Corvus Insurance Adds First Organizations to ‘Smart Cyber Partnerships’ Ecosystem to Drive the Future of Cyber Risk Management

Sharing aggregated data between partners — including Orca Security, Ermetic, ClearVector, and Expel — adds new dimensions to Corvus’s risk assessments

Boston, MA (April 26, 2022) — Corvus Insurance, the market-leading specialty insurance MGA offering Smart Commercial Insurance^® products powered by AI-driven risk data, today announced the first of its Smart Cyber Partnerships™ with cybersecurity firms — building the foundation of an active partner ecosystem to identify and respond to cyber risks and mitigate or eliminate the impact of adverse events. Corvus’s first Smart Cyber Partners™ are cloud security providers Orca Security, Ermetic, and ClearVector as well as managed detection and response (MDR) provider Expel.

With today’s vast attack surface composed of third-party software, a mobile workforce, and significant dependencies on the technology supply chain, improving Corvus’s risk visibility across both the traditional perimeter and inside the IT systems of organizations is the best way to provide accurate, timely, and prioritized advice to policyholders. By sharing data in aggregate from Corvus’s Risk Aggregation Platform^TM with its Smart Cyber Partners™, Corvus will have even greater access to data-enhanced risk modeling, driving both the future evolution of its risk assessments and guidance and notably reducing friction for Corvus’s policyholders by providing them with vetted services options.  

“At Corvus, our mission is to help make the world a safer place by helping organizations mitigate or eliminate the impact of adverse events such as cyber attacks,” said Vincent Weafer, Chief Technology Officer at Corvus Insurance. “These strategic partnerships will be key to ensuring Corvus can continue to provide accurate and valuable advice to policyholders, even as IT workloads are becoming cloud-native and increasingly complex. While we can’t predict exactly which organizations will get hit with a major ransomware attack in the next year, our data science team can see many strong correlations within large sets of data, and these drive the assumptions we use in underwriting and risk management.”

With its Smart Cyber Partnerships™, Corvus Insurance is building a marketplace for its policyholders to more easily access vendors. Vendor partnerships include those in categories such as cloud hosting, cloud security, MDR, endpoint detection and response, and more.

The First Class of Smart Cyber Partners™ Includes:

Orca Security

Orca Security provides instant-on security and compliance for AWS, Azure, GCP, and Kubernetes. Orca simplifies cloud security operations with a single platform for deep cloud asset inventory, workload, and data protection, cloud security posture management, vulnerability management, and identity and entitlements management. Orca automatically combines cloud risks and insights to surface the most critical attack paths leading to an organization’s crown jewels.

Ermetic

Ermetic is a comprehensive cloud security platform for AWS, Azure, and GCP that enables you to proactively reduce your attack surface, detect threats, and reduce your blast radius in case of a breach. Ermetic’s holistic cloud security solution enables comprehensive risk assessment across the entire security stack — from full asset discovery and deep risk visualization, prioritization, and guided remediation to anomaly detection and compliance audit.

ClearVector

ClearVector is the identity-driven cloud security company that discovers and isolates risk in AWS and cloud environments. In real-time, the ClearVector platform discovers, instruments, and maps activity to identities, and provides productized cloud expertise to help organizations prepare for, measure, and prevent the impact of cyberattacks and breaches. Get a free, 30-day AWS Realtime Risk Assessment from Corvus and ClearVector.

Expel

Expel provides 24x7 managed detection and response for everything from cloud applications and infrastructure to networks and endpoints. Understanding and adapting to each customer’s environment, Expel finds gaps in coverage and closes them with its own detections. Expel’s automation-forward approach accelerates response and remediation times while scaling quality. And, Expel arms customers with metrics and recommendations to build for a stronger tomorrow.

With the advent of SaaS and cloud-native technologies, the concept of the hardened perimeter as the primary defense has eroded. New security measures are crucial to address the way IT systems work today. Threat actors have taken note of these changes in IT and adapted their attack methods to exploit the new threat surfaces. In its most recent Corvus Risk Insights Index™, Corvus found the largest spikes in ransomware claims in 2021 were surrounding attacks against third-party software and vendors, showing the complexity of securing environments with so many dependencies.

“We are choosing to partner with these leading-edge security providers because we believe the best way to achieve a safer world is for insurance providers to work in partnership with the defenders,” said Jason Rebholz, Chief Information Security Officer at Corvus Insurance. “At Corvus, we constantly evolve and evaluate our security and cyber risk models, accounting for changes in technology and advances in attack tools, marketplaces, and defense postures. Our Smart Cyber Partners™ will help us continue to invest in where attack patterns are going, not where they’ve been.” 

To learn more about Corvus, please visit https://www.corvusinsurance.com.