Cybersecurity control, remediation & proof
Find cyber risk. Fix it. Prove it.
Control the controls. Bend the math.
VitalSec™ is PatientLock's flagship cybersecurity software platform. It connects to the security tools in your environment, identifies control failures and material cyber exposure, carries out approved remediation, checks what changed afterward, keeps the proof, and shows whether modeled cyber risk is compressing or expanding.
Risk compression in motion.
Drive cyber risk toward its irreducible minimum.
VitalSec keeps your controls working and configured correctly, automatically remediates vulnerabilities where supported and authorized, and preserves proof. Under the Ford Model’s assumptions, that continuous work bends your risk curve toward the Risk Floor (R_min)—the irreducible minimum of residual risk. Not zero, but the point at which risk can no longer be reduced.
See the Ford Model Understand the Risk FloorResidual cyber risk
Verified security state over time
Ford Model
dR/dt < 0 ⇔ E + P > D + A
Irreducible risk floor
The minimum residual risk for your environment.
What VitalSec does
Cybersecurity work should end with proof that the fix worked.
VitalSec connects observation to corrective action, a follow-up check, evidence, and risk measurement. It is designed to close work, not add another alert queue.
Example workflow · customer-authorized actions
See how VitalSec works- 01
Observe
Bring together current endpoint, identity, vulnerability, cloud, network, and control evidence from Rusty and connected systems.
- 02
Decide
Compare the current evidence with the required condition, prioritize what matters, and choose the next action within the customer's policy and permissions.
- 03
Act
Run or route the approved correction through the system that is allowed to make the change.
- 04
Validate
Check the environment again after the action and compare the new evidence with what was required. A command receipt or success message alone does not close the work.
- 05
Prove
Keep the source evidence, approved action, retest, and observed result together in Evidence Continuity so the history can be inspected later.
- 06
Measure
Use the validated evidence to recalculate modeled risk direction and show whether risk is moving down, moving up, or holding steady.
Cyber evidence beyond the security team
The same evidence can support reporting, audit, underwriting, renewal, and claims.
Security comes first. Once VitalSec has current evidence of the state before a change, the approved action, and what the environment showed afterward, authorized teams can use that history for executive and GRC reporting, audit and compliance, and risk-transfer decisions.
Current evidence history
One evidence history. Different authorized uses.
Observed state
Control and exposure evidence tied to its source
Validated change
Approved action and the state observed afterward
Durable proof
Evidence that exists before someone asks for it
Who can use this evidence
Who uses VitalSec
VitalSec for your organization.
Healthcare organizations
Security operations, remediation, evidence, audits, and insurance readiness for providers, practices, health systems, business associates, and health tech.
Brokers
Book visibility, renewal readiness, placement, RiskBid, and claims support.
Carriers
Current evidence for underwriting, policy, and claims decisions.
Reinsurance
Concentration, evidence quality, and change across an authorized book.
Private equity
Diligence, Day 0, 100-day execution, and portfolio comparison.
MSPs
Delegated remediation and proof across managed customers.
MSSPs
Validation, remediation, evidence, and measurable customer outcomes.
Explore VitalSec
See the platform at work.
Explore the capabilities behind VitalSec—from Rusty at the endpoint to remediation, testing, evidence, and risk measurement. Talk to Jim if you have questions about your environment.