Pre-Bind · External-Only Recon · 20 minutes

Underwriter Pre-Bind Runbook

A 7-step external-only cyber-insurance submission prep for underwriters and brokers. Uses Resiliently's free tools, fills the gaps with named external sources, and produces a print-ready Pre-Bind Risk Snapshot for the carrier.

Passive-only — no consent gate Starter €29 / Pro €490 /mo Saves 2-3 hrs per submission
Free Pre-Bind Snapshot Template

Get the printable Pre-Bind Snapshot as a PDF template

Carrier-ready one-pager, plus a JSON attachment for your submission-packet tool. Subscriber-only.

Share this tool

Help colleagues assess their cyber risk

LinkedIn X / Twitter Email

How It Works

  1. 1

    Surface scan

    Domain-exposure → subdomains, ports, buckets, headers, SSL.

  2. 2

    CVE + KEV match

    Cross reference findings against CISA KEV catalog.

  3. 3

    Credential leaks

    Domain-exposure + Hudson Rock free. Leaks ≥ 5 = promote.

  4. 4

    Email posture

    SPF / DKIM / DMARC / BIMI via domain-exposure + MX Toolbox.

  5. 5

    Pre-submission check

    Benchmark against industry baseline. Accept / refer / decline.

  6. 6

    Stitch packet

    Combine steps 1-5 into a one-page carrier PDF.

  7. 7

    Promote to Pro

    UC1 whitebox SBOM review. Human-confirmed, no auto-charge.

  8. Verdict card

    clean · elevated · high-risk — printed and attached to submission.

About This Runbook

The Pre-Bind Runbook is the operating recipe for cyber-insurance submission prep. It sequences seven Resiliently tools you already have (domain-exposure, pre-submission-checker, submission-packet, ai-sbom-scanner, broker-scorecard, pre-qualification, vendor-assessment) and supplements them with four named external sources: CISA KEV, Hudson Rock, HackerOne, and github.com dorking.

Why this matters: Pre-bind recon is the only cyber-insurance workflow that's passive-only, executes in 20 minutes, and saves 2-3 hours per submission. Every existing tool already does the work; the runbook is the recipe that strings them together.

Important: All steps in this runbook are external reconnaissance only. We do not attempt to exploit, penetrate, or access any internal system. Every finding the underwriter records is data any attacker or competing carrier could discover.

Companion spec: specs/underwriter-prep-runbook.md (canonical recipe, output schema, promote-to-Pro triggers, pricing math).