This Schedule lists the products, tiers and add-ons available today and what each includes. New products and add-ons are added as they become available, with a new minor version. Nothing here commits DeNexus to future features (EULA 3.6).
1. Products available
| Product | What it does | Free Tier | Premium Tiers |
|---|---|---|---|
| DeRISK™ CRQ | Quantifies cyber risk in financial terms for industrial operators | Level 1 (Estimate) and Level 2 (Baseline), self-serve | Level 3 (Board-Grade) and Level 4 (Evidence-Grade), by Order Form |
| DeRISK™ UWA | Supports cyber underwriting from insurer and broker submissions | Standard, self-serve | Professional and Enterprise, by Order Form |
DeRISK™ Threat Intelligence content is included in both products, in every tier. Other products, levels and add-ons are not yet available and will be added to this Schedule when they are.
2. What each tier includes
DeRISK™ CRQ
| Level | Tier | Inputs you provide | What you get |
|---|---|---|---|
| 1 · Estimate | Free | Basic company information | One generic company report |
| 2 · Baseline | Free | Answers to a short question set (fewer than 10 questions) | Generic company report with risk scenario analysis |
| 3 · Board-Grade | Premium | A 50-question assessment in a framework you choose, and supporting documents | Five role-based reports (board, CISO, CFO, COO, CRO), at company or facility level |
| 4 · Evidence-Grade | Premium | Level 3 inputs plus OT network data at facility level | The same five reports, built on facility network evidence |
DeRISK™ UWA
| Tier | Includes |
|---|---|
| Standard (Free) | One document per submission; pre-trained insurer and broker questionnaire formats; standard threat intelligence; standard cybersecurity frameworks; standard actuarial engine; short risk report |
| Professional (Premium) | Everything in Standard, plus multiple documents per submission, custom submission types, committee-ready reports, white-labelled reports, report retention, and an insurer-specific framework |
| Enterprise (Premium) | Everything in Professional, plus API access, a single-tenant deployment option, use of the insurer's own actuarial model, and the insurer's own report format |
3. Add-ons
Add-ons attach to Premium Tiers only.
| Add-on | What it does | Available on | How to get it |
|---|---|---|---|
| DeRISK™ Davy | Answers questions about your existing DeRISK data in plain language; it does not create new analyses. Conversations are not stored: Davy keeps them only in your open browser tab, and they are lost when you reload the page or start a new chat. Davy does not remember past conversations | DeRISK UWA Professional and Enterprise | Order Form |
| DeRISK™ Consultant | Identifies the next-best remediation projects, their scope and order, and the financial risk reduction of each. It does not estimate remediation cost or schedule | Premium Tiers | Order Form |
4. Retention, support, prices and limits
| Free Tiers | Premium Tiers | |
|---|---|---|
| Customer Data and Outputs | Deleted when each run completes | Kept 12 months on a rolling basis; deleted earlier on request; longer by Order Form, which may carry a fee (EULA 7.5) |
| DeRISK™ Davy conversations | Not available | Not stored; kept only in the open browser tab |
| Support | None | Email and phone, 6:00 a.m. to 5:00 p.m. Pacific Time on business days, for up to 4 designated contacts |
| Service levels | None | As stated in your Order Form |
| Prices | Free | As stated in your Order Form |
| Run limits | Shown in the product | As stated in your Order Form |
We may change prices, pricing structure and free run limits under EULA 9.4.