Exposure Library / Perils / Ransomware

Peril · Ransomware

Ransomware starts at the edge.

Most ransomware gets in through something reachable from the internet: remote access left open, an edge device with a known exploited flaw, or software nobody patched. The Ransomware dial estimates how likely that is for this applicant today.

Trusted by leading carriers and brokers

Johnson Kendall Johnson
Crum & Forster
Allied World
Trium Property
Sullivan Group
Profinity
Intact Insurance
Munich Re
Old Republic Cyber
What drives the dial

What the scan looks for.

Exposed remote access

RDP, SSH, Telnet and VPN interfaces reachable from the internet. A weak credential can be enough.

Actively exploited flaws

Known vulnerabilities with evidence of exploitation in the wild, especially on internet-facing appliances.

Unpatched software

Versions with known vulnerabilities, weighted by severity and exploit likelihood.

How it shows up

In the report.

The Ransomware dial sits in the Security Score. The findings behind it are in Risk Detections, and the Infrastructure section shows whether they’re concentrated on one host.

How to read the score →

Representative finding
FindingVPN appliance version with an actively exploited vulnerability
DomainRemote Management
PerilRansomware
SignalsActively exploited High CVSS · high EPSS
Fed by these domains

Where ransomware exposure sits.

Real-world context

What similar incidents cost.

The report’s Incident Lawsuits section matches the applicant to comparable real cases by industry, size and attack profile. It gives pricing context; it isn’t a prediction.

Questions to raise

Common subjectivities.

  • Close or restrict remote access found open to the internet.
  • Patch actively exploited vulnerabilities before bind.
  • Confirm MFA on remote access.

Need to know whether a known exploited flaw actually works on an insured’s host? RED Scan →

Other perils: Data Breach · Social Engineering · Business Interruption

Back-test us against your own book.

Send five past submissions you’ve already bound, conditioned or declined. We score them blind, then put our read next to the call you made.