In 60 seconds
A review that checks every answer on your cyber insurance application against what is actually deployed.
A plain-language report, a prioritized fix list, and a letter stating what was reviewed, when and what was found.
If the review does not meet the scope we agreed in writing, we make it right or refund the fee (tell us within 14 days of delivery).
What insurers now ask you to prove
Insurers have moved from "do you have it?" to "prove it."
- Multi-factor authentication coverage
- Endpoint protection coverage on devices
- Backups and a recent restore test
- Who has administrator access
- An incident response plan
- Patching of internet-facing systems
If an application says a control is on everywhere and a breach shows it was not, an insurer can deny the claim for misrepresentation, even when the gap was unintentional.
What you get, and what you do not
You get
- A plain-language report
- A prioritized fix list
- A letter documenting what was reviewed, when and what was found
- A walkthrough with your IT provider
You do not get
- A guarantee of coverage or a lower premium
- A penetration test (a separate service from $5,000)
- Legal advice
- Remediation work
How it works
- 1
Kickoff and scope in writing.
- 2
We check your application answers against evidence.
- 3
Walkthrough with you and your IT provider.
- 4
Report and letter delivered, about 2 to 3 weeks in total.
Already have an IT provider? Good.
We do not replace them. They build and run it. We check it, and walk every finding through with them.
Who reads what
CFO or COO, who signs the application
Evidence that the answers are true.
General counsel or compliance
A dated record of what was reviewed.
IT lead
A clear fix list they can act on.
Five questions to ask any firm
- 1
What will it cost, in writing?
- 2
What is tested and what is not?
- 3
Who does the work, and is any of it manual?
- 4
What do I get that I can hand to an insurer?
- 5
What happens if it is not good enough?