Let’s assume that you are interested in buying cybersecurity insurance. It is very likely that the underwriter is going to use one of the External Attack Surface Management tools (EASM) like the ones we sell to decide whether to write insurance for you.
Your customers may also use an EASM tool to decide whether to do business with you.
A general consumer can even see your score for free.
The way these tools work is that an EASM tool subscriber does not need to get your permission to “score” your company and there is no evidence left behind that you score has been reviewed.
In fact, the big EASM companies have already scored millions of companies.
Here is the bad news.
If you do not subscribe to an EASM tool, the only person that will not know what your score is will be you. Your customers will know. Your suppliers may know. Your insurance carriers may be monitoring your score the entire time your policy is in force. If you are part of a regulated industry, your regulator may know.
Here are two screen shots from one of the tools we sell. The first one is a summary dashboard for all of the companies that you are monitoring. The second is a detailed score of one company and you can drill down even further.
If you want to understand what these tools do and look at your score, contact us. We sell different tools in different price ranges, with different features.