What
Feint
attacks first.
Feint starts where a real attacker would start in your stack, then chains what it finds.
01
PHI in logs and exports
Follows patient records through background jobs and exports to see where they end up in plain text.
02
Consent-scope bypass
Replays tokens against other endpoints to widen what a patient actually agreed to share.
03
FHIR endpoint enumeration
Walks resource ids across your FHIR API to find records it should never be able to list.
04
Integration credentials
Tests partner and EHR credentials for access beyond the data they were issued for.
© 2026 Feint, Inc.
SOC 2 in progress · HIPAA · GDPR · Made in Framer
