against government entities have underscored the need for greater vigilance,” said Ed Somers, Vice President Public Sector, SYNNEX.  “Along with new legislation like the IoT Cybersecurity Improvement Act and Cybersecurity Maturity Model Certification (CMMC), the urgency to protect government organizations with solutions like Ordr will increasingly become the norm, not the exception.”

Contact us to learn more about Ordr’s partner program.

About Ordr

Ordr makes it easy to secure every connected device, from traditional IT devices to newer and more vulnerable IoT, IoMT, and OT. Ordr Systems Control Engine uses deep packet inspection and advanced machine learning to discover every device, profile its risk and behavior, map all communications and protect it with automated policies. Organizations worldwide trust Ordr to provide real-time asset inventory, address risk and compliance and accelerate IT initiatives. Ordr is backed by top investors including Battery Ventures, Wing, and TenEleven Ventures. For more information, visit www.ordr.net and follow Ordr on Twitter and LinkedIn.

In the past few years, the United States has made more moves against technology companies that are based in China or backed by the Chinese government. To name a few:

• Hikvision – IoT cameras
• Dahua – IoT cameras
• iFlytek – voice recognition software
• Megvii – image recognition and deep-learning software
• SenseTime – facial, text, and image recognition, object detection, medical image analysis, and more
• Yitu Technologies – facial and speech recognition, natural language processing, and more
• And attempts to ban Huawei – telecommunications equipment

In late 2019, in response to the discovery of backdoors that facilitated communication between cameras made in China and destinations inside China, the U.S. government amended the National Defense Authorization Act to prohibit the U.S. government from purchasing and installing Chinese-made surveillance cameras. Other governments around the world followed suit.

Along with the NDAA amendments, the government advised that all federal agencies would have to remove the devices by August 13, 2019. At last check, there were still thousands of the devices in service. Once deployed, it seems, the cameras have been difficult to account for—despite a Department of Homeland Security mandate that federal agencies be able to track every device attached to their networks.

“There are all kinds of shadowy licensing agreements that prevent us from knowing the true scope of China’s foothold in this market,” The Freedonia Group’s Peter Kusnic told Bloomberg News. “I’m not sure it will even be possible to ever fully identify all of these cameras, let alone remove them. The sheer number is insurmountable.”

Depending on who you ask, by 2025 there will be between 41.6 billion and 83 billion IoT devices deployed to networks worldwide. A vast majority of these devices were created for ease-of-use by consumers, rather than with security in mind. Yes, both can exist in an ideal world, but for IoT devices, it is very uncommon. These devices often have obsolete or unsupported operating systems, unpatched vulnerabilities, and a lack of proper communication protocols.

As we know from the experience of the federal government, once deployed it can be difficult to find these devices making it nearly impossible to remove them if needed. Organizations are continuing the plight to ensure all connected devices are accounted for and the U.S. government is now attempting to do that through a number of directives from the National Institute of Standards and Technology (NIST) designed to ensure secure deployment, management, and operation of all network connected devices. These include standards like the NIST Cybersecurity Framework (CSF) and the Federal Information Processing Standard (FIPS) 140-2, requiring validated cryptography for device communications.

But, as the U.S. federal government’s experience with Chinese surveillance cameras illustrates the issue of unmanaged devices – one that every organization must grapple with. How do you find and secure the devices that are putting your organization at risk (Mirai, dark_nexus, malware, C2 takeovers, etc.)?

Find out more about how Ordr can help your organization discover and classify all network devices, identify high-risk devices (CVEs, FDA recalls, etc.), and give your team the ability to assign policies that protect your enterprise.  

Segmentation Done Right – Part 2 of 3

Segmentation is a good thing, and there are many use cases for segmentation done the right way. What tools then do we implement to get started with segmentation, and are there some pitfalls to avoid? The idea is simple, but one doesn’t want to design cost and complexity into the equation from the start. A flexible yet granular segmentation system with ample room to grow is what you need.

The traditional way of doing segmentation was to use the perimeter firewall—one side was trusted and safe, and on the outside was the big bad world. With many intrusions, however, a small breach means the damage is difficult to contain.  Take it a step further, and one can deploy multiple virtual networks, or VLANs, to further segment and create various “safety zones” inside the network, then leverage routers and Layer 3 switches to control access between the virtual segments.

