SupportSales XXX-XXX-XXXLog in
logo-denexus-navy
DeRISK Intelligence Platform
Products
Add-ons
Under every product
DeRISK CRQ
Quantify

Your OT cyber risk, in dollars a board, CISO and CFO can act on.

What DeRISK CRQ does :
Dollar risk via FAIR / FAIR-MAM for OTTies risk to drivers of risk and lossFour levels, public data to OT dataAdds OT network data and RBVM
What you get :
EAL, VaR, loss-exceedance curvesReports for CEO, CISO, CFO, COO, CROFacility and portfolio rankingsDefensible to board, CFO, insurerTop drivers of risk and of loss
CRQ Plans
Level 1 EstimateFreePublic data · no questions · ~2 minLevel 2 BaselineFreePublic data + fewer than 10 questionsLevel 3 Board-GradePremium · Recommended50 questions, 3 frameworks · five reportsLevel 4 Evidence-GradePremium+ OT network data & maturity assessments
DeRISK UWA
Transfer

Price residual OT cyber risk on evidence, not attestation.

What DeRISK UWA does :
Whole submission read as one caseFull underwriting output in 10–20 min9 insurer/broker forms, no mappingOur standard or your frameworkOur actuarial engine or your model
What you get :
A verdict with conditionsOEP/AEP curves, economic impactStructuring and premium indicationA committee-ready report to bindRisk benchmarking
UWA Plans
StandardFreeOne submission · short report · ~15 minProfessionalPremium · RecommendedCommittee reports · saved analyses · ISF · on requestEnterprisePremiumAPI · single-tenant · your model · white-label · on request
DeRISK Consultant
Reduce

Turn the risk number into a funded remediation plan.

What DeRISK Consultant does :
Ranks every gap by the loss it carriesNext-best fix and its roadmapYour risk, budget or cover targetOne plan across many frameworks
What you get :
Ranked fixes: most risk per dollarFacilities and timing per fixRisk, compliance, cover programs
Availability
On DeRISK CRQComing soonfrom Level 3 Board-GradeOn DeRISK UWAComing soonfrom Professional
DeRISK Davy
QuantifyReduceTransfer

Ask your risk anything. Davy answers in your own data.

What DeRISK Davy does :
Ask any output, in your languageGrounded in your own analysisFollow-ups keep screen context
What you get :
Anyone can ask, not just analystsAnswers decision-makers act onProvenance behind every answer
Availability
On CRQComing soonfrom Level 3 Board-GradeOn UWAGAfrom Professional
DeRISK Scenario Simulator
QuantifyTransfer

Model a ransomware or disaster scenario before you commit budget or bind cover.

What DeRISK Scenario Simulator does :
Tests scenarios on your scored riskEach control's real effectCompares investments side by side
What you get :
Risk cut per option, before spendDecide by model, not by argumentWhat to reduce, what to transfer
Availability
On DeRISK CRQComing soonfrom Level 3 Board-GradeOn DeRISK UWAComing soonfrom Professional
Threat-Intel Premium Feed
QuantifyTransfer

Deeper threat context on both sides of the deal.

What Threat-Intel Premium Feed does :
Bundled premium threat-intelAuto-applied to every analysisTraceable provenance in outputExtends the feed, never replaces
What you get :
Sharper likelihood inputsThreat context without your own feedTraceable sources in the reportFeeds risk numbers and underwriting
Availability
On DeRISK CRQComing soonfrom Level 3 Board-GradeOn DeRISK UWAComing soonfrom Professional
Threat-Intel: Bring Your Own
QuantifyTransfer

Your own feeds in the model and the underwriting.

What Threat-Intel: Bring Your Own does :
Ingest your threat-intel subscriptionsBlended in, never swappedSet up with our team, per source
What you get :
Your feeds, no duplicate spendOne blended view of threat likelihoodFor quantifying risk or pricing it
Availability
On DeRISK CRQOn requestfrom Level 3 Board-GradeOn DeRISK UWAOn requestfrom Professional
DeRISK Threat Intelligence
What Threat Intelligence does :
CollectCleanEnrichGold signals
Under every DeRISK product :
CRQ: frequency from real campaignsUWA: submissions threat-validated
Go further
Threat-Intel Premium FeedThreat-Intel: Bring Your Own
Judge Agents
What Judge Agents do :
Audit reasoning on key outputsSend back work that doesn't holdNever generate content
Where they sit :
Scenario Judge on The AssessorVaR Judge on FAIR Quant, Actuary
Under every DeRISK product
DeRISK CRQDeRISK UWA
Solutions
Solutions by role
Industrial operators :
CEO & BoardCISOCFOCOOChief Risk Officer
Insurers :
UnderwriterActuary
Solutions by problem
Industrial operators :
Put a dollar figure on your OT cyber riskFind the facilities that carry the most riskUnderstand what drives your OT cyber lossReport OT cyber risk to each executive, in their termsAnswer “are we exposed?” the day it mattersKnow whether your OT cyber risk is materialDecide which OT fix comes nextBuild an OT cyber roadmap and get it approvedShow whether OT cyber risk is going up or downRight-size your cyber insurancePrepare your cyber insurance application package
Insurers :
Assess OT controls in every industrial submissionPrice industrial cyber cover on modelled lossSpot poor cyber-physical risks before you bind
Solutions by industry
Industrial operators :
Oil & GasElectric T&DPower GenerationManufacturing
 
