Exposure Library / Perils / Social Engineering
Peril · Social EngineeringMake impersonation harder than it looks.
Business email compromise and phishing get easier when a domain doesn’t prove who is allowed to send its mail. The Social Engineering dial estimates how likely an email-driven loss is for this applicant today.
Trusted by leading carriers and brokers
What the scan looks for.
The report’s Mitigating Controls section also shows whether email security and phishing protection are detected in place.
In the report.
The Social Engineering dial sits in the Security Score. The findings behind it are in Risk Detections, and the Infrastructure section shows whether they’re concentrated on one host.
What similar incidents cost.
The report’s Incident Lawsuits section matches the applicant to comparable real cases by industry, size and attack profile. It gives pricing context; it isn’t a prediction.
Common subjectivities.
- Publish SPF and DKIM for every sending domain.
- Move DMARC to an enforcing policy.
- Patch internet-facing mail servers.
Other perils: Ransomware · Data Breach · Business Interruption
Back-test us against your own book.
Send five past submissions you’ve already bound, conditioned or declined. We score them blind, then put our read next to the call you made.