Dynamic Applications vs. Traditional Methods

Using VLANs is pretty intuitive—place all things of a particular type into the same virtual segment. But VLANs are manually intensive—each new device must be manually categorized and assigned the correct VLAN. Each new group needs its own VLAN and a painful call to the IT desk to allocate a new VLAN across the enterprise, each with its own unique IP address space. And don’t forget the VLAN boundaries. ACL policies need to be consistently deployed at each of the routers and L3 switches to control the flow between VLANs, or else what was the reason for creating new VLANs in the first place?

Furthermore, the world of applications is dynamic, so boundaries can’t be so rigid. When one creates and deploys a new application using an Auto Scaling group, which contains a collection of Amazon EC2 instances, an IP address is dynamically assigned. Frequently this application will need to move around various network segments. If one applies a rigid approach to segmentation, there will be too many strict routing rules to navigate since traffic is only allowed when information is on a pre-defined list. Moving around is hampered, and a permissible list has to be updated continuously manually. In today’s environment, network ports are dynamic, DHCP is dynamic, applications are active, and we think segmentation should be flexible and smart.

Let us go back to the middle school example from last week. Students in their classrooms can further represent segmentation. Grades and different classrooms separate children, and each class has a teacher. Typically, (or in some cases hopefully) the children are expected not to interact with each other during lessons and only interact with the teacher. Likewise, when you have a class of IoT devices, rarely do these devices need to communicate or talk to each other. If anything, one MRI machine talking to another or sharing a snack should not happen.

So if this orderly communication between a teacher and student makes sense in a classroom or “segment,” then why do we lump similar devices such as cameras, X-Ray machines, or workstations together into their respective segment, VLAN or subnet with the notion that they are protected? These devices should talk to a central master and externally to get a patch once in a while, but not each other. If one device is compromised, there goes the notion of protection via segmentation. If junior in class catches the flu, other students in the same class are likely to get sick, too. Likewise, if a workstation is compromised and it’s in the same VLAN with other workstations, how does one contain the damage?

Traditional segmentation often places all sorts of devices of a general category into the same group/segment, and any infection of one will quickly spread to the rest. At Ordr, we segment smartly and take it further with micro-segmentation. We can group and segment things logically, and we can control the flow between the logical segments. Micro-segmentation divides networks down to the workload level and then defines specific security controls and policies for these specific segments and workloads. It’s a more granular and logical approach than physical segmentation via physical firewalls, making it easier for network and security administrators.

If a device becomes infected, we can contain the damage and not let it spill over, thus help you regulate and protect precious assets and information. Next week we will discuss segmentation automation and how one can generate clear policies using observed behavior. Be smart and control the flow between segments and do segmentation in an Ordr’ly way.

Read Segmentation Done Right – Part 3: Take Control.

Pandian Gnanaprakasam

Pandian has more than 20 years of product and engineering leadership experience and is also a serial entrepreneur. Before founding Ordr, he was the Chief Development Officer at Aruba, responsible for all of engineering and product management functions. Aruba, an enterprise mobile wireless company, was acquired by HPE for $3 Billion in March 2015. Before Aruba, Pandian served as the head of engineering for Cisco’s multi-billion-dollar Wi-Fi business unit and before that as VP of engineering for low-end switching product lines. He graduated with a master’s degree in Electrical Engineering from IIT, Chennai, India and holds several patents to his credit in various networking technologies.

It’s an exciting time at Ordr. Since securing our Series C funding in June we’ve been growing and building for a future that relies more and more on connected devices. Ordr’s mission is to protect those connected assets, and we execute against that mission passionately each day by building the world’s most accurate and complete device context repository using network intelligence.

Many factors are now coming together to drive the next level of growth for Ordr:

• Our connected device security market is growing rapidly.
• Our balance sheet is stronger than ever, fueled by our customer growth and the support of our investors.
• Our product-market fit is seamless.
• Our team is more energized than ever.

On top of this durable foundation, we welcome a leader who will lead Ordr to greater heights. I want to personally extend a warm welcome to Jim Hyman, our new CEO.

