PolicyReadinessThe insurer will ask for proof.
Have it ready.
Upload your evidence once. Each file gets an automatic first check, then an analyst makes the call. You see what is supported and what still needs work, before the underwriter does.
MFA on remote access (VPN, RDP gateway, cloud apps)
sha-256 a9e8ffdf…01beed4fd
Uploaded by Sam Rivera
Dana Cole · vCISO · Sample data
The VPN policy is good. The remote desktop gateway for the imaging server is not in it. Add MFA there, then upload a screenshot of that setting.
The application asks for proof. Know your answers first.
The form got longer
Underwriters now ask about MFA, EDR, backups, patching, and your incident plan. Each "no" is a gap to close before you apply.
A "yes" needs proof
An answer that you cannot prove puts a later claim at risk. A screenshot from last year, in an inbox, is not proof that you can find.
It comes back each year
Renewal asks the same questions again. Without one place for the evidence, you start from zero each time.
How it works
Upload evidence
Screenshots, exports, and policies. Each file gets a time stamp and a SHA-256 fingerprint, and a virus scan. No document yet? Fill in the online template for the control. On Microsoft 365 Business Premium or Google Workspace, connect it, and the security settings are read every day and saved as evidence.
Analyst review
On the Guided and vCISO plans, an analyst marks each control Supported or Needs work, with a plain note on what is missing.
Apply with proof
Print the readiness report with the evidence behind each control. Most controls also name the CIS Controls v8.1 safeguards they match. Use the same proof at renewal.
A readiness score is our review of your evidence. It is not approval from an insurer. The insurer makes its own decision on cover and on claims.
Choose your first step
Readiness check
Eight questions an underwriter may ask first. You see your score at once, and nothing is stored.
Free assessment
Fifteen questions and a gap report you can print. Ask for a review, and our vCISO offers a free 20-minute call.
Live demo
A read-only sample company. Click through every control and the report. No account needed.
Plans
Your evidence locker and readiness report, with analyst review of your proof. From $299 a month.
Eight questions an underwriter may ask first
A free check. Nothing is stored until you ask for the full result. "Not sure" counts as a gap: the insurer needs proof, not a guess.
Do you want a person to look at your answers? Take the free security assessment: 15 questions, a gap report, and a free 20-minute call with our vCISO.
Plans for a firm without a security team
For brokers, agents, and managed service providers
Offer cyber insurance readiness to your clients under your own name: your brand, your web address, and your analysts or ours. You pay per client. See the partner program.
Know where you stand before the underwriter asks.
The readiness check takes two minutes. Your answers stay in this browser until you submit the sign-up form. We count anonymous visits and checks, with no answers.