From 10–30 hours of manual work to 10–20 minutes, by DeNexus’s estimate, and you review every output.
Your first submission runs free on DeRISK™ UWA Standard: one document, read as it arrived. It asks the applicant nothing, and a human reviews every output.
One submission document · Standard tier short report · human review before release
Augment your underwriting team with OT cyber specialist capability — without hiring one.
One answer, as the applicant gave it, as the assessment reads it, and as you decide on it.
Q41: Is the OT network segmented from IT? “Yes.”
Stated, not verified: it doesn’t say whether that means a VLAN, a firewall, a DMZ or something else.
Quote with conditions: more detail on segmentation before binding.
Generic views of the committee-ready report on the Professional tier.
The price shows how it was built, for referral and audit.
Stated and verified controls, IT and OT, kept apart.
The premium is 1.4 times expected annual loss. Also VaR and the AEP curve.
Scale 0 to 10, where 10 is best. Every view uses the same direction.
| Condition | When | Evidence | If unmet |
|---|---|---|---|
| MFA on all remote access, including vendors | Before binding | Configuration record or attestation | Bound with a remote-access exclusion |
| Offline, tested backups | Before binding | Latest restore test | Quote withdrawn |
| OT asset inventory | Subjectivity: within 90 days of binding | Inventory document | OT losses excluded from day 91 |
Conditions before binding, kept apart from post-bind subjectivities, each with its evidence and its consequence.
Every finding traces to the question or document behind it, with an attribution statement and a human review.
OT control maturity, 0 to 10, where 10 is best
Where this applicant sits among its sector peers, by control area, with its percentile. One applicant at a time, not a portfolio view.
Your DeRISK results already hold the answer. Finding it shouldn’t take a meeting.
DeRISK Davy add-on
Davy is the voice; the score, the decision and the report come from DeRISK. Davy runs on frontier AI models, privately inside DeNexus’ own cloud environment. Guardrails at the model boundary. No training on your data. Your conversation history stays in your account, and you can delete it at any time.
Why quote with conditions, not approve?
OT controls are unverified. The OT supplemental wasn’t returned, so OT confidence is 0.20. Three conditions close the gaps.
The underwriter decides. Nothing binds without a person.
A full audit trail and attribution statement.
The Enterprise tier substitutes your actuarial model entirely.
Each runs in isolation, nothing trains the models, and client data is flushed after the run.
Operators use DeRISK CRQ to put their OT cyber risk in dollars. They can share a Risk Transfer Evidence Bundle based on data-driven telemetry, and DeRISK UWA reads it with the rest of the submission.
Each document counts toward document coverage, one of the inputs to the confidence score.
Whitepaper · 13 min readA questionnaire tells you what the applicant says. Facility-level evidence tells you what the plant could lose.
Read the paperSample report (PDF).webp?width=1600&height=900&name=methodology-cover%20(1).webp)
Methodology paper · 20 min readCreate a free account and run one submission on the Standard tier. It asks the applicant nothing, and you review every output.