How did ProHealth use Ordr to inventory thousands of medical devices across multiple healthcare facilities?

ProHealth implemented automated device discovery through Ordr's platform, enabling identification and cataloging of medical devices across distributed care sites without manual intervention. This eliminated blind spots in device inventory and reduced the time and resources required for comprehensive asset visibility. Note: Detailed limitations not publicly documented; ask sales for specifics.

Can Ordr segment medical devices without disrupting clinical workflows or HIPAA compliance?

Yes. ProHealth deployed network segmentation strategies using Ordr that isolate medical devices and protect sensitive patient data while maintaining uninterrupted clinical operations. Ordr's approach ensures segmentation policies align with healthcare regulations and do not create operational bottlenecks. Note: Best fit for organizations prioritizing regulatory compliance; teams with highly custom network architectures may require additional validation.

What operational and security benefits did ProHealth achieve with centralized medical device management using Ordr?

ProHealth reduced operational overhead and security risks through centralized visibility and management of medical devices across all sites. By consolidating device management with Ordr, the health system lowered IT costs, improved response times to security threats, and strengthened their overall security posture without additional infrastructure investment. Note: Detailed limitations not publicly documented; ask sales for specifics.

What are the main business impacts organizations can expect from using Ordr?

Organizations using Ordr can expect improved security posture by eliminating blind spots, operational efficiency gains (up to 90 person-hours saved weekly), faster incident response (reducing threat dwell time from 270 days to as little as 48 hours), simplified compliance with continuous monitoring and audit-ready reporting, and cost savings through automation and up to 25% reduction in device count. Note: Best fit for organizations with complex device environments; organizations with minimal connected devices may see less impact. Source: https://ordr.net/solutions/asset-visibility-and-management

What features does Ordr offer for healthcare organizations managing medical devices?

Ordr provides automated asset discovery, AI-driven device classification, risk-based vulnerability management, automated policy enforcement, real-time threat detection and containment, and continuous compliance monitoring. These features are designed to support healthcare-specific needs such as HIPAA compliance, medical IoT security, and operational continuity. Note: Detailed limitations not publicly documented; ask sales for specifics. Source: https://ordr.net/solutions/asset-visibility-and-management

Does Ordr integrate with existing security and IT tools?

Yes, Ordr supports over 130 out-of-the-box integrations, including firewalls (Cisco, Palo Alto Networks, Fortinet, Check Point), NAC (Cisco ISE, Aruba ClearPass, Forescout), SIEM/SOAR (Splunk, IBM QRadar, Microsoft Sentinel), ITSM (ServiceNow, BMC Remedy), clinical systems (Epic, Cerner), and vulnerability scanners (Tenable, Qualys, Rapid7). Note: Some integrations may require additional configuration or licensing. Full list of integrations: https://ordr.net/integrations

Does Ordr provide an API and technical documentation?

Yes, Ordr provides a comprehensive API and technical documentation for all products. These resources are available through the Ordr support portal and are designed to help customers integrate and manage the platform effectively. Note: Access to some documentation may require a support portal login. https://support.ordr.net/support/login

What security and compliance certifications does Ordr have?

Ordr is SOC 2 Type II certified, has been independently audited for Security, Availability, and Confidentiality Trust Service Criteria, and complies with GDPR and CCPA. Ordr is also evaluating ISO 27001 certification as part of its ongoing compliance roadmap. Note: ISO 27001 certification is not yet complete as of June 2024. https://ordr.net/trust-center

How does Ordr help healthcare organizations maintain HIPAA compliance?

Ordr provides continuous compliance monitoring, audit-ready reporting, and automated enforcement of segmentation policies to help healthcare organizations maintain HIPAA compliance. The platform is designed to protect sensitive patient data and support regulatory requirements without disrupting clinical operations. Note: Organizations with highly customized compliance needs should validate fit with Ordr's compliance features. Source: https://ordr.net/solutions/asset-visibility-and-management

How long does it take to implement Ordr and see results?

Ordr is designed for rapid deployment. Initial device discovery and visibility can be achieved within 24–48 hours of deployment, and enforcement policies can be deployed in just a few days—significantly faster than the industry norm of 12–24 months. Note: Actual timelines may vary based on network complexity and integration requirements. https://ordr.net/support

What support and training resources are available to Ordr customers?

Ordr offers 24/7 customer support from expert engineers, Ordr University training modules for onboarding and skill development, and comprehensive resources including product documentation, knowledge base articles, and case management tools. Note: Some resources may require a support portal login. https://ordr.net/support

Ordr's pricing is based on your organization's specific needs and environment. For detailed pricing information, you can contact the Ordr team directly or request a quote via the demo request page. Note: Exact pricing is not publicly disclosed. https://ordr.net/request-demo

What feedback have customers shared about Ordr's ease of use?

