Silverfort & Cyber Insurance: A Review

In a world where a single breach can cost businesses millions of dollars, cyber insurance has moved from a luxury to a necessity. However, with premiums spiking and coverage terms becoming more convoluted, financial services firms will need reliable security solutions that can not only protect them from breaches but also facilitate their compliance with cyber insurance outlines and potentially qualify them for better premiums. That is where Silverfort and Cyber Insurance Review comes in, highlighting how Silverfort’s security platform is transforming identity protection and helping organizations meet cyber insurance compliance requirements.

Introduction

Imagine this: You Walk into work on a Monday morning and discover your company’s systems locked down by ransomware, and your systems are being held hostage by hackers demanding $500,000 in cryptocurrency. Without adequate cyber insurance, you may be left with nothing to show for all your hard work. According to the IBM Cost of a Data Breach Report 2024, the average cost is now $4.88 million. This number has increased from 2020 to 2024 by 21%.

The cyber insurance market is responding to these growing threats by becoming more selective about the businesses they provide coverage for, and at what cost. Insurers are examining security practices and protocols like never before and are, in some instances, demanding particular controls to be in place before they will issue a policy.

This is where solutions like Silverfort come into play—offering identity protection that not only strengthens security posture but can also help organizations meet the increasingly stringent requirements of cyber insurers.

Silverfort: The Identity Security Innovator

Founded in 2016 by cybersecurity veterans from the elite 8200 unit of the Israeli Intelligence Corps, Silverfort has rapidly established itself as a pioneer in the identity protection space. What sets Silverfort apart is its innovative approach to securing authentication across enterprise environments without the traditional limitations of agent-based solutions.

Silverfort’s Unified Identity Protection platform operates in a completely different manner than traditional MFA products. Rather than integrating with individual applications or even endpoints, Silverfort protects and monitors access on the identity provider layer, the fundamental infrastructure that manages user credentials across each organization. This layering architecture enables Silverfort to protect systems previously considered “unprotectable” such as legacy applications, command-line usage, and administrative interfaces that are now significant focus areas of cyber insurance requirements.

Because ransomware and sophisticated attackers increasingly view identity systems as the primary attack point, Silverfort’s ability to protect organizations against all authentication methods and not solely web apps and VPNs, is uniquely valuable for organizations looking for comprehensive cyber insurance.

Silverfort is headquartered in Boston and Tel Aviv and has customers in financial services, healthcare, manufacturing, and government. The company has raised more than $100 million to date in VC funding, and provides identity protection in a combined model with major technology partners, including Microsoft, Okta, and Ping Identity, that now satisfy the needs for both security and compliance.

Cyber Liability Insurance and Cyber Insurance Compliance Overview

What Is Cyber Liability Insurance?

Cyber liability insurance is designed to help organizations offset the recovery costs associated with security incidents. These policies typically cover expenses related to:

• Forensic investigations
• Customer notification and credit monitoring
• Legal fees and regulatory fines
• Crisis management and public relations
• Business interruption losses Ransom payments (in some policies)

The cyber insurance market reached approximately $10.8 billion in 2023 and is projected to grow to $28.4 billion by 2026, according to the S&P Global Market Intelligence report.

The Evolving Compliance Landscape

Insurance companies have significantly changed their approach to cyber risk over the past few years. After paying massive claims from the breach of Colonial Pipeline and suffering $21 billion in losses from ransomware attacks across the United States in 2021, insurance companies implemented new cyber liability compliance requirements with strict definitions of compliance.

The massive 245% increase in ransomware attacks even caused insurance companies to write out detailed lists of new requirements for insurance compliance focused mainly on guidelines of Multi-Factor Authentication (MFA).

Top providers now commonly require MFA for:

• Office 365 and other cloud-based email systems
• VPN access
• All remote and internal admin access
• Active Directory, PowerShell, and PsExec
• All network backup environments
• Access to network infrastructure (routers, switches, firewalls)</li>
• Active Directory-managed endpoints and servers

A study by the Ponemon Institute found that 91% of companies that implemented these security measures reported lower insurance premiums, with an average reduction of 18%.

The Current State of Cyber Insurance

The cyber insurance market has undergone a significant transformation in the past two years. Premiums have increased by an average of 30-40% according to a report by Marsh McLennan, while coverage limits have often been reduced.

Key trends shaping today’s cyber insurance landscape:

1. Shrinking capacity: Many insurers have reduced maximum coverage limits from $10 million to $5 million or less.
2. Sub-limits on ransomware: Most policies now include specific sub-limits for ransomware incidents, often providing only 50% coverage of the total policy value.
3. Co-insurance requirements: Insurers increasingly require policyholders to shoulder 20-50% of certain losses, particularly for ransomware incidents.
4. Exclusions for nation-state attacks: Following litigation over the NotPetya attack, many policies now exclude coverage for incidents attributed to nation-state actors.
5. Technical underwriting: Insurers have moved beyond questionnaires to actual technical validation of security controls, sometimes including external scans and penetration tests.

