Insurance carriers and brokers often struggle to understand the real risk concealed within the cyber insurance policies that they offer. Most rely on self-reported questionnaires or assessments from customers or by testing publicly available ports. These methods provide for an inaccurate and incomplete picture of risk that lacks transparency.