Customers have highlighted Ordr's intuitive design, quick deployment, and immediate delivery of actionable insights. For example, University Hospital Southampton reported, 'We liked the simplicity of the ORDR solution coupled with its forensic-level insight. It's very intuitive and quick to install (even on a network of this size) and it instantly started cataloging and risk profiling every single device on our network.' Note: User experience may vary based on deployment size and complexity. https://ordr.net/customer-stories

Can you share specific case studies or success stories of Ordr customers?

Yes. Notable examples include Cleveland Clinic (real-time inventory and risk management for 10–15 connected devices per hospital room), CHRISTUS Health (accelerated data center micro-segmentation), Beebe Healthcare (visibility into over 8,000 devices), and Richmond upon Thames College (full campus visibility within days). Each case demonstrates measurable improvements in visibility, compliance, and security. Note: Outcomes may vary by organization. https://ordr.net/customer-stories

How does Ordr compare to visibility-only platforms?

Visibility-only platforms typically offer basic asset discovery limited to IT devices and use static policy templates. Ordr provides real-time, automated asset discovery and classification across IT, IoT, OT, and medical devices, with AI-driven behavioral fingerprinting for deeper insights. Ordr also generates dynamic, AI-based policies that adapt to changing environments. Note: Visibility-only platforms may be sufficient for organizations with only IT assets and minimal segmentation needs. Source: https://ordr.net/solutions/asset-visibility-and-management

How does Ordr compare to traditional vulnerability management tools?

Traditional vulnerability management tools rely on static assessments and manual risk prioritization. Ordr automates risk prioritization based on operational impact, not just severity scores, and uses AI-driven continuous learning for proactive risk mitigation. Ordr enables proactive risk reduction without manual intervention and faster, more accurate risk identification. Note: Traditional tools may be preferred for organizations focused solely on IT vulnerability scanning. Source: https://ordr.net/solutions/asset-visibility-and-management

How does Ordr compare to compliance-only solutions?

Compliance-only solutions focus on manual evidence collection and are often limited to specific frameworks. Ordr provides continuous compliance monitoring and audit-ready reporting for multiple frameworks (HIPAA, PCI DSS, FERPA), with automated workflows that reduce audit preparation time. Note: Compliance-only solutions may be suitable for organizations with narrow regulatory requirements. Source: https://ordr.net/solutions/asset-visibility-and-management

How does Ordr compare to static policy enforcement tools?

Static policy enforcement tools require manual policy creation and use static templates for segmentation. Ordr generates policies based on real traffic and device behavior, adapting dynamically as environments change. This results in faster policy deployment and enforcement with minimal manual effort. Note: Static tools may be preferred for environments with infrequent changes. Source: https://ordr.net/solutions/asset-visibility-and-management

ProHealth achieves automated discovery and visibility of unmanaged devices and accelerated campus network segmentation with Ordr

Medical devices are expensive. ORDR allows us to potentially reduce costs by identifying and repurposing underutilized devices. When we do need to buy more equipment, we can now optimize our investments by making intelligent data-driven decisions about the types of devices to buy and exactly which sites need them the most.
Dave Yaeger
Biomed Security DBA, ProHealth Care

ProHealth, founded over a century ago, provides a multitude of services ranging from fitness and wellness, home health care, hospice care, hospital care, occupational health, primary care, rehabilitation, specialty care, senior living, urgent and emergency care, and virtual (telehealth) visits. The diversity of services contributed to IT and Biomed challenges such as accurately identifying and securing all network connected IoT and medical IoT devices across many types of sites.

ProHealth selected the Ordr Systems Control Engine (SCE) to transform its business operations—automatically discovering connected devices, understanding risks and usage, and accelerating segmentation. The Ordr SCE enables both IT and Biomed teams within ProHealth to keep up with HIPAA compliance requirements and automate security operations, ultimately resulting in reduced operational costs and increased quality of patient care.

Industry: Healthcare

ProHealth Care is a leading healthcare provider in Waukesha County, Wisconsin, and surrounding areas. With 4,700 employees and nearly 1,000 doctors and other health professionals, ProHealth Care is the largest healthcare provider between Milwaukee and Madison — treating more than 400,000 patients a year.

The Challenge

Multiple teams at ProHealth were leading initiatives to identify all network-connected unmanaged devices, baseline their behavior, and define network security policies to protect them. The primary challenge with these initiatives was the excessive number of manual tasks which resulted in increased operational costs for each step.

"We have a robust CMMS (Computerized Maintenance Management System) platform, but medical devices are constantly moving and being added to the network. Tracking thousands of medical devices is a tremendous challenge," said David Yaeger, Biomed Security DBA for ProHealth.

