Documented Firms Directory

Browse Verified MedTech / FDA 524B Firms

Medical device cybersecurity consultancies, regulatory submission support, device security engineering, and compliance risk, with the full verification pass pending.

FDA 524B • AAMI TIR57 • IEC 62304 • UL 2900

Showing 31 of 31 firms

Start an RFP
Partially verifiedResearch-Sourced

Compliance & risk. Healthcare cybersecurity risk assessment. HIPAA and FDA compliance programs.

Services: Healthcare cybersecurity risk assessment · HIPAA and FDA compliance programs · Medical device security risk management

Coverage: US, national · HQ Irvine, CA

Visit websiteclearwatercompliance.com
Partially verifiedResearch-Sourced

Regulatory consulting. FDA premarket cybersecurity consulting. 510(k)/PMA regulatory strategy.

Services: FDA premarket cybersecurity consulting · 510(k)/PMA regulatory strategy · Regulatory submission support

Coverage: US, national · HQ Austin, TX

Visit websiteemergobyul.com
Partially verifiedResearch-Sourced

Device security engineering. Medical device penetration testing. Premarket security engineering.

Services: Medical device penetration testing · Premarket security engineering · SBOM and vulnerability assessment

Coverage: US, national · HQ Miami, FL

Visit websitemedsecglobal.com
Partially verifiedResearch-Sourced

Device security engineering. Medical device vulnerability testing (DeviceSecure). Device security research and assessment.

Services: Medical device vulnerability testing (DeviceSecure) · Device security research and assessment · Premarket security support

Coverage: US, national · HQ Columbus, OH

Visit websitebattelle.org
Partially verifiedResearch-Sourced

Device security engineering. Medical device cybersecurity testing. SBOM and threat modeling support.

Services: Medical device cybersecurity testing · SBOM and threat modeling support · Premarket cybersecurity documentation

Coverage: US, national · HQ Skippack, PA

Visit websitercainc.com
Partially verifiedResearch-Sourced

Device security engineering. Medical device security evaluations. Device vulnerability and penetration testing.

Services: Medical device security evaluations · Device vulnerability and penetration testing · FDA cybersecurity guidance analysis

Coverage: US, national · HQ Menlo Park, CA

Visit websiteexponent.com
Partially verifiedResearch-Sourced

Regulatory consulting. Medical device software regulatory consulting. SBOM and cybersecurity documentation.

Services: Medical device software regulatory consulting · SBOM and cybersecurity documentation · FDA premarket cybersecurity guidance support

Coverage: US, national · HQ Toledo, OH

Visit websitenamsa.com
Partially verifiedResearch-Sourced

Device security engineering. Medical device cybersecurity testing. UL 2900 and IEC 81001-5-1 evaluation.

Services: Medical device cybersecurity testing · UL 2900 and IEC 81001-5-1 evaluation · Premarket cybersecurity documentation review

Coverage: US, national · HQ Northbrook, IL

Visit websiteulsolutions.com
Partially verifiedResearch-Sourced

FDA premarket cybersecurity. FDA premarket cybersecurity (510(k), De Novo, PMA, eSTAR). Medical device penetration testing and SBOM risk management.

Services: FDA premarket cybersecurity (510(k), De Novo, PMA, eSTAR) · Medical device penetration testing and SBOM risk management · Threat modeling aligned with AAMI SW96 and ISO 14971 · FDA deficiency response with 48-hour gap analysis +1 more

Coverage: US, national · HQ Not published

Engagements: 1 documented, latest in Medical devices

Visit websitebluegoatcyber.com
Partially verifiedResearch-Sourced

Medical device penetration testing and cybersecurity services, documented from public research.

Services: Medical device penetration testing · FDA 524B cybersecurity support

Partially verifiedResearch-Sourced

Cybersecurity services for medical devices, documented from public research.

Services: Medical device cybersecurity · FDA 524B cybersecurity support

Partially verifiedResearch-Sourced

FDA compliance consulting for connected medical devices, documented from public research.

Services: FDA 524B compliance consulting · Medical device cybersecurity

Partially verifiedResearch-Sourced

Medical device cybersecurity consultancy, documented from public research.

Services: Medical device cybersecurity · FDA 524B cybersecurity support

Partially verifiedResearch-Sourced

FDA-focused medical device cybersecurity consulting, documented from public research.

