PatchTriage

PatchTriage is a web app (with optional lightweight desktop agent) that helps healthcare IT teams decide what to patch first based on real clinical risk, not just CVSS scores. It ingests vulnerability scans (e.g., Tenable/Qualys exports), asset inventories, and EHR/medical-device context to rank remediation by likelihood of exploitation and patient-care impact. It flags “can’t patch” systems (legacy imaging, lab analyzers, vendor-locked devices) and generates compensating controls: segmentation rules, virtual patching suggestions, and monitoring checklists. An AI layer summarizes vendor advisories, maps vulnerabilities to MITRE ATT&CK and known exploited lists, and drafts change-control tickets with downtime windows aligned to clinical schedules. The product is intentionally narrow: vulnerability-to-remediation prioritization for regulated healthcare environments, with audit-ready evidence trails and simple reporting for security leadership.