Every published Blue Goat Cyber research report draws from one of the datasets below. Where defensible, we publish an anonymized CSV slice. Where not, we vet requests individually.
Anonymized FDA deficiency letter content across Blue Goat Cyber-supported submissions, categorized by content area and submission pathway.
CWE-categorized findings from medical device penetration tests, broken out by device class and severity.
Aggregate counts of known-vulnerable components observed in MedTech SBOMs analyzed by Blue Goat Cyber.
Per-engagement time-to-clearance keyed to when cybersecurity engagement began relative to design freeze.
Median days from finding disclosure to client-confirmed remediation, broken out by severity.
Common gaps observed in incoming client threat models, bucketed by MedTech segment.
We support academic researchers and journalists with custom data cuts when the request is well-scoped.
