Your renewal asks about MFA, endpoint protection, backups and an incident plan. We check every answer against what is really running, help you fix the gaps, and give you evidence to hand your broker.
Cyber insurance forms now read like a security audit. Here is what is driving that, in plain English.
In 2022 an insurer and a policyholder agreed to have a court void a cyber policy from day one. The insurer said the MFA answer on the application was wrong. That left no coverage for the ransomware attack.
Carriers commonly expect MFA, monitored endpoint protection, tested backups, a written incident response plan, patching and staff training. Increasingly they want proof that each one is in place.
Auto dealers that arrange financing, mortgage brokers, tax preparers and other non-bank financial firms must keep a written security program: a risk assessment, MFA, encryption, an incident response plan and regular testing. Breaches affecting 500 or more consumers must be reported to the FTC within 30 days.
Florida businesses also have state duties. A breach affecting 500 or more Floridians must be reported to the Florida Department of Legal Affairs within 30 days.
General information, not legal advice. Ask your attorney which rules apply to your business.
Start free. Most clients go from the check to the assessment to the sprint, then keep their evidence current with Security Watch. Prices are for up to 25 users unless noted.
Round-the-clock monitoring of your endpoints through a partner security operations center, added to Security Watch: $12 per endpoint per month.
Available to clients by request: $5,500, or $4,500 for Security Watch clients. Every test is scoped in writing and starts only after you sign a rules-of-engagement and authorization letter.
Owned and run by a service-disabled U.S. Navy veteran. You work directly with the owner, from scoping to readout.
The founder holds a cybersecurity degree and leads an enterprise security operations program.
AI tools speed up evidence gathering and reporting, so you pay for judgment, not busywork. A person reviews every finding and approves every action.
We prepare the evidence. You sign your application. Scope and exclusions are always in writing.
We prepare the answers with you and gather the evidence behind each one. You review and sign. The business is always the attesting party.
No. Nobody honest can. What we can do is make your answers accurate, close the common gaps, and give your broker proof to work with.
No. We work alongside your current provider, and many assessments end with your IT company doing some of the fixes. If you want us to run IT too, we can.
No. It includes a non-intrusive scan of your internet-facing systems, done only with your written permission, plus a review of settings and evidence. A penetration test is a separate, scoped service.
It covers many non-bank financial businesses, including auto dealers that arrange financing, mortgage brokers and tax preparers. Firms with customer information on fewer than 5,000 consumers are exempt from some parts (the written risk assessment, the pentest schedule, the written incident plan and the annual report) but not the rest. Ask your attorney to confirm. We will map whichever parts apply.
The packages are built for businesses with 5 to 75 users. Prices cover up to 25 users, with 26 to 75 user pricing shown. Larger environments get a fixed quote after the free check.
Yes. The work is done remotely nationwide. On-site visits are included in Tampa Bay.
Fixed-price projects are 50% to start and 50% at delivery. Security Watch is billed monthly in advance. We accept ACH and credit card.
We sign a mutual NDA before any work, store evidence encrypted, and return or destroy it on request when the engagement ends.
Book the free 15-minute readiness check. Your score and top 3 gaps arrive by the next business day.