Benefits of cyber insurance include improved security standards, financial protection to enhance IT security, and protection of your business from cyberattacks such as identity theft, phishing, email spoofing, theft of IT assets, and other similar threats. Moreover, benefits only exist if the required security controls are implemented.

An important reason for this change is the recognition by insurance companies that identity compromise is at the center of most successful attacks. The 2024 Data Breach Investigations Report published by Verizon showed that compromised credentials were involved in more than 80% of breaches. It’s clear why MFA and identity protection solutions such as Silverfort are now central to insurance eligibility.

Products and Services

Silverfort’s product suite includes several components that directly address cyber insurance requirements:

Silverfort Unified Identity Protection

The core platform provides:

• MFA for all resources, including previously “unprotectable” systems
• Risk-based authentication to identify suspicious access attempts
• Lateral movement prevention to stop attackers from spreading through networks
• Administrative access protection, a key insurance requirement
• Directory protection to prevent attackers from manipulating Active Directory

Silverfort for Ransomware Mitigation

This specialized offering focuses on preventing the most common insurance claim cause:

• Real-time detection of credential-based attacks
• Automatic blocking of malicious authentication attempts
• Protection of privileged accounts that ransomware actors target
• Prevention of domain-wide compromise through directory protection

Silverfort Compliance Accelerator

Specifically designed to help organizations meet cyber insurance requirements:

• Pre-configured policies aligned with common insurance mandates
• Documentation packages for insurance applications
• Risk assessment tools to identify authentication vulnerabilities
• Compliance reporting for insurance audits

How the Insurance Process Works with Identity Protection Solutions?

When applying for cyber insurance, organizations typically follow these steps, with identity protection playing a crucial role:

• Initial Assessment: Insurers evaluate the organization’s overall risk profile, heavily weighted toward identity security controls.
• Technical Questionnaire: Detailed questions about authentication practices, MFA implementation, and privileged access controls.
• Technical Validation: Increasingly, insurers require proof of implementation, which Silverfort’s reporting capabilities can facilitate.
• Control Remediation: Organizations address security gaps identified during the assessment—often implementing solutions like Silverfort to meet requirements quickly.
• Policy Issuance: Once requirements are met, coverage is issued with terms reflecting the organization’s security posture.
• Ongoing Compliance: Organizations must maintain security controls to avoid coverage issues if an incident occurs.

According to a 2023 survey by the Insurance Information Institute, organizations with comprehensive identity protection solutions received an average 22% discount on cyber insurance premiums compared to those with basic security controls.

Customer Feedback and Industry Insights

Customer Perspectives

Silverfort users share varied experiences, with some consistencies across the feedback. On the positive side, many users report that Silverfort successfully provides support for legacy systems that traditionally lack modern MFA support. This was often cited as a key component of their ability to get through strict cyber insurance requirements. Some users reported that the Silverfort implementation allowed them to protect their legacy infrastructure that their insurers viewed as mandatory.

Others indicated quantifiable benefits, such as decreased cyber insurance expenses, following the introduction of risk-based identification. Silverfort has received attention across various reviews and has been noted for its flexibility in applying MFA across Remote Desktop, VPN, on-site login, and any other entry point that relates to insurance compliance.

On the negative side, some user groups faced challenges during the initial deployment. Similarly, some users stated that they had to use more professional services and resources during the setup process than they anticipated. Others faced some initial minor performance issues that were resolved later by tuning and configuration. While these issues were typically overcome, they highlight the importance of planning and support in integrating Silverfort into the complex IT environments.

Industry Recognition

Silverfort has received several industry accolades:

• Named a “Cool Vendor” by Gartner in Identity and Access Management
• Received SC Media’s “Best Identity Management Solution” award
• Achieved a 4.8/5 rating on Gartner Peer Insights

Founded by master cybersecurity and cryptography specialists, an elite team of the 8200 cyber unit of the Israeli Intelligence Corps. Silverfort has established itself as a leader in the identity protection market with its focus on helping organizations meet cyber insurance requirements.

Better Business Bureau and Financial Ratings

Silverfort is not rated by the BBB because it is a security vendor, not an insurance company. Furthermore, this cybersecurity firm has raised over $100M in venture funding, and its latest Series C round values the company at approximately $500 million – a positive sign of financial health and potential investor confidence.

Conclusion

The connection between cyber insurance and identity protection is at an all-time high. As insurers raise coverage requirements, particularly inputs around MFA across all systems, products like Silverfort are a necessity. Silverfort does something that regular MFA tooling does not, which is to protect against attacks that move through command-line tooling (PsExec, PowerShell, etc.). Which is a common element of ransomware attacks. Likewise, with ransomware continuing to be one of the largest concerns for insurers, filling these gaps has become critical, both for risk management and insurance eligibility.

Traditional identity security no longer comes close to meeting the insurance requirements of today’s risk environment. Organizations that utilize end-to-end solutions such as Silverfort will improve their security posture as well as leverage the insurance space to obtain better coverage and lower premiums. If you are in the marketplace for a new policy or are preparing for an upcoming renewal, reviewing your identity protection strategy is now a no-brainer.