MEDICAL DEVICE RIGHT-TO-REPAIR

Your Clinic's TMS Machine Shouldn't Need Permission to Treat

NeuroStar devices require a cloud connection and per-treatment fees to operate — even after clinics pay up to $80K for the hardware. We're building the open-source server that gives clinics device independence.

0
Tests Passing
100%
API Coverage
0
NeuroStar FDA Clearances
140K
Lines of Code
🧠 7 rounds of personal TMS treatment
💻 140K lines of code
🔍 27 patents analyzed
DMCA 1201 compliant
Understanding TMS

What is Transcranial Magnetic Stimulation?

TMS is an FDA-cleared, non-invasive brain stimulation therapy that helps people when antidepressants haven't worked. No surgery. No anesthesia. No systemic side effects.

How It Works

An electromagnetic coil placed against the scalp delivers focused magnetic pulses to the left dorsolateral prefrontal cortex — the brain region involved in mood regulation. These pulses stimulate underactive neurons, gradually restoring normal activity patterns.

What Treatment Looks Like

Patients sit in a chair for 19–37 minutes per session, 5 days a week, for 6–7 weeks (36 sessions total). They're fully awake the entire time. Most describe a tapping sensation on the scalp. There's no recovery time — patients drive themselves home.

FDA-Cleared Conditions

Major depressive disorder (NeuroStar, 2008), anxious depression (NeuroStar, 2021), adolescent depression (NeuroStar, 2024), OCD (BrainsWay Deep TMS, 2018), smoking cessation (BrainsWay, 2020), and migraine (investigational). Over 7.6 million treatments delivered to date across the NeuroStar platform alone.

Safety Profile

The most common side effect is mild scalp discomfort during treatment, which typically resolves within the first week. Serious adverse events are rare (<0.1%). TMS does not cause the weight gain, sexual dysfunction, or cognitive dulling associated with many antidepressants.

Why Device Independence Matters

Patients Deserve Therapy That Can't Be Switched Off Remotely

The right-to-repair movement has shown what happens when manufacturers retain control over hardware customers have already paid for. The same pattern exists in medical devices — with higher human stakes.

🔒

Cloud-Dependent Operation

The NeuroStar requires an active TrakStar cloud connection to operate. Neuronetics' Terms of Sale confirm TrakStar is licensed, not sold, and tied to the system's service term. If that connection is lost — for any reason — so is the clinic's ability to treat patients.

0
documented offline fallback modes
💸

Per-Treatment Fees That Never End

After paying up to $80K for the machine, clinics pay $60–$100 per treatment for the life of the device. Neuronetics' SEC filings show per-treatment fees were ~70% of their U.S. revenue. These ongoing costs make it harder for independent and underserved clinics to offer TMS at accessible prices.

$3,600
in vendor fees per patient course

No Long-Term Guarantee

What happens when cloud support ends? The Terms of Sale contain no offline-mode guarantee. No legacy mode is documented. Clinics and patients deserve to know that a device they rely on won't become unusable if a company changes its business model.

?
no documented plan for end-of-cloud-life
"TrakStar is licensed, not sold, and is provided subject to the terms and conditions of your Master Sales Agreement." — Neuronetics Terms and Conditions of Sale (2022), Section 1.1

The Human Cost

2.8 Million Americans Need This. Most Will Never Get It.

TMS is one of the most effective treatments for depression that doesn't respond to medication. But the cost structure means most eligible patients never receive it.

7.6M
Treatments Delivered
NeuroStar platform alone (Neuronetics 2025)
50-60%
Response Rate
Meta-analysis range (Psychiatric Times 2023)
30-40%
Full Remission
Complete resolution of depression symptoms
<10%
Ever Receive TMS
Even at clinics offering TMS (PMC 2024)
$43.8B
Annual Burden
Economic cost of treatment-resistant depression

Where The Money Goes (Per Patient, 36-Session Course)

Patient
Pays $6K–$15K
Clinic
Keeps remainder
Neuronetics
Takes $2,160–$3,600

The per-treatment fee is charged on top of the machine purchase (up to $80K new). It never stops. It can never be paid off.

