ByteSnap Design and Digi International partner to deliver SBOM-driven cybersecurity compliance for medical devices
Publish Date: 2026-05-22 07:45:00
Source Domain: manufacturingchemist.com
UK embedded systems consultancy ByteSnap Design has announced a partnership with Digi International to offer a managed security service for connected medical and industrial IoT devices.
The pair will combine automated Software Bill of Materials (SBOM) generation, continuous vulnerability monitoring and targeted patching to provide a bundled embedded Linux security service.
A recent webinar titled “Long-Term Security for Medical Devices: Leveraging SBOM to Reduce Risk and Improve Compliance,” featuring experts from ByteSnap Design and Digi International, addressed the expanding vulnerabilities of the Internet of Medical Things (IoMT).
With regulators now enforcing requirements such as FDA cybersecurity mandates in the US and the EU’s Cyber Resilience Act, manufacturers must implement strong risk management practices, including generating Software Bills of Materials (SBOM), continuous vulnerability monitoring and effective field patching throughout a device’s lifecycle.
Graeme Wintle, co-founder and Director, ByteSnap Design, said: “Device makers are coming to us with the need for automated, continuous security monitoring to meet internal compliance and extended regulatory requirements such as the CRA.”
“Digi International’s monthly curated CVE reports, combined with our integration, testing and platform support expertise, provide manufacturers with actionable intelligence and peace of mind.”
This partnership lowers risk, reduces the engineering burden and enables OEMs to focus on their core innovation while maintaining security during long product lifecycles.
The joint approach will combine several core elements designed to strengthen cybersecurity and lifecycle management for connected medical devices.
Central to this is the use of a Software Bill of Materials (SBOM) as a living operational tool, which is automatically generated during builds, linked to vulnerability databases such as CVE and CVSS…