Thank You, Greg Murphy

Greg Murphy led the company for the last four years and has been an integral part of our success. I want to thank Greg for all his contributions to Ordr. It is difficult to fully convey our appreciation and gratitude to Greg in simple words, but his consistent thoughtfulness and emphasis on teamwork will continue to reverberate in our hallways. The business momentum, along with the customer-first culture established under his exceptional leadership is woven into our core values and sets us up for the next growth phase.

Greg has truly positioned the company for future success, and we are immensely proud of our work to solve very complex security problems for our customers. Under Greg’s leadership we built an unrivaled security platform from the ground up, with rich features and a flexible open interface, on the foundation of a modern tech stack. Today, Ordr has an impressive and growing list of leading healthcare and enterprise customers using our products to safeguard their devices, their networks, and their entire business. These organizations- some of the world’s largest–validate our approach and strategy every day.

Welcome, Jim Hyman

Jim Hyman joins us at this important time, bringing an incredible background and deep experience to spearhead Ordr’s mission and supercharge our growth. Jim has taken businesses like ZScaler, Trusteer (acquired by IBM), and IronPort (acquired by Cisco) from the initial stages to business success. Most recently, Jim was the COO & CRO of Synack, a crowdsourced security company and undisputed leader in its space. Jim is a world-class executive with expertise in go-to-market execution and operations strategy, and brings to us a passion for customer success and growth.

I am excited about our next transformational stage and look forward to partnering with Jim as we execute our mission, accelerate our growth, and rapidly expand Ordr’s use cases for multiple personas across our target verticals. We will continue to build the world’s most formidable data lake—the Ordr Data Lake—to become the single source of truth for connected devices. We remain committed to innovation, creativity, and problem-solving for our customers.

Welcome to Ordr 2.0

Our partner-centric and customer-first culture will continue to be a priority, supported by our exceptionally talented and passionate team. I feel fortunate to be at a company in the leading position of a dynamic and growing market. More than ever, now is the time to accelerate our growth with Jim leading the charge.

I want to personally thank you all for your support over the years as we put our heads down to take our business to the next level. Welcome to Ordr 2.0!

Pandian Gnanaprakasam

Pandian has more than 20 years of product and engineering leadership experience and is also a serial entrepreneur. Before founding Ordr, he was the Chief Development Officer at Aruba, responsible for all of engineering and product management functions. Aruba, an enterprise mobile wireless company, was acquired by HPE for $3 Billion in March 2015. Before Aruba, Pandian served as the head of engineering for Cisco’s multi-billion-dollar Wi-Fi business unit and before that as VP of engineering for low-end switching product lines. He graduated with a master’s degree in Electrical Engineering from IIT, Chennai, India and holds several patents to his credit in various networking technologies.

SANTA CLARA, Calif, June 15, 2021 /PRNewswire/ — Ordr, the leader in agentless security for all connected devices, today announced that it has been named a CyberTech100 company for 2021. The CyberTech100, an annual list of the world’s most innovative CyberTech organizations, recognizes pioneering companies that help financial institutions combat cyber threats and fraud. A panel of analysts and industry experts voted from a list of over 1,000 companies produced by FinTech Global, a specialist research firm. The finalists were recognized for their innovative use of technology to solve a significant industry problem, or to generate cost savings or efficiency improvements across the security value chain.

The CyberTech industry for financial services has seen huge growth over the last four years as operations are increasingly moving to the cloud and organizations expand their spending on securing new digital infrastructure. Total annual investments in the sector grew from $0.7 billion in 2016 to over $6.2 billion in 2020.

As the number of connected devices on corporate networks — from IP-enabled video surveillance cameras to building automation systems — has grown exponentially, they have become lucrative targets for attack. These connected devices, including critical and expensive Internet of Things (IoT) and Operational Technology (OT) devices, commonly run legacy software, cannot support endpoint security agents, and cannot be patched easily and are therefore inherently risky to an organization.

Ordr Systems Control Engine mitigates risks and threats by first identifying and classifying every connected device, profiling its behavior and identifying its risks. Then Ordr automates security actions to secure these devices at scale. including both immediate remediation when compromised and Zero Trust proactive segmentation policies on firewalls, switches or network access control systems that permit only necessary and safe device communications.

