The Device Assessment and Vulnerability Exposure (DAVE) is a comprehensive platform designed to manage medical device cybersecurity, FDA compliance, and vulnerability tracking for healthcare organizations. DAVE provides asset monitoring, and risk assessment capabilities.
- Medical Device Security Management - Comprehensive asset tracking and vulnerability management
- FDA Compliance Monitoring - Automated recall monitoring and device mapping
- Vulnerability Assessment - SBOM processing and CVE tracking
- Risk Prioritization - Risk scoring and remediation planning
- Compliance Reporting - Automated compliance reports and dashboards
- Enterprise Security - Role-based access control and audit logging
- Web-Based Setup - Easy installation with guided setup wizard
-
Run the Installation Script
-
Create the folder /var/www/html if it doesnt exist and copy the contents of SHIELD-DAVE into the html folder. Copy docs/env.example to .env and update the following fields with your own defaults The values you specify here will be used by the installation scripts to create the specific accounts/databases
-
DAVE_ADMIN_USER=
-
DAVE_ADMIN_DEFAULT_PASSWORD=
-
DB_HOST=localhost
-
DB_PORT=5432
-
DB_NAME=<your database name. Eg., dave_db>
-
DB_USER=<your database login. Eg., dave_user>
-
DB_PASSWORD=<your database password. Eg., dave_password>
cd /var/www/html bash scripts/install.sh -
-
Complete Setup Wizard
- Visit
http://your-server-ip/setup.php - Configure your Base URL and database settings
- Set up email configuration (optional)
- Complete the setup process
- Visit
-
Access Your Application
- Login with default credentials: /
- Change the default password immediately
- Start managing your medical devices
Important: Create .env with your credentials before install!
- Setup Guide - Follow the instructions in this document
- Docker Install - Install using the docker-compose file
- API Documentation - REST API reference
- Frontend: PHP 7.4+ (8.0+ recommended), HTML5, CSS3, JavaScript (ES6+)
- Backend: Python 3.8+ (3.9+ recommended), PHP 7.4+ (8.0+ recommended)
- Database: PostgreSQL 13+ (14+ recommended)
- Web Server: Apache 2.4+ or Nginx 1.18+
- OS: Linux (Ubuntu 22.04 LTS or later recommended)
- Web Interface - PHP-based user interface with Siemens Healthineers branding
- API Layer - RESTful APIs for data access and integration
- Background Services - Python services for automation and monitoring
- Database Layer - PostgreSQL for data persistence and analytics
- File Storage - Local file system for uploads and reports
- CPU: 2 cores, 2.0 GHz (4 cores, 3.0 GHz recommended)
- RAM: 4 GB (8 GB recommended)
- Storage: 50 GB SSD (100 GB SSD recommended)
- Network: 100 Mbps (1 Gbps recommended)
- OS: Ubuntu 22.04 LTS or later (recommended)
- Web Server: Apache 2.4+ or Nginx 1.18+
- PHP: 7.4+ (8.0+ recommended) with required extensions
- PostgreSQL: 13+ (14+ recommended)
- Python: 3.8+ (3.9+ recommended) for background services
The DAVE setup wizard provides an intuitive, web-based configuration interface:
- Beautiful UI - Modern, responsive design with Siemens Healthineers branding
- Real-time Validation - Instant validation of Base URL and database connections
- Auto-configuration - Automatic API URL generation and environment setup
- Email Setup - Optional SMTP configuration for notifications
- Security - One-time setup with proper file permissions
After running the installation script, access the setup wizard at:
http://your-server-ip/setup.phphttp://localhost/setup.php
- Role-Based Access Control - Granular permissions and user roles
- Multi-Factor Authentication - TOTP support for enhanced security
- Audit Logging - Comprehensive activity tracking and compliance
- Data Encryption - Encryption at rest and in transit
- Session Management - Secure session handling and timeout
- Password Policies - Enforced password complexity and rotation
- Medical device inventory tracking
- Network device discovery
- Asset lifecycle management
- Compliance status monitoring
- SBOM processing and analysis
- CVE tracking and scoring
- Risk assessment and prioritization
- Remediation planning and tracking
- Device mapping to FDA records
- Recall monitoring and alerts
- Compliance reporting
- Regulatory requirement tracking
- Executive dashboards
- Compliance reports
- Risk assessments
- Trend analysis
- PHP 7.4+ with required extensions (8.0+ recommended)
- PostgreSQL 13+ (14+ recommended)
- Python 3.8+ with pip (3.9+ recommended)
- Apache 2.4+ or Nginx 1.18+
# Clone repository
git clone https://github.com/your-org/SHIELD-DAVE
cd SHIELD-DAVE
# Set up development environment
sudo bash scripts/setup-permissions.sh
# Install dependencies
composer install
pip install -r requirements.txtSee Development Setup Guide for detailed instructions.
- System resource monitoring
- Database performance tracking
- Application log analysis
- Service status monitoring
- Automated database backups
- Configuration backups
- File system backups
- Disaster recovery procedures
- System package updates
- Application updates
- Database maintenance
- Security patches
- Setup Issues: Check Setup Guide
- Configuration: See Environment Configuration
- User Questions: Review User Guide
- Admin Tasks: Consult Administrator Guide
- Technical Support: Contact your system administrator
- Documentation Issues: Create an issue in the repository
- Feature Requests: Submit via the issue tracker
This software is licensed under the [GNU Affero General Public License version 3 or later]
Copyright (c) 2026 Siemens Healthineers - All rights reserved
- v1.0.0 - Initial release with web-based setup wizard
- Designed for healthcare cybersecurity requirements
- Developed for FDA compliance monitoring
- Optimized for medical device management
Ready to get started? Run the installation script and visit the setup wizard to configure your DAVE installation!
sudo bash scripts/install.sh
# Then visit: http://your-server-ip/setup.php