Your findings, mapped against the rules that apply to your firm
The Rules and Insurance Briefing ties each finding to the privacy and sector rules for your province or state and sector. It is a mapping, not a compliance certification and we never describe it as more.
Attackers now use AI to read a firm the way a search engine does: the website, directories, search results and what AI assistants say. Each finding we hand you is human-verified before your assessment is released.
Rules, in the words your insurer uses.
Each finding tied to the rule it touches and why.
Health, legal, financial and general privacy rules, chosen for your kind of firm.
Canadian and US rules, chosen for where you operate.
Written for an insurer, a broker or an examiner to read as it is.
Every way in, found externally only. Not a pen test: nothing attacked, nothing installed, no access given.
Every finding checked, in order of what to fix and human-verified.
We close it: you get the fix for each finding, step by step; forged email closes where we can reach your DNS host, one click per step. Re-checked until closed.
Email settings, look-alikes and new host names re-checked every hour, everything else every day and newly exploited flaws matched to your website's software within a day. Alerts the same day. You are first to know.
Under monitoring, the same surfaces are watched: email settings, look-alikes and new host names re-checked every hour, the rest every day, with an alert to a named contact the same day.
On a paid assessment, our AI agents work your firm externally, stage by stage:
- the Discover AI agent reads what your firm shows the public internet with fixed checks
- the Close AI agent gives you each fix and re-checks it externally
- on monitoring, fixed checks re-check every hour and every day
Every paid assessment is human-verified before release. After you buy, AI chooses follow-up checks, picks when to re-check externally and sorts new changes by which needs you first.
No AI agent can state a finding without a fixed external check behind it.
The assessment comes with an AI security agent on your dashboard: ask it about any finding in plain English and it answers from your own firm's findings.
Our AI agents operate externally. They never log in, never install anything and never touch your internal systems. They change nothing by themselves: you approve each change to your email records.
See what is open externally before anyone else does.
The External Exposure Check: your external reading, the openings a stranger can see on your firm today, with the proof for the lead finding. Read-only, externally.