Thirdwayv Inc., a leader in secure software solutions for connected medical devices, and Medcrypt Inc., a premier provider of medical device cybersecurity and vulnerability management solutions, announced at the Diabetes Technology Society Conference, DTM 2025, the signing of an agreement to jointly advance cybersecurity and interoperability standards and solutions across the connected medical device ecosystem.
The partnership seeks to address the increasing regulatory and operational demands for robust, life-cycle-spanning medical device cybersecurity. Together, Thirdwayv and Medcrypt will deliver integrated solutions that help medical device manufacturers embed security earlier in development, maintain compliance throughout the device lifecycle, appropriately document cybersecurity controls and traceability in regulatory submissions, and confidently deploy secure over-the-air (OTA) software updates for connected devices.
Both companies bring complementary strengths to the partnership. Thirdwayv's secure connectivity and cryptographic identity Software Development Kits (SDKs) have been essential in the implementation of wireless cybersecurity, enabling smartphone control for hundreds of millions of U.S. Food and Drug Administration (FDA)—cleared, connected diabetes automated management systems. Moreover, Thirdwayv was an instrumental Steering committee member of the IEEE 2621 standard, which originated from the Diabetes Technology Cybersecurity Standard (DTSec), for the wireless digital diabetes device security that is recognized by the FDA. Thirdwayv helped define the global benchmark for safe, continuously connected insulin delivery systems that meet or exceed the IEEE 2621 standards.
Building on this foundation, Medcrypt's platform empowers device manufacturers to identify, assess, and mitigate vulnerabilities while streamlining compliance with evolving FDA and global regulatory requirements. With several Medcrypt experts serving as contributing authors of the Health Sector Coordinating Council's Joint Security Plan (JSP), the company brings deep insight into how regulators expect cybersecurity to be implemented across the total lifecycle.
