FAQ

It is the insurer's argument that what you declared on the proposal form did not match reality, and that it would not have written the policy, or not on those terms, had it known. After a ransomware event, a gap between a declared control (for example, MFA on all remote access) and the actual environment can be enough to deny the claim or void the policy.

A gap report from an IT or GRC vendor is an ordinary business document. In a coverage dispute or a lawsuit it can be requested and used against you. When the review is commissioned and led by counsel to give legal advice, its findings can be protected as privileged work product.

A broker places the policy and negotiates its terms. We verify that what you declare is true and provable, read the warranties and exclusions as lawyers, and keep the findings privileged. We work alongside your broker, not instead of them, and we take no commission from any insurer.

No. The questionnaire, heatmap and exposure calculator give a preliminary indication only. They are not legal advice or an underwriting commitment. Privileged advice is given under an individual engagement.

Nothing is stored until you choose to see the full dashboard and give explicit consent. If you only want your score, you can see it without saving anything. See the privacy policy for details.

CEOs, CFOs, general counsel, CISOs and directors of mid-market and enterprise companies, especially those exporting to Europe or operating in regulated sectors.

Yes. We work with Israeli companies serving Europe and with clients under EU frameworks (GDPR, NIS2, DORA), and the CCIS (London) credential means we speak the language of Lloyd's and European underwriters.

A 30-minute confidential video call with Adv. Ziv Onn. We go through your result, the policy you hold or are about to sign, and the two or three gaps that matter most. You leave with a clear next step, whether or not you engage us.