{
  "ok": true,
  "clientSlug": "blue-goat-cyber",
  "services": [
    {
      "name": "AI/ML Medical Device Security",
      "description": "AI/ML-specific threat modeling, adversarial robustness testing, and submission documentation for AI-enabled medical devices - aligned with FDA's PCCP framewor",
      "pricingNote": "",
      "availability": "available",
      "url": "https://bluegoatcyber.com/services/ai-ml-medical-device-security"
    },
    {
      "name": "ANSI/AAMI SW96 + ISO 14971 alignment",
      "description": "",
      "pricingNote": "",
      "availability": "available",
      "url": "https://bluegoatcyber.com/services/medical-device-threat-modeling"
    },
    {
      "name": "Adversarial ML testing (evasion, poisoning, model inversion, prompt injection)",
      "description": "",
      "pricingNote": "",
      "availability": "available",
      "url": "https://bluegoatcyber.com/services/ai-ml-medical-device-security"
    },
    {
      "name": "Blue Goat Cyber",
      "description": "Medical device cybersecurity specialists. Service-disabled veteran-owned firm helping MedTech manufacturers clear FDA premarket cybersecurity review with fixed-fee, retest-included engagements.",
      "pricingNote": "",
      "availability": "available",
      "url": "https://bluegoatcyber.com/"
    },
    {
      "name": "Cloud + mobile + API pen testing (OWASP ASVS / MASVS) and IAM/tenancy review",
      "description": "",
      "pricingNote": "",
      "availability": "available",
      "url": "https://bluegoatcyber.com/services/samd-cybersecurity"
    },
    {
      "name": "Cryptography and key management",
      "description": "",
      "pricingNote": "",
      "availability": "available",
      "url": "https://bluegoatcyber.com/services/secure-medtech-product-design-consulting"
    },
    {
      "name": "Developer training for medical teams",
      "description": "",
      "pricingNote": "",
      "availability": "available",
      "url": "https://bluegoatcyber.com/services/secure-medtech-product-design-consulting"
    },
    {
      "name": "End-to-end medical device system coverage",
      "description": "",
      "pricingNote": "",
      "availability": "available",
      "url": "https://bluegoatcyber.com/services/medical-device-threat-modeling"
    },
    {
      "name": "Entire FDA Section 524B premarket cybersecurity package, owned end-to-end",
      "description": "",
      "pricingNote": "",
      "availability": "available",
      "url": "https://bluegoatcyber.com/services/samd-cybersecurity"
    },
    {
      "name": "FDA 510(k) / De Novo / PMA cybersecurity submission",
      "description": "",
      "pricingNote": "",
      "availability": "available",
      "url": "https://bluegoatcyber.com/services/medtech-compliance-bundle"
    },
    {
      "name": "GDPR Art. 30 / 32 / 35 readiness, DPIAs, and DPA templates",
      "description": "",
      "pricingNote": "",
      "availability": "available",
      "url": "https://bluegoatcyber.com/services/medtech-compliance-bundle"
    },
    {
      "name": "GMLP + AAMI CR34971 alignment",
      "description": "",
      "pricingNote": "",
      "availability": "available",
      "url": "https://bluegoatcyber.com/services/ai-ml-medical-device-security"
    },
    {
      "name": "HIPAA Security Rule risk analysis and BA agreements",
      "description": "",
      "pricingNote": "",
      "availability": "available",
      "url": "https://bluegoatcyber.com/services/medtech-compliance-bundle"
    },
    {
      "name": "HITRUST CSF e1 / i1 / r2 readiness for HDO procurement",
      "description": "",
      "pricingNote": "",
      "availability": "available",
      "url": "https://bluegoatcyber.com/services/medtech-compliance-bundle"
    },
    {
      "name": "Justified methodology and assumptions",
      "description": "",
      "pricingNote": "",
      "availability": "available",
      "url": "https://bluegoatcyber.com/services/medical-device-threat-modeling"
    },
    {
      "name": "MedTech Compliance Bundle",
      "description": "Bundled FDA cybersecurity, SOC 2 Type II, HIPAA, HITRUST, and GDPR program for MedTech innovators. One control set, five attestations, hospital- and EU-ready.",
      "pricingNote": "",
      "availability": "available",
      "url": "https://bluegoatcyber.com/services/medtech-compliance-bundle"
    },
    {
      "name": "Medical Device Threat Modeling",
      "description": "FDA-aligned threat modeling for medical devices. STRIDE, attack trees, trust boundaries, and risk traceability per AAMI TIR57 and SW96. Reviewer-ready evidence.",
      "pricingNote": "",
      "availability": "available",
      "url": "https://bluegoatcyber.com/services/medical-device-threat-modeling"
    },
    {
      "name": "Model lifecycle, monitoring, and drift controls",
      "description": "",
      "pricingNote": "",
      "availability": "available",
      "url": "https://bluegoatcyber.com/services/ai-ml-medical-device-security"
    },
    {
      "name": "PCCP authoring and FDA AI/ML transparency artifacts",
      "description": "",
      "pricingNote": "",
      "availability": "available",
      "url": "https://bluegoatcyber.com/services/ai-ml-medical-device-security"
    },
    {
      "name": "SBOM (app + container) with VEX, vulnerability mgmt plan, and patchability narrative",
      "description": "",
      "pricingNote": "",
      "availability": "available",
      "url": "https://bluegoatcyber.com/services/samd-cybersecurity"
    },
    {
      "name": "SOC 2 Type II readiness and audit support",
      "description": "",
      "pricingNote": "",
      "availability": "available",
      "url": "https://bluegoatcyber.com/services/medtech-compliance-bundle"
    },
    {
      "name": "SaMD Cybersecurity",
      "description": "Full-service premarket cybersecurity package for Software as a Medical Device (SaMD) - cloud-hosted clinical software, mobile diagnostic apps, web-based image",
      "pricingNote": "",
      "availability": "available",
      "url": "https://bluegoatcyber.com/services/samd-cybersecurity"
    },
    {
      "name": "Secure MedTech Product Design",
      "description": "Build a Secure Product Development Framework FDA accepts. SPDF design, documentation, and implementation aligned with Section 524B, AAMI SW96, IEC 81001-5-1.",
      "pricingNote": "",
      "availability": "available",
      "url": "https://bluegoatcyber.com/services/secure-medtech-product-design-consulting"
    },
    {
      "name": "Secure boot and update strategy",
      "description": "",
      "pricingNote": "",
      "availability": "available",
      "url": "https://bluegoatcyber.com/services/secure-medtech-product-design-consulting"
    },
    {
      "name": "Security architecture and trust boundaries",
      "description": "",
      "pricingNote": "",
      "availability": "available",
      "url": "https://bluegoatcyber.com/services/secure-medtech-product-design-consulting"
    },
    {
      "name": "Single crosswalk - one set of controls, five attestations",
      "description": "",
      "pricingNote": "",
      "availability": "available",
      "url": "https://bluegoatcyber.com/services/medtech-compliance-bundle"
    },
    {
      "name": "Threat model, secure design docs, architecture views, and labeling",
      "description": "",
      "pricingNote": "",
      "availability": "available",
      "url": "https://bluegoatcyber.com/services/samd-cybersecurity"
    },
    {
      "name": "Threat-to-mitigation traceability",
      "description": "",
      "pricingNote": "",
      "availability": "available",
      "url": "https://bluegoatcyber.com/services/medical-device-threat-modeling"
    }
  ]
}