Security Announcement: Heartbleed (CVE-2014-0160)

We’d like to let you know about a severe security vulnerability that has just been announced and has affected the majority of the internet.  This is not something you need to be alarmed about, but something you should be aware of. As always, the security of your information is our top priority and we’d like you to know what has been going on recently.

On the 8th of April, 2014 at 3:30am AEST, a bug known as Heartbleed (official reference CVE-2014-0160) was publicly announced. This bug is a serious vulnerability in the popular OpenSSL cryptographic software library.

OpenSSL is a library used by most online systems (estimated 66% of the internet) to handle secure internet traffic.  Secure internet traffic is the HTTPS (or green lock) you see in your browser URL when using secure sites such as Online Banking, Credit Card Forms and Cliniko.

How it affected Cliniko

At Cliniko, we were using the affected OpenSSL library (as is the majority of the internet).  This means that Cliniko was vulnerable to this security flaw.  Whilst vulnerable, we have no reason to believe that any attack was made on our systems or any data was exposed.

What we have done about it

Since the public release of this information on 8th of April, 2014 at 3:30am AEST, we worked as quickly as possible to secure our systems from this vulnerability.  By 9th of April, 2014 at 5:55am AEST we no longer used the vulnerable version of OpenSSL and had re-keyed our SSL certificates (the appropriate actions required to resolve this security issue).

What you should do

Whilst we have no reason to believe any information was exposed from Cliniko, we do recommend you change all your passwords to something new and secure. This is playing it very safe, but we think that’s the best approach when it comes to security.

We also recommend you change all your passwords with other internet services (eg. facebook, internet banking, email, etc.) too.  Importantly, you need to wait until these services have secured themselves from this vulnerability before you proceed with changing your password.


This is the largest security vulnerability to hit the internet that I can recall. It is a big deal and we think you should know about it. We also don’t believe any attack has been made against Cliniko and that your data is still in the safest place possible.  We’ve acted very quickly and fixed our systems as fast as possible.  We are no longer exposed to this vulnerability.

We do recommend you change your passwords in Cliniko and all other online systems once you know they have fixed the issue.

If you want to find out more, google “Heartbleed”, it’s quite a popular topic right now.

If you have any questions about this at all, please do let us know and we’ll provide any assistance we can.


Cliniko Recent Updates.

Hi everybody! It has been an exciting few weeks here are Cliniko and our development team has been very busy. We have released several new features and updates!

  • New dashboard design and new larger fonts.
  • Added the ability to reorder the practitioners on the appointment calendar.
  • Added support for the Vietnamese Dong currency.
  • Allowed the use of the same email address across multiple Cliniko accounts. This is a great feature for virtual reception companies or staff who may work at several different clinics.
  • Added the patients email address to the online bookings email the practitioner receives.
  • And finally the big one! The ability to copy the last treatment note, more on this below.

We have received many requests to add the ability to copy a previous treatment note and we listened!  This is great if your treatment notes are similar each time.  It will copy the last note into your current one, so you can quickly make changes and save it.

It will copy from the last treatment note of the same type, from the same patient.

It’s as easy as clicking a link!


That is all for this post, until next time.



Calling Cliniko support is even easier now!

It’s now easier to call us if you’re in Ireland, New Zealand or South Africa. We’ve now got phone numbers in each of these countries now.

Just to be clear, it doesn’t mean we have offices there, just that it will come through to our support team, and be a local call for you.

We get asked from time to time why we do not publish support hours on our website. We like to have the flexibility to answer your calls anytime. Our team is spread all over the world. When you call Cliniko it rings everyone’s phone simultaneously and whoever is available picks up. I know many times we have answered calls on a late Saturday night or early Sunday morning. If for some reason we are not available just leave us a voicemail and we will call you back within a couple hours.

As always, you can find our phone numbers here



Give us a call sometime. We would love to hear from you!



Cliniko Recent Updates

Hello all! I am back after a bit of a hiatus. Lots of exciting features have been released since my last update. You can get fully caught up here: Without further ado here are some recent changes.

  • Added a provider number field to the contacts section.
  • Changed the format of the times in online bookings from 24 hour time to AM/PM.
  • Added the business name to the patient appointments list.
  • Refreshed and updated the Cliniko header to a new design.

As you can see we are off to a big start to 2014. Everyone at Cliniko is really looking forward to a huge year. We have a lot of great improvements planned and the entire team is fired up.

Until next time!



Prioritising Customer Support

Customer Support is very important to us at Cliniko.  It’s important to us because it’s important to you.