Services: Medical device cybersecurity · FDA 524B cybersecurity support

Partially verifiedResearch-Sourced

Regulatory and cybersecurity consultancy for medical devices, documented from public research.

Services: Medical device regulatory consulting · Cybersecurity documentation

Partially verifiedResearch-Sourced

FDA regulatory consulting for medical devices including cybersecurity documentation, documented from public research.

Services: FDA 510(k) regulatory consulting · Cybersecurity documentation

Partially verifiedResearch-Sourced

Medical device cybersecurity testing lab, documented from public research.

Services: Medical device cybersecurity testing · Penetration testing

Partially verifiedResearch-Sourced

Medical device software and cybersecurity engineering, documented from public research.

Services: Medical device cybersecurity · Secure software engineering

Partially verifiedResearch-Sourced

Medical device cybersecurity consulting with software expertise, documented from public research.

Services: Medical device cybersecurity consulting · Software forensics

Partially verifiedResearch-Sourced

Medical device security risk assessments and penetration testing, documented from public research.

Services: Medical device security risk assessment · Penetration testing

Partially verifiedResearch-Sourced

Medical device cybersecurity firm founded by former FDA reviewers, documented from public research.

Services: FDA 510(k) cybersecurity · Threat modeling · SBOM management · Incident response readiness review

Visit websitemedcrypt.com
Partially verifiedResearch-Sourced

Medical device cybersecurity consultancy, documented from public research.

Services: FDA cybersecurity strategy · SBOM preparation · Risk assessments · Postmarket cybersecurity

Visit websitemavenrs.com
Partially verifiedResearch-Sourced

Healthcare risk platform vendor with medical device incident response guidance, documented from public research.

Services: Incident response planning for medical devices · FDA 510(k) testing guidance · Postmarket surveillance

Visit websitecensinet.com
Partially verifiedResearch-Sourced

Penetration testing firm serving FDA 510(k) submissions, documented from public research.

Services: FDA 510(k) penetration testing · Cybersecurity risk management · Compliance testing

Visit websitequalysec.com
Partially verifiedResearch-Sourced

Cybersecurity consultancy for FDA 510(k) submissions, documented from public research.

Services: FDA 510(k) compliance services · Penetration testing · Vulnerability resolution

Visit websitekomodosec.com
Partially verifiedResearch-Sourced

CREST-accredited penetration testing firm serving FDA 510(k) submissions globally, documented from public research.

Services: FDA 510(k) readiness assessment · Vulnerability assessment and penetration testing · Gap analysis

Visit websitecyberintelsys.com
Partially verifiedResearch-Sourced

UK/US consultancy for medical device software FDA submissions, documented from public research.

Services: FDA 510(k) submission consulting · Cybersecurity documentation · Labeling and Part 11

Visit websiteqmlogic.com
Partially verifiedResearch-Sourced

FDA regulatory consultancy with 45 years and 1,800+ submissions, documented from public research.

Services: 510(k)/PMA submissions · Software penetration testing · Warning letter response

Visit websitemdiconsultants.com
Partially verifiedResearch-Sourced

Medical device cybersecurity firm with the ARIANNA compliance platform, documented from public research.

Services: SBOM/HBOM management · Continuous vulnerability monitoring · 510(k)/PMA submission support

Visit websitesecuritypattern.com
Partially verifiedResearch-Sourced

UK-based MedTech cybersecurity firm, documented from public research.

Services: Medical device penetration testing · FDA 510(k) cybersecurity controls · Post-market compliance

Visit websiteamicisgroup.co.uk
Partially verifiedResearch-Sourced

UK firm specializing in medical device incident response planning, documented from public research.

Services: FDA 510(k) incident response planning · HIPAA intersection · SaMD and connected device security

Visit websitesectechsolutions.co.uk

VendorQuals, Specialist Vendor Intelligence

Sourced from the platform's discovery pipeline (October 2026); full verification pass pending.

directory source: live database

Other Service Providers in this category

Not response firms

These companies provide platforms, tools, and managed services for this specialization. A responder investigating an incident here may rely on their tooling. A buyer building a platform may hire them. They do not send responders to your incident.

Mega Lab Incmegalabinc.comConsultancy

ISO 17025 accredited compliance testing lab. Medical device electrical safety (IEC 60601), EMC/wireless, environmental, and cybersecurity compliance testing.

See the full ecosystem across all specializations, or request inclusion.