<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>Healthcare Pentest insights</title><link>https://healthcarepentest.com/blog/</link><description>Practical Healthcare penetration testing guidance from Atlant Security.</description><language>en</language><item><title>How to scope a healthcare penetration test</title><link>https://healthcarepentest.com/blog/healthcare-pentest-scope/</link><guid>https://healthcarepentest.com/blog/healthcare-pentest-scope/</guid><description>Build the scope around patient-data journeys, identities and integrations, not an asset count alone.</description><pubDate>Tue, 29 Sep 2026 00:00:00 GMT</pubDate></item><item><title>Testing patient portal authorisation beyond login</title><link>https://healthcarepentest.com/blog/patient-portal-authorisation/</link><guid>https://healthcarepentest.com/blog/patient-portal-authorisation/</guid><description>Use synthetic patients and role pairs to test who can see, export and change each record.</description><pubDate>Tue, 29 Sep 2026 00:00:00 GMT</pubDate></item><item><title>What healthcare testing can contribute to NIS2 evidence</title><link>https://healthcarepentest.com/blog/nis2-healthcare-testing-evidence/</link><guid>https://healthcarepentest.com/blog/nis2-healthcare-testing-evidence/</guid><description>Connect technical findings to risk ownership while keeping legal applicability and audit conclusions separate.</description><pubDate>Tue, 29 Sep 2026 00:00:00 GMT</pubDate></item><item><title>What a useful healthcare pentest report contains</title><link>https://healthcarepentest.com/blog/healthcare-pentest-report/</link><guid>https://healthcarepentest.com/blog/healthcare-pentest-report/</guid><description>Look for reproducible observations, operational limits and findings that clinical and technical owners can act on.</description><pubDate>Tue, 29 Sep 2026 00:00:00 GMT</pubDate></item><item><title>Healthcare supplier access: test the whole session lifecycle</title><link>https://healthcarepentest.com/blog/healthcare-supplier-access/</link><guid>https://healthcarepentest.com/blog/healthcare-supplier-access/</guid><description>Plan a healthcare supplier-access assessment around approval, permitted reach, session revocation and useful audit evidence.</description><pubDate>Tue, 29 Sep 2026 00:00:00 GMT</pubDate></item><item><title>Healthcare API testing with synthetic clinical data</title><link>https://healthcarepentest.com/blog/healthcare-api-testing/</link><guid>https://healthcarepentest.com/blog/healthcare-api-testing/</guid><description>Design healthcare API penetration tests that exercise permissions, integrations and asynchronous workflows using realistic synthetic records.</description><pubDate>Tue, 29 Sep 2026 00:00:00 GMT</pubDate></item></channel></rss>