Verto prepares
Your risk picture, ready before the insurer asks.
Verto walks your team through the questions, gathers the evidence and builds one signed submission pack.
Cyber insurance readiness for SMEs
From “where are we?” to an insurance-ready submission.
Verto takes a small or mid-sized business from its first answers to a signed submission an insurer can rely on. It shows the gaps an underwriter will ask about, tracks the fixes, and keeps the picture current for renewal.
- Cyprus, Czech Republic, United Kingdom and United Arab Emirates
- Six-month pilot with a cedent or MGA and the brokers who place with them
- Data held in the EU
The policy sits with finance. The controls sit with IT. The application needs both.
That is where most SME submissions stall. The owner is asked about patching. The IT manager is asked about limits and deductibles. Verto gives them one workspace, one list of what is missing, and one pack to sign.
Owner and finance
TodayA form full of questions you cannot answer with confidence.
With VertoA readiness score, the gaps in order, and the policy explained in plain language.
IT
TodayInsurer language that does not match how your controls are set up.
With VertoA control library in plain English, an owner on every action, and evidence in one vault.
Broker and insurer
TodayAnswers that read differently from every applicant.
With VertoThe same control library behind every answer, verified evidence, and a signed pack.
Verto prepares risk information. Insurers decide eligibility, pricing, coverage and claims. Verto is not the underwriter or a broker.
Insurers decide
Eligibility, pricing, cover and claims stay with the insurer.
Underwriters get verified, consistent information in their own question set. Every decision is theirs.
Neither insurer nor broker.
Works with your broker and your insurer. Takes a side with neither.
Verto never sells, prices or places cover. Your broker and your insurer read the same signed pack.
1/3
One guided journey, eight steps.
Each step is a workspace in Verto. The business moves through them in order, and the insurer receives the result.
- Discover1 / 8
Build the picture of the business.
Discover builds the picture an underwriter needs: who you are, what you run, what data you hold, who you depend on and who must know first when something goes wrong.
Available now - Assess2 / 8
Map controls and insurer questions.
Assess works through 76 controls in 13 domains, from multi-factor authentication and exposed remote access to immutable backups, incident readiness and governance. The Insurer view then shows how those controls answer the insurer’s own question set.
Available now - Prioritise3 / 8
Focus on the gaps that matter most.
Prioritise ranks every gap in a fixed order: underwriting-critical controls first, then gaps that a lower limit in the wording depends on, then the rest by weight and exposure. Each gap says why it matters.
Available now - Improve4 / 8
Close gaps with owners and dates.
Each action links to the controls it improves. Advisors can propose actions, and only the SME can accept them. Closing an action asks the owner for evidence.
Available now - Verify5 / 8
Attach and verify evidence.
The evidence vault holds policies, screenshots, configuration exports, attestations, training and test records and contracts. Files sit in EU storage. An advisor or insurer reviewer verifies them; the SME cannot verify its own.
Available now - Submit and sign6 / 8
Produce a signed submission pack.
Pick the question set, review the derived answers, explain any change, and let a person review the narrative. Verto builds the pack, the SME admin signs it, and the insurer receives it in the review queue.
Available now - Coverage7 / 8
Understand what the policy does.
Coverage explains each part of the wording in a sentence or two, marks what matters to this business, and shows the gaps: exposures the wording limits or excludes. Selections record what the SME would like, not a quote.
Available now - Incident response8 / 8
Follow the policy through an incident.
Incident response follows the conditions of the SME’s own wording. A readiness checklist before, a notification clock and rule cards during, and recovery, lessons and loss records after.
Coming in the pilot
Not ready yet? That is normal.
Most businesses find gaps the first time they run Assess. Verto is built for what comes next.
Prioritise
The two or three gaps that trigger a referral, listed first, with the reason.
Improve
Each gap becomes an action with an owner and a date. Advisors can propose. Only you accept.
Check again
Close the critical gaps and the referral check runs again. When it passes, you prepare the pack.
If you need hands, an advisor can be assigned. A Verto advisor, your broker’s technical partner or your own IT provider. You choose. How advisors work
Every answer, checked three ways. Then by a person.
A yes on an application should mean the same thing every time. Verto checks what a business says against what it can show.
AI and outside-in checks are rolling out in the pilotSelf-assessment
The business sets each control from plain-English questions, with an owner and notes.
