InsuranceUnderwriting

Cyber Underwriting

Assess an organization's breach history before pricing or issuing cyber insurance coverage.

Start with 500 free creditsDocumentation

Email breaches · 1 credit per lookup · no monthly fee

Acme Corp

Moderate risk

7

Breaches, 5y

+18%

Premium adj.

The problem

Underwriting cyber policies on questionnaires means pricing risk on self-assessment. Organizations with poor credential hygiene look identical to disciplined ones, until the claim arrives.

With Encrata

Sweep the applicant's corporate domain for breach exposure during underwriting. Breadth and recency of exposed employee credentials is an objective, verifiable risk input, priced into the premium, documented in the file, and checkable again at renewal.

How it works

1

Send the address

Call the breach endpoint with an email address, one-off for a signup check, or on a schedule for monitoring.

2

We check known breaches

Encrata searches disclosed breach data and returns every breach the address appears in, when it happened, and what leaked.

3

Respond to exposure

Alert the user, raise a risk score, force a reset or require MFA, the full breach history is one credit away.

One call, structured answer

Cyber Underwriting runs on the email breaches lookup at 1 credit per lookup. Same API key, same JSON shape as every other Encrata lookup.

  • Full breach history, names, dates and exposed data classes per breach
  • 1 credit per check, so continuous monitoring stays affordable
  • New-breach detection turns a public leak into a same-day security response
  • Works for one address or your whole domain
Terminal
curl -X POST "https://encrata.com/api/agent/breaches" \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"email": "sam@corp.com"}'
response.json
{
  "email": "sam@corp.com",
  "breached": true,
  "breach_info": {
    "breach_count": 2,
    "services": [
      { "name": "LinkedIn", "breach_date": "2012-05-05",
        "data_types": ["Email addresses", "Passwords"] }
    ],
    "exposed_data": ["Email addresses", "Passwords"]
  },
  "credits": 1
}

Measure exposure at underwriting

Sweep the applicant's domain during underwriting and score on three axes: what fraction of employees appear in breaches, how recent the exposures are, and whether passwords were involved. Re-run at renewal, the trend between policies is a better predictor than any single snapshot.

Priced on evidence, not forms

It moves pricing from questionnaire trust to measurable exposure: two applicants with identical self-assessments can carry wildly different credential-exposure profiles, and now the premium can reflect it. Claims teams get value too, post-incident, the underwriting sweep documents what was already circulating before the policy was written.

More email breaches use cases

View all

New breach: DataCo

Your email was exposed · just now

Secure account

Breach Alerts

Warn users the moment their email address shows up in a newly disclosed data breach

CybersecurityMonitoring

Identity risk

78/100
4 prior breaches · manual review

Risk Scoring

Raise risk scores for identities with prior breach exposure before approving transactions

FintechRisk
Breach affects 3 users
Password resets sent

Password Reset

Trigger targeted password resets when a breach relevant to your users becomes public

SaaSSecurity
Start with 500 free credits
$curl https://encrata.com/api/agent/lookup -H "Authorization: Bearer YOUR_API_KEY" -d '{"e": "satya@microsoft.com"}'