Coverage Gap Analyzer
Coverage only becomes real against a specific loss. Pick a named scenario and walk exactly which parts of a cyber policy respond, the conditions, and the classic gaps and exclusions that leave you exposed — ending with the fix. Educational and directional, not insurance advice.
An operator encrypts your systems, exfiltrates data and demands payment; you are down for days.
What this analyzer does
- Abstract coverage checklists don’t tell you much. Pick a real named scenario — ransomware with business interruption, a BEC wire fraud, a critical-vendor outage, a tracking-pixel class action — and see exactly which parts of a cyber policy respond and where the gaps bite.
- For each scenario it walks the coverage sections that typically pay, the usual conditions, and the classic gaps and exclusions that leave you exposed.
- It ends each scenario with the specific endorsements or controls that close the gap, linked to the right tool.
- Educational and directional — your actual coverage depends on your wording and facts. Not insurance advice.
Why this matters
Coverage disputes almost never turn on whether a section exists — they turn on its conditions. Business interruption was there, but it only responded to a security failure and your outage was a provider’s technical fault. Extortion was covered, but sub-limited to a fraction of the demand. The ransom was payable, but the recipient was sanctioned. These gaps are invisible on a checklist and decisive in a claim.
This analyzer makes them visible by walking real scenarios end to end — the sections that respond, the conditions, the classic gaps, and the specific fix — so you close them before the loss, not during it. Educational and directional, not insurance advice.
Frequently asked questions
What does a cyber policy actually cover in a ransomware attack?
In a typical ransomware event several coverage sections can respond: incident-response and forensics, cyber-extortion (the ransom itself, if included and lawful), data restoration, and business interruption for the income lost while you are down. But each carries conditions and gaps — the extortion sub-limit is usually well below the tower, business interruption only starts after a waiting period and may require a security-failure trigger, restoration pays to restore not to improve (the betterment gap), and the sanctions exclusion can bar a ransom payment entirely. The analyzer walks these for the ransomware scenario and names the gaps so you can close them before the event.
Why analyse coverage against a named scenario instead of a checklist?
Because coverage only becomes real against a specific loss. A checklist that says “business interruption: included” tells you nothing about whether it would pay in the outage you actually fear — that depends on the trigger, the waiting period, whether the cause was a security or system failure, and whether a dependent provider was scheduled. Walking a named scenario end to end surfaces the conditions and gaps a checklist hides, which is how real coverage disputes arise. It turns an abstract policy into a concrete “would this pay?” answer.
Which scenarios does the tool cover?
The ones that drive most real cyber losses and disputes: ransomware with business interruption; business email compromise and fraudulent funds transfer; a critical SaaS, cloud or payment-provider outage (dependent/contingent BI); and a privacy / wrongful-collection class action such as a tracking-pixel or biometric (BIPA) claim. Each walks the coverage that typically responds, the conditions, the classic gaps, and the specific fix.
Is this a coverage determination or insurance advice?
No. It is an educational walk-through of how cyber coverage typically maps to common scenarios, to help you spot gaps and ask better questions. Whether your policy responds to any specific loss depends on your exact wording, sub-limits, endorsements and the facts. Confirm with your broker and read the relevant policy sections.
This tool is free and always will be. Would a Pro workspace — saved designs, team sharing and exports — be worth paying for?
Show me Pro →No account needed to use this tool — this just tells us whether Pro is worth building out.