Networks · Insurers and mutuals

Every member mutual, watched externally. You hear it first.

For insurance associations, mutual groups and broker networks. One ranked board of every member's email, addresses in breach databases and lookalike domains, read every month, with the fix for each member, step by step.

Request a network summary All network types
Private to youNothing testedEvery assessment human-verified
Network readingHow it is built
Your networkEvery member
Each member mutualRanked
Its domain and emailRead
What is open todayFlagged
What is open today. The members with the most exposed, ranked first.
Every assessment human-verified before releaseRead-only
01 · Who your members are

Insurance associations, mutuals and brokers.

Your member mutualsEvery one listed publicly
Guidance that appliesFinancial Services Regulatory Authority of Ontario
What we readPublic records, ordinary page visits
What you receiveA ranked, private summary
The insurer pack, for each assessed firmOne download for your broker or insurer: your Assessment Record, the Rules and Insurance Briefing and every fix confirmed closed externally, each with its date.
02 · How it works

Discover. Validate. Close. Monitor.

01
Discover
Every member mutual read externally every month, most exposed first.
02
Validate
Every finding with its proof: the record and a check anyone can re-run.
03
Close
The exact fix for each member mutual, step by step, re-checked until closed, with a dated record.
04
Monitor
On monitoring: email settings, look-alikes and new host names every hour, everything else every day, with an alert the day something new opens. Each member’s external changes week to week. The assessment includes your first month of monitoring: the watch starts the day the assessment is released and nothing renews on its own.
03 · Why it lands on you

A forged email from one mutual is trusted because of the others.

Policyholders, brokers and adjusters act on email that carries a mutual's name: premium notices, claim payments, changes to banking details. When one mutual's email can be forged or one firm address is already in a breach database, the false instruction travels on the trust the whole group has built. The policyholder who is misled calls the mutual and the questions reach the association. The same openings are the ones underwriters now ask about before they write cyber cover, so a member that has them is also a member that will be asked about them.

What a network summary showsPer member, ranked
Every lineWith a check anyone can re-run
Who sees itYou alone, by private link
Next readingEvery thirty days; on monitoring, email settings, look-alikes and new host names every hour and the rest every day
04 · What you get

One board for you, a fix for each member mutual.

For the network
One board across every member, ranked, with the evidence
Alerts when a member's exposure changes, to you and to each member that agreed
A fresh reading of every member each month and a monthly summary of what changed for your board
Private links like this one and logins for your team
For each member mutual
A full assessment: three documents and a dated record
Its own dashboard, watched continuously when it takes monitoring
A step-by-step fix for its own set-up
Alerts in your name when its own exposure changes, once it has agreed
For your policyholders · in your portal
A consent page each policyholder agrees to once and can withdraw on
A check at application or renewal, run by your staff
Your book re-checked every month, most openings first
A CSV export for your underwriting system; a direct feed set up with you

Nothing reaches any of your member mutuals without your say-so. You decide who hears what and when.

05 · Independence

Works with the IT your members already have.

We never replace a member's IT provider and we are paid by no one who sells the fixes. Each member gets the fix for every finding, step by step. We re-check it externally and record the date it closed.

Remediation soldNone
Access to member systemsNone
PilotThree members, no charge
Advising clients one firm at a time?See partners
06 · Where your member mutuals are in Ontario

What the guidance already expects, in its own words.

Financial Services Regulatory Authority of Ontario
FSRA IT Risk Management Guidance (GR0016INT)
The guidance that applies to Ontario-incorporated insurers, effective 1 April 2024. It places accountability for IT risk with each insurer's board, expects risks and vulnerabilities to be identified and monitored on a regular basis and asks for a material IT risk incident to be reported to FSRA no later than 72 hours after it is determined.
"Accountability for the effective management of IT risk rests with the Insurer's Board of Directors."
Source
Financial Services Regulatory Authority of Ontario
The same guidance on distribution channels
It extends an insurer's IT risk expectations to its brokers and outsourced functions.
"This includes ensuring that IT risks are being effectively managed through all of its distribution channels and outsourced functions"
Source

A reading is external evidence a board can use for this. It does not say any member mutual is out of step with it.

07 · Questions networks ask

What we are usually asked first.

Our members already have IT providers.
We do not replace them. Each member gets the fix for every finding, step by step. We re-check and record the date it closed.
We already give members cyber templates and self-assessment material.
Templates set out what should be true. This shows what is true today, externally, for each member and keeps reading every month.
Did you test our members' systems?
No. Nothing was logged into or tested. Public DNS, certificate and registration records, monitored breach databases and an ordinary visit to each public website.
08 · Request

See your members externally, privately.

We read each member's public side and send you a ranked, private summary. Or start with a no-charge pilot on three members.

What we readPublic sources only
Who sees itYou alone
Delivery72 hours from confirmation
Mutual NDAAvailable on request
Network summary requestPrivate
Problem: Enter your network's name.
Problem: Enter your name.
Problem: Enter a full address, like [email protected].

A person reads every request. We reply within 4 business hours from [email protected]. Privacy