We put our money where our mouth is.
Evidence Scan finds every vulnerability that could cause financial loss. And we'll stand behind that with up to $5 million in coverage.
When your security tools fail, who pays?
Not your vendor.
The $5 Million Question: Why does every other product in your budget come with performance terms except the one where failure costs the most?
Answer: Because no vendor has had findings they'd actually bet on.
Until now.
Mythos finds vulnerabilities.
Evidence finds liabilities.
Mythos will keep surfacing new CVEs.
Attackers will keep exploiting the small number that actually work.
Evidence tracks the ones
with a documented history of causing financial loss,
and the list grows as new loss data emerges.
The warranty says:
If the CVE that gets you has never caused a loss before, we owe you up to $5M.
If it costs you money, we cover it.
Evidence Warranty covers the direct financial costs of a qualifying breach.
Ransomware
Payment, recovery, and direct expenses.
Data loss
Exfiltration and destruction costs.
Compliance fines
HIPAA, PCI, SEC, FTC, GDPR, and similar frameworks.
Legal
Initial counsel engagement covering disclosure obligations and litigation exposure.
Emergency response
Containment, forensics, and immediate operational costs.
Tiers
What the warranty doesn't cover.
The warranty covers what the scanner is built to find. The rest stays with your cyber policy. Claims will not be paid for:
Non-CVE compromise
Phishing, credential stuffing, brute force, malicious email, drive-by downloads, lost laptops.
FIREs we already disclosed
If we told you about a FIRE vuln in your environment and attackers use it when you already knew it could cause financial loss.
Third-party systems
CRMs, HRIS, SaaS you don't control.
Unidentifiable initial access
No entry vector found means no claim validation.
FAQs
A warranty is product-level accountability for a specific outcome the vendor controls. Insurance covers the broader risk universe that can't be engineered out. The two instruments are designed to sit alongside each other.
Mythos and other AI discovery tools increase the total number of known CVEs. They do not change the warranty's scope. The warranty covers any CVE that causes your financial loss and that Evidence did not report to you, whether it was found by AI, by a human researcher, or by an attacker in the wild. The FIRE list grows as new claim data arises, and the daily scan picks up new additions automatically.
No. The warranty backs the scanning side of the program; your cyber policy keeps covering everything else. However, you may choose to use the warranty to offset the claim size reported to the insurer, or as a tool to pay the deductible.
Pricing depends on tier, organizational size, and industry. The Cysurance qualification factors into the underwriting. We quote it alongside the platform proposal.
12 months, renewable. The benefit can be used once per term.
A direct, documented financial loss above $5,000 caused by a qualifying CVE during the warranty term, falling into one of the five covered cost categories.
You have 48 hours from discovery to notify Cysurance. Processing then follows standard underwriter procedure: documenting the access vector, validating against the triggers, and calculating the qualifying loss.
No. A warranty on findings requires those findings to be grounded in evidence-backed data the vendor would put money behind. No other company in the industry will back their vulnerability prioritization claims with real money.
No other vendor backs their findings with money. We back ours with $5M.
In 30 minutes, we'll show you your FIRE exposure on your real perimeter and walk you through exactly what the warranty covers.
Request a demo