Capabilities
What Insurance Posture Analyzer does
Seven capabilities, one purpose: an application whose answers match what an incident responder would actually find in your environment.
The scanner: your inside view of what carriers judge from the outside
The scanner connects read-only to Microsoft 365, Entra ID, and Azure and collects the configuration controls carriers ask about: MFA and conditional access, privileged access, and email authentication.
Carrier scoring tools rate your external surface. The scanner reads the internal state those tools never see: which conditional access policies actually enforce MFA, who holds privileged roles, and whether email authentication is really configured. It has no write access and makes no changes. You grant consent when you connect, and you can revoke that consent at any time. The access model is documented on our security page.
Carrier question library
A canonical question library written in our own wording to reflect the control topics that recur across US cyber application and ransomware supplemental forms; no carrier's form is republished, so one assessment pre-fills most of what each carrier asks.
Upload any application, renewal application, or ransomware supplemental in any format, or start from the library directly. Because canonical questions are mapped across carrier forms, answering once pre-fills each carrier's version with that carrier's wording shown alongside. Mapped answers are a starting point: review each carrier's exact wording before your signer approves the submission, because scope differences between similar-sounding questions can change the correct answer. See the questionnaire guide for what these forms typically cover.
Evidence-checked answers
You answer from extracted documents and attestations, and each mapped answer is cross-checked against live scan data, with drift flagged when the environment contradicts what was attested.
Every answer lands in one of three states: verified, where scan data confirms it; attested, where it rests on your documents and attestations; or gap, where the environment contradicts the answer or the control is missing. That distinction matters because application answers are representations the carrier relies on, and you want contradictions surfaced before you sign, not after a claim.
Verified
Attested
Gap
Prioritized by what carriers ask most
Gaps are ranked by how prominently the control appears across carrier applications and supplementals, so you fix what carriers ask about most insistently. Ranking reflects question prominence, not any carrier's underwriting rules.
Not every gap costs the same. A control that appears on nearly every application and supplemental matters more than one that appears occasionally, so the ranking orders your fix list by what carriers ask about rather than by a generic risk score.
Broker-ready outputs
A drift brief plus your evidence files in one place, ready to hand to your broker without translation.
When the application goes to the broker, the supporting package goes with it: what was verified, what was attested, what changed, and the evidence behind each answer.
Continuous posture
Scheduled rescans catch drift between renewals, so an answer that was true in March does not silently become false by October.
Posture is not a point-in-time exercise. Rescans keep each mapped answer checked against current configuration state, and drift surfaces when it happens instead of at the next renewal or, worse, during a claim investigation.
Teams and multiple organizations
Role-based access for your team, with multiple organizations under one login.
This suits internal IT and security teams working alongside risk owners, and advisors who manage the posture of several organizations from a single account.