# Machine Spirits

> Cybersecurity for the healthcare ecosystem.

Machine Spirits is a specialized cybersecurity consultancy focused on medical device security (MDR Class I, IIa, IIb) and healthcare IT infrastructure.

## Services

- **MDR Penetration Testing**: Security assessments for regulated medical devices, producing audit-ready evidence for Notified Body certification under IEC 81001-5-1.
- **Hospital IT Security**: Independent security assessments per MPBetreibV section 17, B3S healthcare sector standard.
- **DICOM & PACS Security**: Protocol-level penetration testing of medical imaging infrastructure.
- **C5 Cloud Compliance**: Readiness assessments for healthcare cloud deployments under SGB V section 393.
- **AI & LLM Security**: Security assessments at the intersection of MDR and EU AI Act compliance.
- **Secure Code Review**: Manual code analysis for security flaws in medical software.
- **Penetration Testing**: Comprehensive security testing across web, API, network, and cloud environments.

## Team

- **Volker Schonefeld**: Co-founder, security researcher, 25+ years software architecture and engineering experience. Former CTO. Specializes in medical device and protocol security.
- **Dr. Simon Weber**: Co-founder, penetration tester, PhD in critical infrastructure security. Specializes in healthcare IT and medical device security.

## Research

Machine Spirits conducts responsible vulnerability disclosure research in healthcare software. Published advisories are available at /advisory/ on our website. Our work has been cited by CERT/CC and recognized by organizations including gematik (Germany's national digital health agency).

## Contact

- Website (EN): https://www.machinespirits.com
- Website (DE): https://www.machinespirits.de
- Email: contact@machinespirits.com
- Location: Cologne, Germany