"The prevalence of TRD among MDD patients was 30.9%, representing an annual economic burden of $43.8 billion in the United States alone." — Zhdanava et al., Journal of Clinical Psychiatry (2021)

How It Works

No Firmware Mods. No Hacks. Just a Better Server.

The NeuroStar connects to trakstarcloud.com over HTTPS. We redirect that DNS entry to a local server that speaks the exact same API. The device doesn't know the difference.

NeuroStar Device
Windows Embedded / .NET
Connects to trakstarcloud.com
HTTPS
Local DNS
trakstarcloud.com
→ 192.168.x.x
redirect
Liberation Server
FastAPI + SQLite
170 routes, 42 DTOs
blocked
Neuronetics Cloud
trakstarcloud.com
$60-100/treatment
ServiceStack Compat
ss-id/ss-pid cookies, X-CSRF, camelCase JSON, lowercase error envelopes
Safety Validator
FDA limits: 50Hz max, 120% MT, 4000 pulses/train, 8 protocols
RSA Device Registration
2048-bit OAEP key exchange, console identity binding
Sync Engine
8 sync-down endpoints, 11 transaction types, conflict resolution
SQLite Backend
22+ tables: patients, treatments, protocols, motor thresholds, audit log
FHIR R4 Bridge
HL7 interop: Patient, Procedure, Observation, DeviceRequest

Zero Firmware Modification

We never touch the device software. The machine boots normally, connects to what it thinks is Neuronetics' server, and operates exactly as designed. All treatment safety logic stays on the device.

All Safety Limits Enforced

Our server validates every treatment parameter against 8 FDA-cleared protocols. Max 50Hz frequency, 120% motor threshold, 4000 pulses per train. We refuse unsafe parameters even if someone tries to send them.

Runs on Anything

A Raspberry Pi. An old laptop. Docker. Any machine on your clinic's network. No special hardware, no cloud dependency, no subscription. You own your server like you own your machine.

Complete Patient Data

All patient records, treatment histories, motor thresholds, and clinical notes stay on your local server. No PHI leaves your network. Full HIPAA control without a third-party cloud.


Engineering Progress

Precision-Engineered for Safety and Reliability

Every line of code is backed by tests. Every API route matches the spec. This isn't a hack — it's a carefully built, spec-compliant replacement server.

8,017
Automated Tests Passing
170/170
API Routes Implemented
42/42
Data Models Complete
80%
Device Readiness
100%
Safety Validated
140K
Lines of Python
Key Discoveries

What We've Uncovered

Through reverse engineering, patent analysis, FDA filings, and live API probing, we've mapped the entire NeuroStar ecosystem.

Hardware

CPU Board Identified: Avalue ECM-BYT-E3845

The NeuroStar's brain is an Intel Atom Bay Trail SBC with a CompactFlash boot slot. We can image the firmware with a $10 CF card reader. eBay has CPU+firmware bundles for ~$3K.

Software

Internal Platform: "Horizon 3.0"

Discovered via 510(k) K231926 cross-reference. The software stack is .NET on Windows Embedded, with ServiceStack 6.x powering the API. Every endpoint uses camelCase JSON with lowercase error envelopes.

Regulatory

17 FDA Clearances Mapped

From the original 2008 De Novo classification through the 2024 adolescent clearance. We've identified 27 patents covering every subsystem, with US8177702 (contact sensing) as the architectural Rosetta Stone.

Security

Self-Hosted Security Model

The Liberation Server runs on your own network with no external cloud dependencies. All authentication, rate limiting, and treatment safety limits are enforced locally — eliminating exposure to upstream vendor infrastructure risks.

