Mediclinic International selects Vectra Cognito for AI-powered cyberattack detection and threat hunting

“Cognito gives us consistent, real-time visibility to detect and respond to cyberattacks, no matter where they occur,” said Marais Coetzee, group security architect at Mediclinic. “The visual quality of this instant feedback lets us respond faster and more decisively to stop advanced threats.”

Powered by artificial intelligence and always-learning threat behavior models, Cognito finds hidden and unknown attackers in real-time to enable quick, decisive incident response. The highest-risk threats are automatically prioritized by Cognito, enabling cybersecurity teams to quickly stop advancing threats before key assets are damaged or stolen.

“Cognito proved its value from Day 1,” said Coetzee. “After a short period of supervised and unsupervised machine learning across our entire network, Cognito immediately detected a threat and notified our security team about an attack at one of our regional hubs.”

Cognito offloads Tier-1 security analysts by eliminating the need to manually chase-down every security event. In the past, different clinics followed different cybersecurity practices, which led to security gaps and slow incident response. By automating threat detection with Cognito, Mediclinic brought consistency to its global security operations and transitioned from reactive to proactive.

“As an international care provider, maintaining a consistent approach to cybersecurity can be a real challenge, especially under the deadline pressure of complying with the General Data Protection Regulation and other regulatory mandates,” said Coetzee.

Cognito integrated easily with Mediclinic’s network and security systems. “Cognito was simple to install and didn’t require a massive effort to integrate with our security infrastructure,” Coetzee said. “The implementation was straightforward and its out-of-band approach is non-disruptive.”

Digital transformation is a strategic priority for healthcare organizations today, and they must protect the growing volumes of patient and clinical data, healthcare IT systems, and medical IoT devices against cyberattacks.

“The healthcare industry is one of the top targets of cyberattackers and lives are literally at stake,” said Vectra CEO Hitesh Sheth. “With Cognito, healthcare organizations have visibility into attacker behaviors in cloud and data center workloads and user and IoT devices, enabling them to stop attacks in progress and improve the efficiency of security operations.”