Healthcare IoT Security Testbed
Analyze. Reverse Engineer. Secure.
A collaborative security testbed for analyzing medical IoT devices, firmware, vulnerabilities, and reverse-engineering workflows.
Previews use illustrative sample data.
How it works
From device on the bench to tracked vulnerability
Five steps take a connected medical device through analysis, with your team working from the same records.
Step 1
Add Device
Register each device under test, in Personal or a shared workspace.
Step 2
Upload Firmware
Attach firmware versions, captures, logs and binaries, up to 5 GiB per file.
Step 3
Run Analysis
Run your Python scripts over selected files, with a cost estimate first.
Step 4
Track CVEs
Record known vulnerabilities and link them to the devices they affect.
Step 5
Collaborate
Invite teammates to a workspace and work from the same devices and findings.
Features
Everything a device investigation needs
Each capability below is part of the platform today.
Device Management
An inventory of the medical devices under test. Each device page gathers its firmware, artifacts and linked CVEs.
- Name and device type
- Owner or member access
- Per-device overview tabs
Firmware & Artifacts
Upload firmware versions alongside packet captures, logs, binaries and other files from your research.
- Up to 5 GiB per file
- SHA-256 checksums computed in the browser
- Types, versions and tags
Analysis Runs
Package an analysis script with the tools it needs, then run it in bulk over the files you choose.
- Single .py, .zip project or your own Dockerfile
- Per file, grouped or chunked work units
- Jobs, logs and outputs per run
CVE Database
Record known vulnerabilities with the detail you need to triage them, and link each to the devices it affects.
- Severity, CVSS score and version
- Affected chipsets and references
- Search across IDs, descriptions and devices
Reverse Engineering Tracking
Mark each device and firmware version as not started, in progress or complete, and follow progress on the dashboard.
- Status on devices and firmware
- Progress across the whole scope
- Filter devices by status
Collaborative Workspaces
Share devices, files, CVEs and analysis runs with your team, or keep work in your Personal scope.
- Invite members by email
- Owner and member roles
- Switch scopes from the top bar
Platform
A closer look at the workspace
The pages you'll use every day. Previews use illustrative sample data, not real devices or findings.
Dashboard
Overview of your devices, firmware and vulnerability research
Devices
4
1 fully reverse-engineered
Vulnerabilities
3
1 critical · 1 high
Firmware
6
Firmware versions uploaded
Artifacts
18
Files in this scope
Reverse-engineering progress
- Complete1
- In-Progress2
- Not Started1
Recently updated vulnerabilities
- critical
CVE-YYYY-0142
Infusion pump · bench unit A
- high
CVE-YYYY-0377
Patient monitor · bench unit B
- medium
CVE-YYYY-1058
Glucose meter gateway
About
A research testbed for connected medical devices
Vzoniq is a healthcare IoT vulnerability testbed. It brings device inventory, firmware and artifact storage, scripted analysis and CVE tracking together, so a research team can follow a device from first teardown to known vulnerabilities.
Work on your own in a Personal scope, or create a workspace and invite the people you research with.
One place for the whole investigation
Devices, files, scripts, runs and CVEs live side by side instead of across drives, spreadsheets and notebooks.
Scoped by design
Everything you add belongs to your Personal scope or to a workspace, and only that workspace's members can see it.
Analysis you can repeat
Scripts and environments are versioned, so a run can be reproduced on new firmware the same way it ran before.
Start Analyzing with Vzoniq
Create an account, register your first device and upload its firmware.