We’ve seen many of our competitors with messages on their website like “Our support will be closed from the 23rd of December 2013 until 6th of January 2014″.  We think this is irresponsible.  Practice Management Software is mission critical to healthcare businesses, we won’t just disappear for a period when people might need us.

With this in mind, I’m really proud to see some of our support statistics over the last few weeks, during the “Holiday Period”.

These statistics are for support tickets between 23rd of December 2013 and 3rd of January 2014. (more…)


Cliniko changes week ending 6 November 2013

It is time once again for your weekly Cliniko update. We concentrated on fixing a few bugs and preparing for our rollout to the new online bookings tool.

Changes this week.

  • Added description field to both appointment types and practitioners for future online bookings rollout.
  • Corrected the format of Dr, Mr, and Mrs (removed the period).
  • Add titles Sir and King.
  • Fixed issue where letters were incorrectly displaying genders as a number.
  • Appointment deletion now correctly deletes associated invoice and payment.

If you want to see all the details just head over to:

Until next week!




Cliniko changes week ending 30 October 2013

Hello all! Time for your weekly Cliniko update. Just a week until our Cliniko meet up in Melbourne. I have about 50 things on my to-do list before I leave so my post will be short this week.


  • Additional placeholders for appointment reminders.

We introduced a load of new placeholders you can use to customize your appointment confirmation and reminder messages. The one placeholder I think is really awesome is the appointment type. Remind your patients not only about the appointment but WHY they are visiting. Perfect for multi-disciplinary clinics!

Bug Fixes

  • Fixed the default file name when saving an invoice as a PDF file.
  • Fixed an issue when selecting a treatment note template on iPads running iOS7.

As always you can get all the details here:

That is all for this week, have a wonderful week!




Cliniko changes week ending 23 October 2013

Hello everybody! Time for your weekly Cliniko update. I have a lot to talk about this week as we released several new Cliniko features.

Here is what we worked on this week.


  • Sequential invoice numbers.
  • Appointment confirmation emails with calendar attachments.

Sequential invoice numbers. Prior to this update invoice numbers were shared across the Cliniko system, meaning that if you did two invoices back to back the invoice number could increment more than one. Invoice numbers are now unique per account.

Appointment confirmation emails. We are very excited about this feature. Cliniko is now able to send a confirmation email with calendar attachment when an appointment is created for a patient.  Before you patient leaves the office they will get an email with all of the appointment details.

You can customize the confirmation text to include your policies, links to new patients forms, and any other information you want to add. We also give you the ability to remove your address information from the calendar invite. This is ideal for mobile businesses.

Whew! A very exciting week at Cliniko.

Until next time.




Cliniko changes week ending 16 October 2013

Another week has flown by already, so it is time for your weekly Cliniko update. No real updates to report. Don’t worry though, our developers have been hard at work on some larger features that will be released soon. More on that next week!

Since I have some extra time this week I thought I would talk more about our Melbourne meet up in November (24 days away as of this writing). As I mentioned a couple weeks ago the entire Cliniko team with be in the Melbourne office for three weeks in November. We have lots of exciting plans!

  • Development marathon to complete many new Cliniko features.
  • Documentation marathon with a plan to release a large number of new help documents and maybe even a few videos.
  • Barista Instruction and lots of expresso(coffee is a big deal in Melbourne).
  • Nerf wars.
  • Table Tennis championship.
  • Game night(s)
  • And our big treat, a weekend holiday at Apollo Bay!

I cannot wait! A lot of hard work but a lot of hard play as well!



Cliniko changes week ending 9 October 2013

It is time for your weekly Cliniko update. This time next month I will be in Melbourne at our Cliniko meet up. I cannot believe it  is only a month away! Once again our development team has been really busy. This week we released the following updates:

  • Xero integration bug fixes.
  • Infrastructure updates, more on this below.
  • Added the ability to link a patient to a referring doctor.
  • Improvements to wording in invoice emails to patients and other parties.

Sometime the updates we do for Cliniko are not cool flashy features (even those are my favorite). In the case of the infrastructure update it was to solve a problem a particular set of users was having.  We noticed that customers on Bigpond (a major ISP in Australia) would occasionally get “Server not found” errors when navigating Cliniko. We traced the problem back to the DNS servers that Bigpond uses. A DNS server takes and translates it to an internet address your computer knows how to get to.

Instead of blaming Bigpond and leaving our customers with intermittent service, we developed a work around that corrected the problem.

I hope everyone has a wonderful and productive week.

Until next week!