OT/ICS Underwriting Tool
Digital Twin Risk Model
Build a digital twin of an insured's OT/ICS, IoT, and physical-system footprint and model how a cyber event would propagate — purpose-built for cyber underwriters and brokers writing manufacturing, energy, smart-city, and connected-product risk.
In active development
Expected launch: Q3 2026
What you'll get
Authentication & authorization surfaces
Map every twin-modification endpoint and check for JWT enforcement, pre-authenticated reverse-proxy paths, and short-lived service-to-service tokens.
Policy & state injection paths
Probe whether a low-privilege tenant can escalate via crafted policy imports, unvalidated state transitions, or replayed messages that shift the twin out of safe state.
WebSocket & session hygiene
Test long-lived connections for identity revalidation, signed heartbeats, and JWT-downgrade vectors on the operational channel.
Physical blast radius pricing
Map twin-controlled assets to the worst-case loss band — $2M consumer IoT up to $200M+ for manufacturing and energy — using FAIR LM bands and platform-CVE correlation.
Why we built this
A digital twin is a software mirror of a physical asset, process, or whole organization. When an attacker compromises the digital twin — by bypassing auth, injecting policy, or replaying tampered state — the change can cascade into the physical world: a pressure valve that reports "closed" while it is "open" is a safety incident, not a data-integrity event.
For cyber underwriters, this means the loss magnitude is no longer bounded by data-breach costs. A successful digital-twin compromise in OT/ICS or connected-product manufacturing can produce property damage, bodily injury, environmental release, and supply-chain shutdown — categories that most cyber policies exclude and that traditional IT cyber questionnaires do not capture.
Under NIS2, manufacturing entities face penalties up to €10M or 2% of global turnover. Under the Cyber Resilience Act (CRA), manufacturers of connected products bear single-reporting-platform obligations with a 24-hour notification clock for actively exploited vulnerabilities. A digital twin that controls a CRA-scoped product inherits those reporting clocks — and the cyber policy must be checked for retroactive regulatory-fine indemnity.
Early access · Q3 2026
Be first to use it
Join the waitlist to get early access when Digital Twin Risk Model launches. We'll send a 1-page preview before the public release and ask for your input on what to ship next.
You're on the list.
We'll email you when Digital Twin Risk Model ships. In the meantime, take a look at the other 26 working tools.
Used by underwriters at leading European brokerages. We'll never share your email.