Cyber insurance evidence
Underwriters at Coalition, Cowbell, At-Bay and others are adding third-party vendor risk questions to renewal forms. OpenPostern generates the evidence package they're asking for, automatically.
What your underwriter is asking
Do you monitor your third-party vendors for security vulnerabilities?
Yes, continuously.
Can you provide documentation of your vendor risk assessment process?
Yes, on-demand PDF reports.
Which of your vendors have access to sensitive customer data?
Yes, tagged by data classification.
The exact artifact your broker needs
One click generates a complete vendor risk evidence package: your vendor inventory, risk scores, CVE breakdown, CISA KEV flags, SSL health, and last scan date.
Vendor Security Risk Report
Acme Corp
Generated May 3, 2026 · 4 vendors monitored
Portfolio Score
76
/ 100
Stripe
Payments
AWS
Infrastructure
Gusto
HR & Payroll
Zendesk
Support
How it works
01
Add your vendors
Search our catalog by vendor name. We automatically enrich each one with category, domain, certifications, and historical exposure data. Takes about 60 seconds.
02
We monitor continuously
Our engine checks CVEs, CISA KEV flags, breach news, SSL certificate health, and DNS configuration every day, automatically.
03
Generate your evidence package
On-demand PDF risk report, ready in seconds. Vendor list with risk scores, CVE counts, KEV flags, SSL status, and last scan date. Send it straight to your broker.
Command plan
For $179/month, get unlimited vendor monitoring plus on-demand compliance evidence packages.
That's less than one hour of a security consultant's time. Generate as many PDF reports as you need, whenever your broker asks.
FAQ
What exactly does the PDF report contain?
The report includes your full vendor inventory with individual risk scores (0-100), CVE counts broken down by severity, CISA KEV flags for actively-exploited vulnerabilities, SSL/TLS certificate health, DNS configuration status, last scan date, and any certifications on file for each vendor.
Which insurance carriers accept this?
Coalition, Cowbell, Corvus, At-Bay, and most commercial cyber carriers that include third-party risk questions in their renewal questionnaires. The report documents your continuous monitoring program, which is what underwriters are asking for.
How long does setup take?
Under 5 minutes. Search for your vendors in our catalog, click monitor, and we handle everything else. Your first PDF risk report is available immediately after adding vendors.
Start free. Add your vendors in under 5 minutes. Generate your first PDF risk report before your next broker call.