Cyber Policy-Wording Red-Flag Scanner
Paste your cyber policy (or just the exclusions and definitions) and this flags the clauses most worth reading closely before you rely on them — war exclusions, a narrow “computer system” definition, social-engineering sublimits, coinsurance, bricking, conditions-precedent and more. It is a keyword heuristic that surfaces clauses to check; it does not interpret your policy, and it is not legal or insurance advice.
100% in your browser — your policy text is never uploaded or stored.
What this scanner does
- Paste your cyber policy (or just the exclusions and definitions) and it flags the clauses most worth reading closely before you rely on them.
- Catches war / hostile-cyber exclusions, a narrow "computer system" definition, social-engineering sublimits, coinsurance, bricking, waiting periods, conditions-precedent, infrastructure exclusions and more.
- For each hit you get what it means and the exact question to ask your broker — it surfaces clauses, it does not interpret your policy.
- 100% in your browser — your policy text is never uploaded. Educational, not legal or insurance advice.
Why this matters
Nobody reads the whole policy — and the clauses that decide a claim are buried in the exclusions and definitions, written to be skimmed past. The gap between "we are covered" and "this loss is covered" lives in exactly those phrases: how "computer system" is defined, whether the social-engineering endorsement exists and at what sublimit, whether a control is a condition precedent. Surfacing them turns an unreadable document into a short list of things to confirm.
Paste your wording, get the reading list, and take the questions to your broker before you bind or renew. The scan is a local heuristic and this is not legal or insurance advice — but it is a fast way to make sure the fine print holds no surprises you have not seen.
Frequently asked questions
What are the most dangerous clauses in a cyber insurance policy?
The ones that quietly move risk back to you: a war / hostile-cyber-activity exclusion (can deny a state-attributed attack), a narrow definition of "computer system" (can exclude incidents at your cloud or SaaS providers), a social-engineering / funds-transfer sublimit (the most common loss, often capped far below the policy limit), coinsurance on extortion, a bricking exclusion (hardware replacement), a long business-interruption waiting period, and any control written as a "condition precedent" (which can void cover if the control lapses). None of these are necessarily deal-breakers, but each is a clause you want to read and understand before a claim, not after.
Does this tool read or store my policy?
No. The scan runs entirely in your browser using a local keyword heuristic — your policy text is never sent anywhere, uploaded or stored. You can paste the whole document or just the exclusions and definitions sections. Because it is a heuristic, it surfaces clauses by matching common phrases; it does not read or interpret your policy, and a clean scan does not mean a clean policy. Use it as a prompt to read the right sections and ask the right questions.
What is a "condition precedent" and why does it matter?
A condition precedent is a requirement the policy makes a prerequisite to cover — for example, "provided that the insured maintains multi-factor authentication on all remote access." If a loss happens and that control was not actually in force, the insurer may be able to deny the claim even if the lapse was unrelated to the loss, because the condition was not met. It functions much like a warranty. This scanner flags condition-precedent language so you can confirm every such control is continuously in force and evidenced, not just in place at bind.
Is a flagged clause a problem?
Not necessarily. Many flagged clauses — a waiting period, a retroactive date, some coinsurance — are normal features of cyber policies, not defects. The point of flagging them is that they materially shape what you would recover, so you should understand them and decide whether the terms are acceptable or worth negotiating. The tool gives you the question to ask your broker for each one. Treat the output as a reading list for the policy, reviewed with your broker or coverage counsel — it is not legal or insurance advice.
This tool is free and always will be. Would a Pro workspace — saved designs, team sharing and exports — be worth paying for?
Show me Pro →No account needed to use this tool — this just tells us whether Pro is worth building out.