Cyber insurance runs on information, and almost all of it is rebuilt from scratch at each stage of the policy life. The insured fills in an application. The underwriter interprets it. The policy term passes with little visibility. At renewal it starts again. At claim, everyone reconstructs what was true on the day.
Four reconstructions of the same risk
Moment | Who builds the picture | How |
|---|---|---|
Application | Insured and broker | Self-attested questionnaire |
Underwriting | Carrier | Questionnaire plus outside-in scans |
Policy term | Usually nobody | Little or no monitoring |
Renewal and claim | Carrier and insured | Reconstruction from whatever evidence survives |
Each reconstruction is expensive, and each one is a chance for the two sides to disagree about the facts.
Four partial views of the same risk, or one shared record that both sides trust.
What an evidence layer is
An evidence layer is a single, continuously updated record of an organisation's cyber exposure and controls, mapped to what the policy actually requires. It does three things:
Quantifies the risk in financial terms, so the insured knows what could be lost and what the policy covers
Turns policy conditions into tested controls, each with evidence that it is in place
Keeps that evidence current, so it is ready for renewal and claim without a scramble
In plain language
Instead of each party building its own picture at a different time, both sides look at the same proof, updated as the risk changes.
What each side gets
For insureds: a clear view of their exposure, a prioritised list of what to fix, and proof of insurability they can take to market.
For insurers: underwriting on measured exposure, monitoring through the policy term, faster renewals and fewer disputes at claim.
Built inside the insurance ecosystem
Astragar was part of the Global Insurance Accelerator cohort showcased at ITC Vegas 2026. The evidence layer was designed with that two-sided market in mind: one record, used by the people who buy cover and the people who write it.
Next step. Twenty minutes on Teams is enough to walk through the evidence layer from both sides. Book 20 minutes →
For any comments or information please reach out to info@astragar.com
See your cyber risk in $ terms, not CVSS scores.