“Security executives working in financial services need to be aware of the latest innovation and threats in the market in order to protect client and company data as well as fend off cyber and financial criminals,” said Richard Sachar, director at FinTech Global. “The CyberTech100 list helps them do just that and identify new technologies which will have lasting impact on the industry and attackers’ behavior.”

“The increase in high-profile cyber attacks this year has been a wake up call for all industries— financial, healthcare, manufacturing, oil and gas, and even the food supply chain,” said Greg Murphy, CEO of Ordr. “You simply cannot protect what you can’t see, and criminals are able to quickly identify vulnerable devices and propagate devastating malware before a company knows what has happened. We expect the financial services industry to continue to upgrade its approach to device security with ransomware on the rise.”

A full list of the CyberTech100 and detailed information for each company is available to download at www.CyberTech100.com.

Santa Clara, CA – November 29, 2022 – Ordr, the leader in connected device security, today published a maturity model aimed at helping healthcare organizations benchmark their connected device security efforts and develop a strategy to improve the efficiency and strength of their security programs.

Entitled “A Practical Guide: Implementing Connected Device Security for Healthcare Organizations,” the document serves as a framework for healthcare security teams, helping them understand where their organization is on the connected device security maturity curve, and where to focus efforts to make improvements. The guide organizes the stages of maturity into five steps, including detailed descriptions, requirements, and the potential business value realized at each stage. Recommended actions, technical considerations, and helpful insights are included as well, to help teams learn how to improve their security posture, become more resilient, and advance their security efforts as they move toward Zero Trust.

Connected devices play an essential role within a healthcare organization – gathering data, providing diagnostics and therapeutic functions, and automating activities. But those same connected devices also expand the attack surface and create risk for healthcare providers. In fact, the healthcare sector faced the most ransomware attacks of any industry last year, according to the FBI’s 2021 Internet Crime Report, resulting in losses of $6.9 billion.

“A majority of healthcare organizations today rely on Internet of Things (IoT), Internet of Medical Things (IoMT), and Operational Technology (OT) devices to provide critical patient care, improve efficiencies, and manage the facility. The truth is, connected devices are everywhere in healthcare, which can make protecting them a daunting task,” said Pandian Gnanaprakasam, Chief Product Officer and co-founder of Ordr. “At Ordr, we’ve gained deep expertise working with customers of all sizes and at all stages of maturity. We understand the complexities that security teams in healthcare struggle with everyday – and we’re proud to share our insights with the community, to be used as a guide on the journey to Zero Trust.”

The five steps of the maturity model include:

1. Asset Visibility: This stage includes creating a complete, accurate and up-to-date asset inventory by automating discovery and classification for all known, unknown, and new devices, in addition to identifying risks.
2. Vulnerability and Risk Management: This stage encompasses creating a risk-based view of connected devices by combining device vulnerability insights, establishing device behavior baselines, and reviewing external threat intelligence inputs to gain a comprehensive view of the attack surface, guiding security efforts.
3. Reactive Security: This stage uses connected device insights and the risk-based view from the previous stages, combined with business context, to help teams understand device risk in their unique environment, prioritizing risk mitigation and incident response efforts.
4. Proactive Security: In this stage, teams automate policies and workflows to ensure rapid threat detection and response. Teams also develop and implement proactive measures such as Zero Trust segmentation to reduce the attack surface ahead of threats, enabling teams to focus on more complex threats.
5. Optimized Security: At this stage, teams continue to build on the foundation they have created to expand and optimize their security methods with automation and proactive Zero Trust security policies, aligning and scaling with organizational demands.

“While all industries are at risk of cyberattack, the potential outcomes of attacks on healthcare organizations could be catastrophic, with real consequences for patients,” added Brad LaPorte, author of the guide and former Gartner cybersecurity analyst. “Organizations cannot expect to reach the Optimized Security stage instantly. Each stage establishes critical capabilities, builds upon previous stages, and creates value on the journey to Zero Trust. No matter where you are on this journey and what your ultimate goal is, this guide provides essential insights to understanding your security posture – and what is needed to improve.”