The PATCH of Asclepius: Technology for Cybersecure Healthcare (PATCH) is a national initiative supported by ARPA-H UPGRADE with funding of up to $19 million to advance transformative clinical and technological innovations, including Whole Hospital Simulation and a Vulnerability Management Platform. By creating hospital-scale digital twins of healthcare networks, PATCH will accelerate the discovery and remediation of cybersecurity vulnerabilities across thousands of medical devices, from infusion pumps to imaging systems, while ensuring uninterrupted patient care.

Experiential and Collaborative Research:  PATCH is based at Northeastern University’s Archimedes Center for Healthcare and Medical Device Cybersecurity and led by Professor Kevin Fu. With academic, clinical, and industry partnerships nationwide, the project aims to deliver scalable, open-source solutions that empower hospital cybersecurity teams to protect critical patient care infrastructure.

Our Mission: Revolutionize healthcare cybersecurity by leveraging our expertise in medical devices, clinical care, healthcare IT, and embedded systems, together with strategic partnerships across academia, healthcare, and industry. We are disrupting entrenched pen testing models that prioritize compliance checkboxes over system-level assurance. Success means hospitals and manufacturers will redefine security as measurable resilience: how gracefully a healthcare delivery organization can withstand and survive cyber threats, rather than mere compliance. In other words, it’s like moving toward crash safety testing, not just checking whether seatbelts are installed.