Data CentersBuildingsTransportation & LogisticsWater & Waste
Insurance & finance :
Insurance & RiskCapital Markets
All solutions
Find your starting point :
OT cyber risk in dollars, for every industry and every roleIndustrial operators, insurers and investors on one platform
Resources
BlogCRQ, OT threats, regulation and underwritingWebinarsLive and on-demand sessionsVideosProduct tours and short explainersNewsletterThe DeNexus Risk Brief, every monthIncidentsAnalyses of real OT cyber incidents
Learn
GlossaryOT and industrial cyber risk termsFAQsAnswers on OT cyber risk quantification
Company
CareersJoin the teamNewsroomAnnouncements and product newsPartnersTechnology and insurance partnersTrust CenterHow we protect your dataContactTalk to sales or ask us anything
CRQ Plans
Level 1 EstimateFreePublic data · no questions · ~2 minLevel 2 BaselineFreePublic data + fewer than 10 questionsLevel 3 Board-GradePremium · Recommended50 questions, 3 frameworks · five reportsLevel 4 Evidence-GradePremium+ OT network data & maturity assessments
UWA Plans
StandardFreeOne submission · short report · ~15 minProfessionalPremium · RecommendedCommittee reports · saved analyses · ISF · on requestEnterprisePremiumAPI · single-tenant · your model · white-label · on request
Add-ons
DeRISK ConsultantDeRISK DavyDeRISK Scenario SimulatorThreat-Intel Premium FeedThreat-Intel: Bring Your Own
Talk to salesTry DeRISK Intelligence
← Legal

Schedule E — Third-Party Terms & Notices

  • Version 1.0
  • Effective 16 November 2026
  • Last updated 16 November 2026
Download PDFPrevious versions
Item Value
Document Schedule E to the DeRISK™ Intelligence Platform EULA — Third-Party Terms & Notices
Version 1.0
Effective date 16 November 2026
Published at denexus.ai/legal/third-party
Contents
  1. 1. Third-party content and services
  2. 2. Required notices

1. Third-party content and services

1.1 Threat intelligence and other third-party content. Some content in the platform, such as threat intelligence, vulnerability advisories and industry loss data, comes from public sources and licensed third parties. It is provided as is, without any warranty from DeNexus or its licensors. You may use it only within the platform and in Outputs you share under EULA 6.6. You may not extract or redistribute it in bulk.

1.2 Connectors. The platform can connect to third-party products you choose to use, such as OT security and network tools. Those products are governed by their providers' terms, and DeNexus is not responsible for them.

1.3 Your own feeds. If you connect your own threat-intelligence subscriptions, your licence with that provider governs their use. You confirm that it allows the use. DeNexus may disable a feed whose provider objects or whose licence ends.

1.4 Trademarks. Third-party names and marks belong to their owners. Their mention does not imply endorsement.

2. Required notices

The following notices are given because the relevant licences require them.

Source Notice
MITRE ATT&CK® © 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation. MITRE ATT&CK® and ATT&CK® are registered trademarks of The MITRE Corporation; DeNexus is not affiliated with or endorsed by MITRE. Used under MITRE's royalty-free ATT&CK licence for research, development and commercial purposes, as set out in MITRE's ATT&CK Terms of Use at attack.mitre.org/resources/legal-and-branding/terms-of-use.

We add further notices to this Schedule whenever a source's licence requires one. Notices for open-source software used in the platform are available on request from legal@denexus.ai.

Questions about these terms: legal@denexus.ai

Platform
  • DeRISK Intelligence Platform
  • DeRISK CRQ
  • DeRISK UWA
  • Threat Intelligence
  • Judge Agents
  • Plans
Add-ons
  • DeRISK Consultant
  • DeRISK Davy
  • Scenario Simulator
  • Threat-Intel Premium Feed
  • Threat-Intel: Bring Your Own
Industries
  • Oil & Gas
  • Electric T&D
  • Power Generation
  • Manufacturing
  • Data Centers
  • Buildings
  • Transportation & Logistics
  • Water & Waste
  • Insurance & Risk
  • Capital Markets
Roles
  • CEO & Board
  • CISO
  • CFO
  • COO
  • Chief Risk Officer
  • Underwriter
  • Actuary
  • All solutions
Resources
  • Resources hub
  • Blog
  • Customer stories
  • Webinars
  • Videos
  • Newsletter
  • Learn
  • Glossary
  • FAQs
Company
  • About DeNexus
  • Careers
  • Newsroom
  • Partners
  • Trust Center
  • Customer portal
  • Contact
Monthly editionOT cyber risk

The DeNexus Risk Brief

New research, upcoming webinars and the regulatory changes that move OT cyber risk, once a month.

No spam. Unsubscribe at any time.
DeNexus© 2026 DeNexus Inc. All Rights ReservedLegalEULAPrivacyCookiesSecurityWebsite termsTrust CenterSupport