Both teams were aware of gaps in their existing CMMS and CMDB (Configuration Management Database) systems and knew that manually tracking down each unmanaged device would not be feasible given the size of the environment, project deadlines, existing workloads and budgetary constraints. Furthermore, existing network visibility toolsets such as NetFlow, IPFIX, and AVC (Application Visibility and Control) were not able to accurately identify unmanaged devices on the network. Legacy tools capable of providing visibility at the level of IP, MAC address, and L4 source/destination traffic were not practical when working with unidentifiable unmanaged IoT or medical IoT devices.

"When it comes to segmentation, the information provided by device manufacturers does not adequately or accurately explain basic network communication requirements such as which TCP/UDP ports are required," said Joel Benson, Network Engineer for ProHealth.

Biomed Team Challenges

Maintain a current list of all medical IoT devices (managed and unmanaged)
Keep track of which medical devices have vulnerabilities or recalls
Gain an understanding of how medical IoT devices are utilized

IT Networking Team Challenges

Overarching initiative to identify and secure all types of unmanaged IoT/IoMT devices
Understand how each type of unmanaged device communicates on the network
Build security policies to protect many types of vulnerable, unmanaged devices

The Solution

The teams initially considered using their existing legacy systems and manual processes, but after seeing Ordr SCE, they knew an automated device visibility and security solution was the route to take.

"Ordr automatically identifies all our network connected devices and then monitors the traffic of each device. This enables us to automate the creation of security ACLs (Access Control Lists) which speeds up our entire segmentation process," said Benson.

Ordr accelerates network segmentation by dynamically generating these ACLs based on device identity and behavior over time. These network security ACLs can be applied in many ways including NAC integrations like Cisco ISE downloadable ACLs, switch port ACLs, VLAN SVI (Switch Virtual Interface) ACLs, wireless LAN controller ACLs, or even via powerful edge firewall integrations with vendors such as Palo Alto Networks.

Business Benefits

The benefits of Ordr SCE are not limited to security for unmanaged devices and improvements in operational efficiency. Cutting-edge medical device utilization capabilities allow healthcare facilities to track how much a device is used and can even compare usage across multiple devices to quickly analyze patterns over time.

Ordr SCE offers a wealth of features and functionality, but for the ProHealth Biomed Team, it was the solution's advanced medical device utilization analytics that impressed them the most.

"Medical devices are expensive. Using this feature allows us to potentially reduce costs by identifying and repurposing underutilized devices. When we do need to buy more equipment, we can now optimize our investments by making intelligent data-driven decisions about the types of devices to buy and exactly which sites need them the most," said Yaeger.

Looking Ahead

ProHealth Care has a long legacy of delivering outstanding care across a wide spectrum of services. Network-connected IoT and medical IoT devices help enable innovative patient care and more efficient business operations. The Ordr SCE platform automates the visibility and security of these devices so ProHealth teams can focus on patient care without compromising security and compliance.

The teams at ProHealth plan to extend their deployment to track Windows patch levels and domain logins across all managed devices. They are looking to enable advanced Ordr integration features such as Windows Remote Management (WinRM) and Active Directory integration to address these use cases. ProHealth also continues to expand its network segmentation initiatives to protect patient data and all types of vulnerable unmanaged devices.

About Us

ORDR is the leader in AI-powered segmentation, securing some of the largest organizations in healthcare, transportation, manufacturing, and financial services. Having analyzed more than 100 million unique device types, the platform is purpose-built to solve the toughest security challenge: unmanaged and IoT assets that put business uptime on the line. By turning intelligence into swift, automated protection, ORDR helps teams contain threats, reduce exposure, and keep operations resilient — bringing ORDR to chaos.

ORDR is backed by top investors including Wing Venture Capital, Ten Eleven Ventures, Battery Ventures, Mayo Clinic Ventures, and Kaiser Permanente Ventures. For more information, visit www.ordr.net and follow ORDR on X and LinkedIn.

For more information, visit ordr.net

Frequently Asked Questions

Use Cases & Benefits

How did ProHealth use Ordr to inventory thousands of medical devices across multiple healthcare facilities?

Can Ordr segment medical devices without disrupting clinical workflows or HIPAA compliance?

What operational and security benefits did ProHealth achieve with centralized medical device management using Ordr?

What are the main business impacts organizations can expect from using Ordr?

Features & Capabilities

What features does Ordr offer for healthcare organizations managing medical devices?

Does Ordr integrate with existing security and IT tools?

Does Ordr provide an API and technical documentation?

Security & Compliance

What security and compliance certifications does Ordr have?

How does Ordr help healthcare organizations maintain HIPAA compliance?

Implementation & Support

How long does it take to implement Ordr and see results?

What support and training resources are available to Ordr customers?

Pricing & Plans

How is Ordr priced?

Customer Proof & Case Studies