Gluware Expands Automation Platform to Secure Hospital Medical Devices

The scale of the problem is substantial: NIST data shows a 263% increase in CVE submissions between 2020 and 2025, leaving the average connected medical device with 6.2 known vulnerabilities. While hospitals have become adept at identifying these risks, the actual process of patching remains trapped in spreadsheets and manual ticketing. Unlike standard office hardware, medical equipment cannot be taken offline without disrupting critical patient care, forcing staff to navigate complex clinical schedules and stringent regulatory audit requirements.

Gluware’s new platform, developed in collaboration with The Ohio State University Wexner Medical Center, addresses these bottlenecks by connecting five distinct stages—discovery, vulnerability matching, patch identification, record keeping, and execution—into a single automated pipeline. By leveraging its existing DIAL™ semantic translation layer and integrating with ServiceNow, the system ensures that every patch action is documented and approved in real-time. This eliminates the manual handoffs between clinical engineering and IT departments, turning the audit trail into a byproduct of the work rather than a separate, labor-intensive task. The solution is currently available through an early access program for healthcare organizations.