Limit-Adequacy Estimator
“How much cyber limit do I need?” tools usually invent a dollar figure. This one refuses to. It scores the drivers that actually move your worst realistic loss, then tests the limit you already carry against them — thin, borderline or defensible — and sends you to real incident costs for the dollar anchor. Directional, not a quote or insurance advice.
Your current limit band lines up with your exposure drivers. That is a reasonable starting point — still validate it against a named worst-case scenario and real incident costs, since drivers alone do not capture your balance sheet or contracts.
- Sector: Other / professional services — Exposure driven mainly by the data you hold.
What this estimator does
- Most "how much cyber limit do I need?" tools invent a dollar figure. This one does not — it scores your exposure drivers and tests the limit you already carry against them.
- Set your sector, size, record volume, regulated-data types and current tower, and see whether that limit reads as thin, borderline or defensible for your exposure — and what pushes it up.
- For real dollar anchors, it points you at the Breach Index: what comparable incidents have actually cost, instead of a made-up benchmark.
- Directional and educational — a conversation-starter with your broker, not a quote, a recommendation or insurance advice.
Why this matters
Under-insurance is one of the quietest failures in a cyber program: the tower looks like a real number on a slide, right up until a single ransomware-plus-regulatory event blows straight through it and the balance sheet absorbs the rest. The honest way to pressure-test a limit is not to generate a dollar figure from a dropdown — that is a fabricated benchmark — but to look at the drivers that actually move your worst realistic loss and ask whether the limit you carry is credible against them.
This estimator scores those drivers and gives you a thin / borderline / defensible read on your current limit, then sends you to the Breach Index for what comparable incidents have really cost. Take both into your broker conversation. Directional and educational — not a quote, a recommendation or insurance advice.
Frequently asked questions
How much cyber insurance limit does my company need?
There is no honest single number anyone can give you from a few inputs — the right limit depends on your worst realistic loss, your balance sheet, your risk appetite and what the market will sell you, and credible actuarial benchmarking uses large claims datasets insurers and brokers hold. What this tool does instead is the useful, honest half: it scores the drivers that push your exposure up (regulated data, record volume, ransomware-driven business interruption, third-party dependencies, sector) and tests whether the limit you currently carry looks thin, borderline or defensible against them. Then it points you at real incident costs in the Breach Index so your broker conversation starts from evidence, not a generic figure.
Why not just estimate a dollar amount?
Because doing so from a dropdown would be a fabricated number dressed up as advice, and acting on it could leave you badly under- or over-insured. Per-record cost figures, revenue multiples and industry averages vary enormously by incident type, jurisdiction and year, and a point estimate hides that variance. We would rather give you a defensible adequacy signal plus a pointer to real, cited incident costs than a false precision. Your broker can run proper benchmarking against licensed loss data.
What actually drives how much limit I need up?
The big levers are: the volume and sensitivity of records you hold (regulated data like PHI, payment-card and biometric data carries statutory and class-action exposure); ransomware-driven business interruption and the cost of restoration; third-party / contingent business interruption when a critical SaaS or vendor goes down; regulatory regime (some fines are insurable, some are not); and sector dynamics (healthcare, finance and critical infrastructure attract both attackers and regulators). The estimator weights these and shows which ones are inflating your exposure.
Is this a recommendation or insurance advice?
No. It is an educational, directional model to help you reason about adequacy and prepare for a broker conversation. It does not know your balance sheet, your contracts or the market, it does not produce a quote, and it is not insurance or financial advice. Confirm the right limit with a licensed broker who can benchmark against real loss data.
This tool is free and always will be. Would a Pro workspace — saved designs, team sharing and exports — be worth paying for?
Show me Pro →No account needed to use this tool — this just tells us whether Pro is worth building out.