Enhancing Mobile Healthcare App Security: A Case Study on Eko Health and Data Theorem

Eko Health is a healthcare technology company that develops FDA-approved, AI-powered heart sound and EKG sensors for heart disease monitoring. Eko's suite of machine learning algorithms equips providers and health systems with a powerful new ally for detecting heart disease. Eko’s device and mobile app helps record, playback, live stream, and share patient body sounds and ECG. Eko connects your stethoscope to the cloud for an advanced, HIPAA-compliant auscultation experience. Eko is a committed partner to the providers and scientists on the front lines of care, enabling clinicians with the ability to provide the best cardiac care possible.

Eko Health, a developer of FDA-approved, AI-powered heart sound and EKG sensors for heart disease monitoring, was in need of a robust, 'always-on' solution to prevent application security data breaches. The company was seeking a vendor to work with on mobile security, as they recognized that current mobile defenses were not keeping pace with new threats. Eko Health was not only looking to get ahead of threats, but also find a solution that is easy to integrate, provides quick results, and is constantly innovating. The team had spent time building their own solutions and exploring open source options, but these efforts were not yielding the desired results. The slow results, cumbersome tasks, and loss of productivity led them to seek a more efficient discovery and autoremediation solution. In 2020, the challenge and demands of managing moving targets in healthcare, as well as reducing re-work for developers led them to Data Theorem.

Data Theorem provided a comprehensive solution to Eko Health's mobile security challenges. The Eko Health team was interested in taking a holistic approach to their application security stack, and Data Theorem's ASM and full stack platform helped them protect sensitive, confidential, and regulated data within web, mobile, API, and cloud applications. The platform was integrated into the DevSecOps pipeline, ensuring security coverage 24/7/365. Data Theorem’s Secure Code and Auto-Remediation scripts, leveraged via various platforms, provided actionable security results used by the web, mobile and IT development teams. The team started with a short trial period to test out the product and discover potential vulnerabilities. A clear win for the team was seeing the seamless integrations in action. Now that the Eko Health team is a customer, their security results are actionable and used by the web, mobile and IT development teams.

• Data Theorem's solution has provided Eko Health with a 'zero approach' to security issues, requiring that all customers have zero P1 security issues, App Store/Google Play blockers, and 3rd Party SDK/ OSS issues. This allows Eko to know about any showstoppers in its pre-production environment, but also knowledge about “zero-days” in the wild on production apps. Furthermore, Data Theorem’s ability to scan 3rd party SDK & Open Source libraries has allowed Eko to shed light on an attack surface that would otherwise be a blind spot. Data Theorem was the only company evaluated that also offers “Secure Code” directly to developers to help fix identified security issues. This enables Data Theorem's customers to streamline the amount of time and resources required to fix an issue, and continuously monitor, scan, and fix mobile application security - at scale - with a solution that has a negligible impact on speed and performance.

• Data Theorem scans for critical (P1) security issues on a daily basis

• Data Theorem's solution ensures security coverage 24/7/365

• Data Theorem's Secure Code and Auto-Remediation scripts are leveraged via various platforms, providing actionable security results