“Netsparker has allowed us to proactively security test our healthcare patient centric web applications to the highest level and safeguard confidentiality along with huge cost savings and ease of use.” - Dale Langham, Senior Data Platforms Manager, Healthcare at Home Ltd.
Healthcare at Home Ltd was established in 1992 and the vision was, and still remains today, to enhance the way in which care is provided for patients both in the home and in the community. The company has grown rapidly since its beginnings to become the UK’s leading provider of innovative home health care services.
The Healthcare at Home Ltd technical department has to maintain more than fifty websites and user portals, all of which are used 247 by staff and remote business partners alike to access patients, nurses and medicine records. To ensure the security of all the confidential data such websites hold, and to comply with the strict regulatory compliance rules Healthcare at Home hired third party security professionals. Though as the company grew and their web applications became more complex it was obvious that fully depending on third party services was not sustainable because:
To ensure the continuous development and implementation of new web application features and the security of all confidential data at an affordable price, Healthcare at Home Ltd opted to move the majority of web application security tests in-house, thus reducing the dependency and costs of third party security service. “The main reason was to be able to pen test our web applications internally within the business prior to our regulatory external company pen testing. By doing so we can keep costs at a minimum and can release new web application features without waiting for when the contractor is available,” explained Dale Langham, the Senior Data Platforms Manager for Healthcare at Home Ltd.
To start doing their own web application security testing, Healhcare at Home Ltd needed a software solution that can:
After evaluating several automated web application security solutions Healthcare at Home Ltd chose Netsparker Desktop on the basis that it is very easy to use and reports no false positives. “I got sold on the fact that Netsparker does not report any false positives. Considering the limited amount of time we have to release new features I cannot afford to waste time verifying the scanner’s results and can go straight to the developers to report the problems,” stated Mr Langham.
“We have been using Netsparker for over 9 months now and it helped us drastically reduce our external pen testing costs and ensures we fully test our web applications prior to and during LIVE release. We are now able to internally test our web based applications after any changes we make without having to rely on external third party assistance,” continued Mr Langham.
Healthcare at Home Ltd confirmed that Netsparker already uncovered some vulnerabilities that if exploited would have allowed an attacker to gain access to confidential data. But now they are no longer worried about it. As Dale Langham explains “Netsparker has allowed us to proactively security test our healthcare patient centric web applications to the highest level and safeguard confidentiality along with huge cost savings and ease of use.”
Healthcare at Home Ltd was established in 1992 by founder and former chairman Charles Walsh. The vision was, and still remains today, to enhance the way in which care is provided for patients both in the home and in the community.
The company has grown rapidly since its beginnings to become the UK’s leading provider of innovative home healthcare services. We now deliver every day of the year (aside from Christmas Day, Boxing Day and New Year’s Day) supported by a bespoke IT infrastructure.
We work with the NHS, pharmaceutical companies, private medical insurers, consultants, GPs, Patient Groups and charities. Our team of over 1,000 staff operate from locations throughout the UK to provide national services delivered from a local base.
Netsparker Ltd is a young and enthusiastic UK based company focused on developing automated web security products, mainly the false positive web application security scanners Netsparker Desktop and Netsparker Cloud. Netsparker management and engineers have more than two decades of experience in the web application security industry that is reflected in their products. Founded in 2009, Netsparker’s automated web vulnerability scanners are the leading security tools and are used by world renowned companies such as Samsung, NASA, Microsoft, ING bank, Skype and Ernst & Young.