How it works

Validated controls in, better terms out.

Most cyber applications ask you to self-attest, then price for the doubt. Controls Qualified Coverage replaces the questionnaire guesswork with independent validation — so the market can underwrite what’s actually true about your security.

Step 1

The validator

Agency validates your controls

Agency confirms the security controls behind your SOC 2 and ISO 27001 programs — turning your posture into evidence an underwriter can rely on, not a form you fill out.

Step 2

The broker

OnePark Risk places the coverage

OnePark Risk takes your validated controls to market as the specialist broker — structuring Cyber and Tech E&O terms that reflect the risk you actually carry.

Step 3

The carrier

Tokio Marine at Lloyd’s underwrites

Coverage is bound on A-rated paper — Tokio Marine capacity at Lloyd’s of London — backing the limits your customers and board expect to see.

The better your validated controls, the stronger the position your broker can take to the market. Doing security right isn’t just safer — it’s how you earn coverage on better terms.

What’s covered

Cyber liability and Tech E&O, in one program.

Built for technology and software companies that carry both operational cyber risk and the professional exposure of the products they ship. Final terms are structured by OnePark Risk around your business.

⚠

Cyber liability

First-party and third-party cyber exposure — the losses you incur and the claims others bring after a security event.

⚙

Technology E&O

Professional liability for the technology and services you deliver — protection when a customer alleges your product caused them harm.

⏻

Breach & incident response

Access to incident response, forensics, legal, and notification support when something goes wrong — the costs of cleaning up an event.

⏱

Business interruption

Cover for the revenue and recovery impact of a cyber event that takes your systems — or a critical vendor’s — offline.

§

Regulatory & privacy

Support for privacy and regulatory exposure tied to a data event, aligned to the same frameworks Agency already helps you meet.

🔒

Social engineering & funds transfer

Protection against the fraud and funds-transfer schemes that target finance and operations teams, not just infrastructure.

Coverage areas are illustrative. Your actual limits, sublimits, and terms are structured by OnePark Risk and bound by the carrier based on your validated controls and business profile.

Program pricing

Both coverages, one controls-qualified program.

Standard Cyber and Technology E&O coverage is available to companies with up to $100M in annual revenue under this program — and specialty coverage is available for companies above that. The example pricing below is for companies with up to $10M in revenue; pricing scales with your revenue and limits above that.

Example pricing · companies up to $10M in annual revenue

$1M in coverage

$2,400Total · Cyber + Tech E&O

$1,000,000 in limits, with both Cyber liability and Technology E&O included.

More coverage

$2M in coverage

$4,800Total · Cyber + Tech E&O

$2,000,000 in limits, with both Cyber liability and Technology E&O included.

Standard coverage is available up to $100M in annual revenue, with specialty coverage for larger companies. Final pricing scales with revenue and limits, and is subject to controls validation and underwriting.

Why controls-qualified

Security you can prove changes the conversation.

Underwriters price uncertainty. Remove the uncertainty — with validation instead of self-attestation — and the whole negotiation shifts in your favor.

✓

Proven posture, not a checkbox

Agency-validated SOC 2 and ISO 27001 controls give the market evidence of how you actually operate — a stronger starting point than a self-completed application.

⚡

Faster to bind

When the broker can show validated controls up front, there’s less back-and-forth, fewer surprise exclusions, and a clearer path to terms.

↻

Cleaner renewals

Controls that are continuously validated — not reconstructed once a year — mean fewer renewal surprises and a defensible position over time.

Trusted by leading technology companies and startups

Cyber and Tech E&O insurance, priced for companies that do security right.

Request Controls Qualified Coverage

Validated controls in, better terms out.

Cyber liability and Tech E&O, in one program.

Both coverages, one controls-qualified program.

Security you can prove changes the conversation.

See if your controls qualify