Cylera places one passive sensor on your hospital network for 30 days. The sensor reads a copy of network traffic. It never scans or probes the network, and it never touches a clinical device.
- One hospital site
- One passive sensor
- 30 days, free
Three steps, and one passive sensor does the listening.
- 01
Cylera ships the sensor
Cylera sends one passive, pre-configured sensor once your team has confirmed the mirrored port, agreed on three success criteria and booked the Day 30 readout. Nothing is installed on your devices.
- 02
Your team mirrors the traffic
A network contact sets up a mirrored or SPAN port on a core or distribution switch. The sensor reads a copy of the traffic, and it never scans or probes the network.
- 03
Cylera reports at Day 30
The sensor listens for 30 days. Cylera presents the findings, recommended actions and capital planning summary at the executive readout.
The evaluation is free for one hospital site in the United States or Canada, and Cylera runs it.
Request your 30-day evaluationYour inventory builds as the sensor listens.
Before kickoff, your team and Cylera agree on three success criteria and book the Day 30 readout. The 30 days count from the day the sensor goes live.
Kickoff, sensor live. The sensor goes live on the mirrored port by Day 3, and your inventory builds from there.
Day 7. First look. Your team sees the Week 1 snapshot.
Day 14. Inventory review. Your team reviews the medical devices by type, model and network segment, gives each segment a name, and sees a first pass of end-of-life devices.
Day 21. Confirm the inventory. Your team confirms the changes since Day 14. Cylera holds the findings for the readout.
Day 30. Executive readout. Cylera presents the findings, recommended actions and capital planning summary.
Open means not yet confirmed closed.
You get a findings report, an inventory export and a capital planning summary built around your medical devices.
Your team keeps all three, whether or not it goes ahead.
Inside the Findings and Recommended Actions report
Medical devices on your network
Cylera lists the medical devices the sensor sees by type, manufacturer, model and network segment, with the IT and building devices around them as context.
Remote-access services
The report shows the devices running remote-access services the sensor saw, such as RDP, VNC or a remote-support tool.
Findings in the order to work them
Known-exploited vulnerabilities come first, then unsupported and end-of-life devices. Each finding comes with a recommended action and a suggested owner.
Every device and number in these samples is illustrative. An open finding means not yet confirmed closed.
Your team sees a first snapshot at Day 7 and gets all three deliverables at Day 30.
Request your 30-day evaluationThe Day 30 deliverables
Findings and Recommended Actions report
Cylera lists the medical devices seen on your network by type, model and network segment, with findings in the order to work them. Known-exploited vulnerabilities, the ones listed in the CISA Known Exploited Vulnerabilities catalog, come first, then unsupported and end-of-life devices. Each finding comes with a recommended action and a suggested owner.
Capital planning summary
Cylera lists the medical devices the sensor saw earlier in the 30 days but not in the final week, so your team can look for them before buying new ones. The summary also groups the end-of-life and unsupported medical devices, so biomed and finance can plan replacements. It uses your hospital's own unit costs where your team provides them.
Inventory and action export
Your team gets a spreadsheet of the medical device inventory, the end-of-life register and the action list, so your teams can work the actions.
Cylera walks your leadership team through all three at the Day 30 executive readout, a meeting booked before kickoff, along with the answers to the three agreed success criteria.
Sample report. Illustrative data. 
Sample report. Illustrative data. Cylera runs the calls and prepares the reports. Your team brings the hospital context.
Request your 30-day evaluationYour medical devices stay untouched.
The evaluation covers one hospital site in the United States or Canada.
Cylera pre-configures the sensor, and it listens on a mirrored or SPAN port.
The 30 days count from the day the sensor goes live.
Nothing is installed on your devices, and the evaluation uses no integrations.
What your hospital provides
- A mirrored or SPAN portA network contact who can configure the port on a core or distribution switch.
- An executive sponsorYour sponsor joins the kickoff and the Day 30 readout.
- No documentsCylera never asks for documents, CMMS exports or spreadsheets. The evaluation runs on what the sensor sees.
What the evaluation is not
- Cylera does not change, patch or fix devices or your network. Your team works with manufacturers and vendors to act.
- The report reflects traffic observed during the 30 days on the segments the sensor could see. It is a point-in-time picture, not a coverage guarantee.
- A device the sensor stopped seeing may be unplugged, stored or moved. It is not a measure of clinical use.
- The evaluation is not a compliance certificate.
Someone from Cylera replies within one business day.
Request your 30-day evaluationYour evaluation questions, answered.
Does the sensor touch our clinical devices?
No. The passive sensor reads a copy of network traffic from a mirrored or SPAN port. It never scans or probes the network, and it never touches a clinical device.
Which hospitals is this for?
The 30-day evaluation is open to hospitals in the United States and Canada, including community and rural hospitals and one hospital site within a larger health system. Cylera reviews the network setup, fit and timing with your team before the sensor ships.
What does the 30-day evaluation cost?
Nothing. The evaluation is free for one hospital site and one passive sensor for 30 days.
Who runs the evaluation?
Cylera does. A Cylera engineer runs the milestone calls and prepares the reports. Your team joins the reviews.
What does our hospital need to provide?
A mirrored or SPAN port on a core or distribution switch, a network contact who can configure it, and participation in the scheduled calls. An executive sponsor joins the kickoff and Day 30 readout.
Will Cylera fix what the evaluation finds?
No. Each finding includes a recommended action and suggested owner. Your hospital's team decides what to do and works with manufacturers and vendors to carry out the actions.
What happens to our data?
Cylera uses evaluation data to run your evaluation and build your reports. If your hospital subscribes, the sensor stays and the evaluation data carries into the subscription. If it doesn't, Cylera collects the sensor, platform access ends, and Cylera keeps your data confidential until it is deleted under the evaluation agreement, starting within 90 days after the evaluation ends. Your hospital can ask in writing for deletion sooner. Your hospital keeps the findings report, inventory export and capital planning summary either way.
Does the evaluation make our hospital compliant?
No. The report can support your hospital's own risk analysis, but it is not a compliance certificate.
The evaluation is free, and Cylera runs it from kickoff to readout.
Request your 30-day evaluationRequest your 30-day evaluation.
The evaluation is free for one hospital site in the United States or Canada, and Cylera runs it.
Someone from Cylera replies within one business day. Cylera confirms fit and timing on that first call.
Fields marked * are required.
Cylera uses this information to contact you about the 30-day evaluation. Cylera's privacy statement explains how Cylera handles your data.