Prove your controls. Renew with confidence.
Underwyn helps mid-market security teams and brokers demonstrate the controls cyber insurers require — closing gaps before renewal, not after a claim is denied.
Built for $50M–$1B organizations · 23 cyber frameworks mapped · Free public preview
Who Underwyn is for
Built for teams facing real renewal pressure
RENEWING IN < 90 DAYS
You need proof of controls — fast
Your insurer wants evidence of MFA, EDR, network segmentation, and IR maturity. Underwyn maps your current controls against what underwriters actually require — in minutes, not months.
Try the free assessment →CYBER BROKER
Give clients structured evidence packages
Help your mid-market clients arrive at renewal with structured control attestations that underwriters accept. Fewer questionnaire rounds, faster bind, better outcomes for your book.
Request broker accessCLAIM DENIED
Understand exactly why — and fix it
Insurers deny claims citing specific control failures. Underwyn maps those gaps to your existing controls and builds a remediation roadmap that satisfies underwriter requirements before your next renewal.
Review my gaps →How it works
From control register to renewal submission
Build your control register
A purpose-built control register scoped to cyber insurance requirements. Assign owners, set review cadences, and attach evidence to each control.
Control owners · Evidence · NIST · CIS v8 · ISO 27001
Map to carrier questionnaires
Underwyn maintains a structured library of the actual questions on major cyber insurance applications — Coalition, At-Bay, Cowbell, Chubb, Travelers, Beazley, AIG, plus broker supplementals.
10+ carriers · Auto-mapping · Gap identification
Generate the renewal package
A broker-ready submission: a PDF for your insurer, structured data for carriers that accept it, and a timestamped attestation log for claims defense.
PDF submission · Attestation log · Claims defense
The problem
Renewal is a scramble. It doesn't have to be.
- No organized record of what you have. Controls live in scattered spreadsheets and people's heads.
- Attestations that don't hold up in claims. Claiming a control without documentation is a claims defense liability.
- Broker submissions are inconsistent. Different formats from every client slow down underwriting.
The solution
Underwyn is your system of record for cyber insurance
- A control register built for insurance. Organized around the controls carriers ask about.
- Evidence that holds up in claims. Every attestation is timestamped and versioned.
- Broker-ready packages, not spreadsheets. Mapped to each carrier's actual questions.
Four core engines
A complete system of record for your cyber insurance program
Carrier Questionnaire Library
A structured, maintained database of the actual questions on major cyber insurance applications — kept current as carriers update their applications.
10+ carriers · Auto-mapping · Kept current
Control Register
Scoped to cyber insurance requirements — not a generic GRC checklist. Aligned to NIST 800-53, CIS v8, ISO 27001, NIST CSF 2.0, SOC 2, PCI DSS, HIPAA, CMMC, FedRAMP, and 14 more — see the full list below.
Control owners · Review cadences · 23 frameworks
Evidence Vault
Versioned storage for policies, screenshots, attestations, SOC 2 reports, and tabletop exercise summaries, with freshness alerts before evidence goes stale.
Versioned · Tagged to controls · Freshness alerts
Renewal Submission Generator
On-demand broker-ready PDF and structured data export — mapped answers, evidence references, owner sign-offs, and a timestamped attestation log.
Broker PDF · Attestation log · Claims defense
Reference frameworks (23)