Weighted Risk Scoring
A documented, weighted methodology across security, compliance, operational, and financial categories — the exact math behind the 0–800 score on this page.
TRACE Riskscore
CYBER INSURANCE RISK INTELLIGENCE
For cyber underwriters & brokers
One overlooked control can turn a quoted risk into a costly claim.
TRACE Riskscore gives underwriters and brokers current, auditable evidence before bind—so you can price coverage with confidence, protect loss ratio, and show insureds exactly how to improve their terms.
Price with evidenceReward better riskKeep vendors safer
Newly disclosed
Loading recent disclosures…
See how a domain scan turns into a pricing decision below.
CONTINUOUS TELEMETRYPOLICYHOLDER VIEW · ACME CORPORATION
Enter a real domain to run a live external scan — otherwise this shows the illustrative demo
742/ 800
TRACE Riskscore · Infrastructure Health 94.8%
ASM-03 · Weighted Risk ScoringDynamic premium recommendation
$12,000 risk discount applied
<0.4%claim probability
$250,000deductible recommendation
Configuration drift alert
Vendor access scope changedMapped to EVL-03 · Periodic Access Review for an auditable monitoring record.
Domain security
94% Strong coverage across access controls.
EVL-03 · Periodic Access Review
742/ 800
Simulation activity log
BASELINE VERIFIED2:17:10 PM Baseline established. Control evidence current.
2:17:44 PM Pricing indication reflects verified posture.
The credibility backbone
A named methodology behind the number.
The TRACE TPRM Framework provides the lifecycle and governance structure that makes risk intelligence reviewable—not merely predictive.
T
TargetWho is this vendor?R
RankHow much risk?A
AssessWhat is the posture?C
ContractWhat is required?E
EvaluateIs it still safe today?Purpose-built, not repurposed
The first TPRM framework built for cyber insurance underwriting.
Every other vendor-risk standard was written for compliance teams and retrofitted for underwriting after the fact. TRACE started from the underwriting file — the controls carriers actually scrutinize, built into the framework itself from day one.
AI-Enabled Override Rule
Any vendor using AI/ML on policyholder data is automatically routed to a minimum one-tier risk elevation — a control no NIST or ISO standard has yet.
Tiered Monitoring Cadence
Continuous, tier-based monitoring after bind — so posture drift shows up as an alert, not as a surprise at renewal or claim.
Breach Notification SLA
Every vendor contract locks in a maximum notification window for incidents — the exact clause carriers need to price claims-handling timelines.
Independent Certification Verification
SOC 2 and ISO claims are independently verified, not taken on self-attestation — closing the misrepresentation gap underwriters worry about most.
Email Authentication & Mailbox Defenses
SPF, DKIM, and DMARC enforcement are checked directly — the control that matters most against business email compromise, the top cyber claims driver.
27 proprietary controls across 6 families — Target, Rank, Assess, Contract, Evaluate, and the AI Overlay.
Underwriting utility
Evidence that moves from posture to terms.
Stop chasing questionnaires
Replace stale, incomplete self-attestations with current control evidence—so the underwriting file is ready before bind, not after a late discovery.
See drift in framework context
Configuration changes are surfaced against their TRACE TPRM evaluation reference, so an alert arrives with a reason an analyst can review.
Make improvement financially legible
Link a remediation to its premium effect, giving policyholders a clear “fix this, save that” incentive to improve risk.
Revenue, not just risk
Every point of pricing uncertainty costs you the deal or costs you the margin.
Price too high without evidence, and a sharper competitor wins the account. Price too low on blind trust, and the loss ratio erodes underwriting margin later. TRACE closes that gap with real-time, verifiable posture data — so you price with evidence instead of guessing.
Stop overpricing good risk
Verified posture lets you quote competitively on well-secured vendors instead of padding premium for uncertainty you can't rule out.
Stop underpricing hidden risk
Real-time telemetry surfaces exposure a static questionnaire would miss, protecting loss ratio before it becomes a claim.
Close faster, retain longer
Verified evidence up front cuts quote-to-bind time, and the same score gives brokers a natural renewal conversation instead of a cold requote.
See the decision trail behind your own book of business.