Real-world MedTech cybersecurity
Cleared by FDA.
Survives the
real world.
Yesterday you designed for patients.
Today you design for survival.
42 companies • 14 clearances • 0 rework
Cleared by FDA.
Survives the
real world.
Yesterday you designed for patients.
Today you design for survival.
42 companies • 14 clearances • 0 rework
You're a CEO, not a Chief Risk Officer. The FDA and hospital procurement teams expect you to be both.
The Offer
You need an FDA cybersecurity threat analysis to clear your device. We build it to the FDA Cybersecurity Premarket Guidance (Feb 2026). Fixed price. Fixed time. Fixed outcome.
You receive:
Complete FDA-ready threat model
Documented threat analysis
Exploitability and residual risk computation
Prioritized cybersecurity countermeasure plan
Executive summary
Submission-ready report
$43,000 — one indication, one device.
Stay Current
Your threat model reflects the threat landscape at submission. That landscape changes daily.
Ransomware variants evolve. New supply-chain vulnerabilities emerge. Hospital procurement teams are asking harder questions. What the FDA cleared today may not satisfy a hospital privacy review in Europe tomorrow.
The OpenCRO Stay Current program keeps your device ahead of the curve:
Quarterly security audit against current exploit intelligence and regulatory guidance in your markets
Threat model updated to reflect new attack vectors
Vulnerability gap analysis against recent incidents
Executive briefing your team can act on
Annual Retainer $6,250/year
Available to OpenCRO threat model clients only.
Why OpenCRO?
Specialist with deep business, entrepreneurship, clinical data, engineering and analytical expertise.
Cybersecurity advisor to WHO Europe - I wrote their guidance for digital health.
I led cybersecurity and privacy for 42 MedTech companies through FDA submissions and clinical trials. 14 FDA clearances. De Novo world record — Theranica, 9 months from first patient to clearance. Zero rework requests on threat model submissions.
Why Now?
Ransomware and supply-chain attacks shape how hospitals evaluate device vendors. The FDA moves decisively — guidance is more explicit, documentation expectations are higher, review questions are deeper and more technical.
The 2026 guidance requires discipline and depth that generalists can't deliver. Serious teams respond with precision.
Book a 15' intro call.
Real-world MedTech cybersecurity
Yesterday you designed for patients.
Today you design for survival.
42 companies • 14 clearances • 0 rework
A short call to see if you're a good fit.
Building at the intersection of AI, tech and biology and crave clarity?
My podcast Life Sciences Today and newsletter Clear Thinking are for you.
Clear Thinking has now published 150+ consecutive Friday issues —
distilling clarity for leaders at the intersection of AI, tech, and biology.
My newsletter shares the patterns and anti-patterns behind high-performing
TechBio companies. I draw on 60+ interviews with successful techbio and pharma founders on the Life Sciences Today podcast, plus systematic analysis of my own experiences over 25 years in the space and 5 startups.
The Friday essay is trusted by leaders from Picnic Health, Lindus Health, Menarini, Merck, IQVIA, Medtronic, Flatiron Health, Debiopharm and many more.
I live by My Incomplete Manifesto of 5 core values:
We speak plainly. No fluff, no jargon. Strong ideas don’t need gobbledy.
We make complex problems solvable by stripping away what doesn’t matter.
We take pride in what we build. Craft is not a luxury — it’s the job.
We honor attention. We respect your time. Trust is earned.
We show up. Not once. Every time. That’s how progress happens.
I host in-depth conversations with founders at the intersection of AI, tech and biology. My guests and I reveal the patterns behind sustainable competitive advantages.
Part of the Healthcare IT Today network with a readership of over 100,000 people.
Watch the podcast