Docker – Blog

How Medplum Secured Their Healthcare Platform with Docker Hardened Images (DHI)

Medplum, an open‑source headless EHR serving over 20 million patients, migrated its production containers to Docker Hardened Images (DHI) with just 54 lines of code changes across five files. The switch replaced custom hardening scripts with Docker’s secure‑by‑default base images, eliminating manual non‑root user setup and reducing the attack surface. As a result, the platform’s CVE count fell sharply, and compliance scans now show fewer security flags. The migration required no functional changes, preserving existing CI/CD pipelines and deployment workflows.