Every article in our archive tagged eSTAR.
eSTAR is the FDA's electronic submission template, and it is required for 510(k) and De Novo submissions. Its cybersecurity section asks targeted questions and expects specific attachments, such as the threat model, risk assessment, SBOM, testing reports and labeling. An incomplete section can stop a submission at the technical screening stage.
The articles below walk through the cybersecurity questions, how to map your documents to them, the differences between IVD and non-IVD templates, and how to handle unresolved anomalies and submission issue requests.
Looking for a quick answer instead? The FDA medical device cybersecurity FAQ covers Section 524B scope, SBOMs, threat models, CR515 and GMLP, deficiencies, and postmarket duties.
Showing 9 of 9 articles tagged eSTAR
PreSTAR vs eSTAR explained: PreSTAR is the voluntary FDA template for Q-Submissions, eSTAR is required for 510(k) and De Novo. How cybersecurity carries across.
Read article
When to use an FDA Submission Issue Request after a qualifying hold letter, how to frame cybersecurity questions, and why the formal response deadline still applies.
Read article
Where containers appear in medical devices, the testing FDA guidance recommends under the Feb 3, 2026 guidance, and how container evidence maps to eSTAR v7.1.
Read article
eSTAR v7.1 cybersecurity attachments are identical for IVD and nIVD submissions, but the content reviewers expect is not. Here's how to fill each section correctly.
Read article
What the FDA's Feb 2026 guidance expects in interoperability labeling for connected medical devices, and where each element sits in the eSTAR package.
Read article
What the FDA's Feb 2026 guidance expects in the unresolved cybersecurity anomalies assessment, how to document residual risk, and the deficiency pattern.
Read article
Section 524B(b)(2) makes patchability statutory. What the FDA's Feb 2026 guidance expects in the patch and update mechanism test evidence, the test cases.
Read article
DAST is a subset of FDA-required penetration testing. What the Feb 2026 guidance expects in eSTAR Slot 7, and why a Burp scan alone will fail review.
Read article
eSTAR 510(k) cybersecurity documentation checklist with sourced examples of architecture, risk, SBOM, testing, labeling, and postmarket evidence records.
Read article30-minute strategy session. No cost, no commitment - just answers from people who've supported 275+ FDA submissions, with zero cybersecurity rejections.