Available nowAI reads the evidence
Each file is checked against the control it is meant to prove. The result is a draft for a person.
Rolling out in the pilotOutside-in checks
Verto looks at the company from the internet: email security (SPF and DMARC) and the website’s TLS.
Rolling out in the pilotHuman verification
An advisor or an insurer reviewer marks the evidence verified. The business cannot verify its own.
Available now
Why insurers care
Small business cyber is hard to write when every application reads differently. Verto makes them comparable.
Consistent submissions
Every applicant answers from the same control library, so a yes means the same thing across the book.
Answers backed by evidence
Answers carry references to verified evidence. The SME cannot verify its own files.
Referral rules applied up front
The all yes, no referral check runs before the pack is built, and the verdict travels with it.
Signed packs
A certificate page with signer, time, IP address and sha256 hashes computed on the server.
Remediation stays outside your decision
Who fixes an SME’s gaps is the SME’s choice. Verto records the fix and the evidence. Pricing and placement are untouched.
Monitor
Stay ready between renewals.
Evidence has a shelf life. A restore test from last year does not prove anything this year. Monitor re-checks controls on a schedule, flags evidence that has expired, and starts next year’s assessment from this one.
Coming in the pilotInsurer view
See your answers the way the insurer will.
The Insurer view renders the assessment against the insurer’s own question set. Each question shows yes, no or cannot answer yet, and the controls behind it.
- Answers derived the same way for every applicant
- The referral check runs before you submit
- Any override needs a reason
Submit and sign
A signed pack, hashed on the server.
Verto builds one PDF with answers, evidence references, controls, risks, open actions, the reviewed narrative and the declaration. The SME admin signs, and a certificate page is added.
- sha256 of the signed record and of the pack
- Signing is refused if anything changed
- Sent straight to the insurer’s review queue
Built for everyone around an SME cyber policy.
- SMEsGet to a complete, evidence-backed submission without a security team.
- BrokersBring clients to market ready and follow their progress.
- Insurers and MGAsReceive consistent, signed submissions against your own question set.
- AdvisorsPropose actions and verify evidence for the SMEs assigned to you. Verto advisory, a broker’s partner, or the SME’s own IT provider.
Built to be trusted with risk information.
EU data
The database runs in Frankfurt. Evidence files sit in storage with EU jurisdiction.
Row level security
Every tenant table is protected in the database, so each role sees only what it should.
Human-reviewed AI
AI output is always a draft. A person accepts, edits or discards it.
Signed packs
Submissions are hashed with sha256 on the server and carry a certificate page.
Common questions
Something else? Ask us directly.
Is Verto an insurer or a broker?
Neither. Verto prepares risk information. Insurers decide eligibility, pricing, coverage and claims. Verto is not the underwriter or a broker.
Which markets does Verto cover?
Cyprus, Czech Republic, United Kingdom and United Arab Emirates, in the first version.
Which languages does Verto support?
English and Arabic, right to left, in the first version.
Where do the questions and controls come from?
From the application forms and policy wordings used in the pilot markets. Every control and question in Verto traces back to a source document.
What is built today and what is coming?
Discover, Assess, Prioritise, Improve, evidence, submission and signature, Coverage and the insurer review queue are built. AI checks of evidence and outside-in checks are rolling out in the pilot. Incident response, scheduled monitoring, the detailed insurer review and pilot reporting are coming in the pilot.
What if we are not ready after the assessment?
That is the normal starting point. Prioritise lists the gaps that trigger a referral first. Improve gives each one an owner and a date. When the critical gaps close, the referral check runs again and you prepare the pack.
Can Verto fix the gaps for us?
Verto shows the gaps and tracks the fixes. The work itself is done by whoever you choose: a Verto advisor, your broker’s technical partner or your own IT provider. Whoever does it, Verto never prices or places cover.
What does it cost?
During the pilot there is no charge to SMEs. The cedent or MGA running the pilot covers it. Pricing after the pilot will be published before it applies to anyone.
Does AI decide anything?
No. AI drafts summaries, gap analyses, narratives and follow-up questions, and checks evidence against its control. A person reviews every draft, and nothing AI-drafted reaches a submission pack unreviewed.
Let’s talk about your pilot.
Tell us your market and where you sit: SME, insurer or MGA, or broker. We will show you Verto from your seat.