Supply Chain

Full Manufacturing Chain Decoded

Avalue (Taiwan) makes the SBC. Molex makes the SenStar contact sensor. Ascential Technologies assembles the console. Gharieni builds the chair. We know who makes every component.

Return on Investment

The Math Speaks for Itself

Here's what happens when you eliminate the per-treatment vendor fee for a single NeuroStar machine.

With Neuronetics Lock-In

Machine cost (used, eBay)$15,000
Per-treatment fee (avg $80)$80
Treatments/year (10 pts × 36)360
Annual per-treatment fees$28,800
5-year per-treatment cost$144,000

With Liberation Server

Machine cost (used, eBay)$15,000
Self-hosted server$0
Per-treatment fee$0
Treatments/year360
Annual per-treatment fees$0
5-year per-treatment cost$0
$144,000
saved per machine over 5 years

The Ask

What We Need to Finish

The software is 80% ready. To reach 100%, we need a used NeuroStar console to extract the firmware, capture the final authentication handshake, and validate the server end-to-end against real hardware.

$3,900

Used NeuroStar Console

Complete system unit from eBay with CPU board (Avalue ECM-BYT) and CompactFlash firmware card. This is the single item that closes every remaining gap — firmware extraction, live auth handshake capture, and end-to-end server validation.

  • Full Windows Embedded OS image via CF card reader
  • .NET application decompilation (TrakStar client source)
  • Live authentication handshake capture against cloud
  • SQLite treatment database schema extraction
  • TLS certificate chain & pinning behavior analysis
  • Boot configuration & recovery documentation
$400

Network Analysis & RE Toolkit

Everything needed to capture, decode, and analyze the device-to-cloud communication during live operation.

  • Managed switch with port mirroring (traffic capture)
  • Passive Ethernet TAP for non-intrusive packet analysis
  • USB logic analyzer for serial protocol decoding
  • USB-to-RS232 serial adapters (FTDI, 4-port)
  • Raspberry Pi 5 deployment target (server validation)
  • Network cables, crossover adapters, patch panel
  • mitmproxy + Wireshark (open source, $0)
$200

Lab Consumables & Test Hardware

Board-level diagnostic tools and consumables for safe hardware analysis and end-to-end treatment simulation.

  • CompactFlash USB reader + spare CF cards (industrial)
  • SenStar treatment link pads (10-pack)
  • JTAG/SWD debug probe for microcontroller analysis
  • Digital multimeter for board-level diagnostics
  • Anti-static workstation kit (mat + wrist strap)
  • Jumper wire kit, headers, DuPont connectors
$4,500
total funding needed to reach 100% device independence
Donate Now
PayPal Ko-fi Liberapay GitHub Sponsors

More options and anonymous donations on the full donate page.

Open Source Commitment

Free Software. No Company. No VC. No Catch.

Released as free, open-source software under the MIT license. Any clinic, anywhere, can use it. No subscriptions. No telemetry. No strings.

View on GitHub →

Full Source Code

The server, deployment scripts, test suite, protocol library, and documentation are all public. Fork it, audit it, improve it.

Deployment Guides

Step-by-step instructions for Linux, macOS, Docker, and Raspberry Pi. DNS configuration, TLS certificate generation, systemd service files. A non-technical clinic admin can set it up.

No Gatekeeping

No registration. No API keys. No analytics. You download it, you run it, you own it. The way software used to work. The way medical equipment should work.

Community-Maintained

Once released, the community maintains it. If I get hit by a bus tomorrow, the code doesn't die with me. That's the point of open source — no single point of failure.

Help Us Reach Full Device Independence

The software is 80% ready. The last 20% requires a used NeuroStar console to extract firmware and validate end-to-end. $4,500 gets us to full device independence.

Donate Now I Have a NeuroStar View Source on GitHub
PayPal Ko-fi Liberapay

More options and anonymous donations on the full donate page. If you have a NeuroStar machine, that's worth more than money.