Customer Story
MEDHOST Uses ExtraHop RevealX to Help Protect Healthcare Customers and Patients
MEDHOST delivers market-leading healthcare engagement solutions nationwide to healthcare facilities of all types and sizes.
The CHALLENGE
Protecting sensitive medical and personal data from malicious actors and defending network security across their hybrid environment.
Healthcare is a prime target for bad actors. With ExtraHop RevealX, we have forensic knowledge at our fingertips that helps us stop attacks cold—before they can impact our systems or our customers' systems.
Todd Williams Director of Information Security, MEDHOST
The Technology Environment
- Hosts Electronic Health Record (EHR), Emergency Department (EDIS), Patient Portal and Revenue Cycle platforms to support hospitals across the country.
WHY REVEALX
Why MEDHOST Chose RevealX
Secure decryption and traffic inspection
- "ExtraHop can decrypt and inspect things like Active Directory and TLS 1.3 protocols in-line across my entire network, including east-west traffic. I don't have to go through 15 change management cycles and three months' worth of work with development teams and server teams just to go see our own traffic. It's game-changing,” says Williams.
Deep visibility
- "Visibility used to be a real issue. ExtraHop really opened our eyes and allowed us to put our arms around all the data—especially with the addition of RevealX, which gives us behavior monitoring. It's always watching. Combined with our log aggregation, RevealX gives us a complete picture of activity that's happening on the network,” says Williams.
The Outcome
More Efficient Security and Network Coordination
Baked-in security
- ExtraHop allows MEDHOST to build security frameworks and layered security controls right down to the OSI layer.
The fifth man
- MEDHOST security currently consists of four engineers, and Williams describes RevealX as "the 5th man,” because it scans and records even when the security team isn't present.
Detection of threats other tools miss
- "Right out of the box, we plugged RevealX into the network and turned it on at 8:00, and it was scanning our network by 8:01. As the day went on, we continued to get alerts—but none of our other security tools indicated that we had an issue. After a simulation of the domain takeover at 8:00 that night, we finally got an alert from another tool indicating that an incident had taken place—far too late to act on the information,” says Williams.
Is RevealX right for you?
Products
What will your story be?
Security
Network Detection & Response (NDR)
RevealX NDR
Use the power of network visibility and AI for real-time detection, rapid investigation, and intelligent response for any threat.
Product overview
Performance
Network Performance Monitoring (NPM)
RevealX NPM
Use network data and machine learning to identify network and application performance issues and expedite time to response.
Product overview