Business basics
Registered name, industry, turnover band, employee count, and the domains and systems you rely on.
Underwriting that starts with your systems.
We assess cyber risk the way a security team would, then turn it into clear insurance terms. Here's what happens, what we need from you, and how we handle your information.
The process, step by step.
Most businesses go from first contact to quote in [TODO: confirm typical turnaround]. Brokers follow the same route with their client's consent.
1
Tell us about the business
Business details, IT environment, key suppliers and the cover you want. You or your broker complete one short intake form.
2
External posture review
With written consent, we review publicly visible infrastructure for the domains you list: exposed services, remote access, email security and certificates.
3
Technical conversation
A short call with your IT lead or managed service provider to confirm controls and understand context. No trick questions.
4
Quote with reasons
Terms, limits and premium, plus a plain-language summary of what drove them and what would improve them.
5
Cover and support
Bind through us or your broker. You get incident hotline details, policy documents and periodic check-ins on your posture.
What we'll need from you
Nothing you don't already have. If you use an IT provider, they can answer most of the technical questions.
Your key controls
MFA coverage, backup approach, endpoint protection, email security, and who manages your IT.
Cover history
Any existing cyber cover, renewal date, and incidents or claims in recent years.
How we handle your information
You're sharing sensitive information about your security. We treat it that way, and process it in line with POPIA and our privacy notice.
Our external review is passive and non-intrusive. We look only at what is already publicly visible, and only for the domains you authorise.
- No login attempts, exploitation or load testing, ever
- Scope limited to the domains you list on the intake form
- Findings shared with you (and your broker, if you choose)
- Data retention and security: [TODO: confirm retention period and hosting location]
Frequently asked questions.
No. A penetration test actively tries to break in. Our review only observes what is publicly visible, much like an attacker's reconnaissance, and is designed to cause no disruption.
