Cyber insurers and reinsurers typically rely on static questionnaires and periodic audits to assess an organization’s cyber posture, which provides only a snapshot of risk and often omits operational technology (OT) environments. This limited visibility can lead to mispriced policies, unexpected loss events, and inefficient underwriting workflows. Additionally, security teams lack a unified view that ties together external scans, internal telemetry, and OT sensor data in real time.
Funding
Funding not disclosed
Founders
Product
Problem
Cyber insurers and reinsurers typically rely on static questionnaires and periodic audits to assess an organization’s cyber posture, which provides only a snapshot of risk and often omits operational technology (OT) environments. This limited visibility can lead to mispriced policies, unexpected loss events, and inefficient underwriting workflows. Additionally, security teams lack a unified view that ties together external scans, internal telemetry, and OT sensor data in real time.
Solution
Inscura delivers a continuous, real‑time cyber risk intelligence platform that aggregates data from outside‑in network scans, native API feeds, and OT sensor streams into a unified risk model. The service computes a dynamic security score that reflects the current exposure of both IT and OT assets, allowing underwriters to adjust pricing as conditions evolve. Data are normalized and stored in a cloud‑native data lake, where a scoring engine applies weighted risk algorithms and machine‑learning adjustments. Users access the results through a web‑based dashboard that visualizes posture trends, highlights critical gaps, and provides drill‑down details for remediation. The platform exposes RESTful APIs so underwriting systems can automatically ingest scores and trigger policy adjustments without manual data entry. A subscription SaaS model provides ongoing updates, compliance reporting, and integration support for security operations teams.
Target Audience
The primary customers are cyber insurance underwriting teams and reinsurers who need up‑to‑date risk metrics, as well as OT security professionals responsible for protecting industrial control environments.
Features
- Continuous outside‑in scanning of external attack surfaces using credential‑less probing and vulnerability fingerprinting
- Bi‑directional API connectors for SIEM, CMDB, and asset‑management tools to ingest internal telemetry and configuration data
- OT sensor integration layer that normalizes PLC, SCADA, and IoT telemetry into the risk model
- Real‑time scoring engine that applies configurable weightings, threat‑intel enrichment, and anomaly‑detection heuristics to produce a single security score
- Interactive web dashboard with trend graphs, asset‑level heat maps, and automated remediation recommendations
- RESTful API and webhook support for seamless embedding of scores into underwriting workflows and policy‑management platforms
- Role‑based access control, end‑to‑end TLS encryption, and SOC 2‑type data‑handling compliance for secure multi‑tenant operation