Cyber Indemnity Solutions

Cyber risk assessment tools and cyber insurance solutions for the insurance industry

Specialty Solutions Established Bootstrapped

Overview

Cyber Indemnity Solutions (CIS) is a specialty solutions provider for the insurance industry, offering cyber risk assessment tools and cyber and data insurance products to insurer partners across Australia, New Zealand, and the broader Asia Pacific region. Founded in 2009 and headquartered in Melbourne, Victoria, the company operates on a B2B model, licensing its technology platform and insurance products to carriers and brokers rather than selling direct to policyholders.

The company delivers its offerings through a combination of patented insurance products, a SaaS risk management platform (Data Protect 360), and managed security services via its Crimson Risk association. Key differentiators include a patented Digital Asset Protection (DAP) Insurance policy covering permanent data loss -- a distinct risk subset not commonly addressed in standard cyber policies -- and insurer-audited data backup services managed to Center for Internet Security (CIS) standards. The platform integrates with the Fortinet Security Fabric, including FortiGate enterprise firewall and FortiAnalyzer, to deliver cyber risk assessments to its insurer and partner network.

CIS has developed long-term partnerships with global insurance and cybersecurity organizations, including Marsh, which distributes the CyberProtect 360 product with a CFC Insurance endorsement. The company has been ranked among the top 10 insurtech companies in Australia by Tracxn, with many staff noting tenures exceeding 11 years.

Products & Services

Digital Asset Protection (DAP) Insurance

A patented first-party insurance policy covering policyholders against permanent data loss incidents. The policy can be embedded within existing cyber coverage or provided concurrently with a standard cyber policy. An accompanying Data Insurance policy includes insurer-audited data backup services managed to Center for Internet Security standards.

Key Features

Patented coverage specifically for permanent data loss events
Embeddable within existing cyber policies or available concurrently
Insurer-audited data backup services managed to CIS standards
Distinguishes permanent data loss from broader cyber incident coverage

Target Users: Insurance carriers seeking to expand or differentiate cyber coverage offerings

CyberProtect 360

An end-to-end security service combining cyber risk management with cyber insurance coverage, distributed through Marsh with a CFC Insurance endorsement. Targets small to mid-sized businesses in financial services, healthcare, and retail. Includes a cyber awareness training platform with 10-15 minute staff education modules, endpoint protection, and an embedded AI-driven security component.

Key Features

Cyber awareness training platform with bite-sized staff education modules
Endpoint protection with malware protection, vulnerability scanning, web security, and exploit prevention
Front Line AI-driven endpoint security with detection and response capabilities
Zero-day threat protection and basic monitoring

Target Users: Small to mid-sized businesses in financial services, healthcare, and retail; distributed via insurance brokers and carriers

Data Protect 360 (DP360)

An advanced SaaS platform for security, legislation compliance, insurance, and standards management. Provides 24/7 monitoring and data compilation across IT environments, policies, and security management protocols. Built on the NIST Cybersecurity Framework and aligned with the Australian Government ASD Essential 8 and UK Cyber Essentials standards.

Key Features

24/7 continuous monitoring across IT environments and security controls
Audit and cyber risk management framework based on NIST, ASD Essential 8, and UK Cyber Essentials
Compliance monitoring against insurance policy terms and conditions
Hierarchical board and senior-staff reporting on compliance status

Target Users: Insurer partners and enterprise clients requiring board-level compliance reporting; MSPs and MSSPs

Cyber Risk Assessments, Consulting and Training

Comprehensive cyber risk assessments, consulting, and training covering all areas of business and government. A consulting version is available for MSPs, MSSPs, IT consultants, insurance brokers, and insurers to service their own clients through or in partnership with CIS.

Key Features

Full cyber risk assessments for enterprise and government clients
Training products covering cyber risk mitigation across business and technical domains
Partner program for MSPs, MSSPs, brokers, and insurers
Extended capabilities through the Crimson Risk association of cybersecurity companies

Target Users: Insurance brokers, carriers, MSPs, MSSPs, government agencies

At a Glance

Founded: 2009
Headquarters: Melbourne, Victoria, Australia
Employees: 11-50
Funding: Bootstrapped

Category & Focus

Category: Specialty Solutions
Subcategories: Cyber insurance products cyber risk assessment managed security services for insurers
Insurance Verticals: P&C Commercial Specialty/E&S
Target Customers: Carriers, Brokers