The Medigate platform discovers all medical devices connected to healthcare provider networks, understands their normal communications and operations and provides full visibility into their risk and security status. Using knowledge of medical device protocols, existing grand potential cyber threats, and expected device behavior, the platform detects known and unknown threats in real time and integrates into the provider infrastructure to block the attacks.