Free tool for program administrators and MGAs
If an insured calls tonight with a breach, who do you point them to?
Eight questions, about four minutes. A transparent self-assessment of your program's cyber response capability, scored entirely from your own answers, no invented benchmarks. No signup, nothing stored.
0 of 8 answered. Runs in your browser, nothing stored.
Why this question lands on every program
Specialty programs run on carrier paper with binding authority, and the niche doesn't stop being insured when it goes digital , contractors' payment portals, property managers' systems, fleets' telematics. When an insured's cyber incident becomes a claim, the program owns the loss ratio it touches and the question it gets asked: what response capability did the program provide? This check is that answer, worked out before anyone needs it.
Frequently asked questions
What does this check measure?
One thing: if an insured calls tonight with a suspected cyber incident, what response capability can your program point them to? Eight questions about named firms, written procedures, verified qualifications, referral trails, and who owns the question. The score is a transparent self-assessment derived entirely from your own answers.
My program isn't a cyber program, does this apply to me?
It applies to you precisely because of that. Specialty programs (contractors, habitational, trucking, daycare, and every other niche on carrier paper) insure businesses with real cyber surfaces, and cyber claims arrive on programs that never sold a cyber policy. The question that follows an uncovered incident is the same everywhere: what response capability did the program provide?
Is this a cybersecurity audit of my insureds?
No. Nothing here inspects your insureds' security. This is about the program's own readiness to respond when an insured has an incident, who you would point them to, whether that's documented, and whether the firms behind it are verified anywhere.
Are my answers stored or shared?
No. The whole check runs in your browser, the scoring is local, nothing is submitted to a server, and there is no account. Close the tab and it's gone.
Our program already uses the carrier's breach panel. Isn't that enough?
It's a start, and this check doesn't judge it. What it asks is whether your program can answer with documentation when the question comes from your carrier, your reinsurer, or your E&O carrier: who does your program refer insureds to, and on what basis. A documented answer needs more than a phone number you hope is current.