For Insurers, Reinsurers & UMAs
No line gets written on a risk that carries no frequency and no severity. Cyber submissions arrive as questionnaire answers and outside-in scans, and neither produces the two quantities underwriting runs on. Üsta does, for each applicant, independently. The pricing decision stays yours.
Request a Partnership ConversationThe severity tail a cyber policy has to absorb, estimated for the applicant in front of you.
The Underwriting Gap
Most cyber underwriting for mid-market risks still rests on a proposal form, an external scan and a benchmark drawn from another market's loss data. None of those returns a frequency or a severity for the business in front of you, so the rating, the limit and the cession rest on judgement.
Many proposal forms ask the applicant to estimate its own business interruption loss in a free-text box. Üsta gives that estimate a method, so the number in the file has a basis a second underwriter can follow.
What You Receive
A probability-weighted loss estimate for the applicant, in money, built from its own exposure base and control posture.
What a severe year could cost (VaR and TVaR), so limits and excesses are set against the tail rather than the average.
A structured control assessment corroborated against an independent external view of the applicant's attack surface. Self-attestation is weighted by how well it can be checked.
Every figure carries its range and what it rests on. Where evidence is thin, the range widens and the output says why, which is what an underwriting file needs to be reviewable.
Data breach and cyber fraud are modelled in money today. Other exposures, such as ransomware and system outage, are reported as findings until their parameters have been through Üsta's release process.
Who This Is For
Move from a proposal form and a scan to a modelled loss estimate for each risk you are asked to write. Use it as one input to rating, limit setting and referral decisions alongside your own guidelines.
Risks reach you from different cedants on different forms. An independent estimate produced the same way for each gives treaty and facultative underwriters a common, documented reference point to question.
Build an underwriting view you can defend to the insurers you underwrite for: a stated method, a repeatable process and an audit trail behind each risk you write under your binder.
Offer quantified cyber assessment to commercial clients as a service. They see their own exposure in money and how the cover they buy relates to it, which deepens the relationship at renewal.
How It Works
Which lines and segments, which applicants, and how outputs reach your underwriters. Üsta runs the model; you receive the outputs.
Üsta's structured assessment is completed by the applicant, administered either by Üsta or within your own onboarding and renewal process.
Loss estimates, severity tails, scenario findings and a control posture profile for each applicant, structured as an input to your own decision.
Outputs are refreshed at renewal and as loss data matures, so the exposure view your underwriters rely on stays current.
The fastest way to judge the output is on an applicant you already know.