Pulse by Perimity · Verified evidence for cyber insurance
Pulse reads Microsoft 365 with read-only access and turns the yes-or-no answers on a cyber insurance application into verified evidence, one module per control, so the gap is found before a claim, not during one.
What “yes” actually means
| The application asks | What Pulse checks | Example finding |
|---|---|---|
| “MFA enforced for all users?”Yes | Who is registered, who is actually required, named exclusions, legacy sign-in, and sign-ins without MFA in the last 30 days MFA Analysis | MFA policy on, but 3 accounts excluded, including an admin. 6 users signed in with a password alone last month. |
| “Admin access restricted?”Yes | Number of Global Admins, admin MFA coverage and method strength, standing vs. just-in-time access MFA Analysis | 9 permanent Global Admins, 2 of them using text-message codes. |
| “EDR on all endpoints?”Yes | Coverage rate, exclusions, how current definitions are EDR | 88% of devices covered, a folder-wide exclusion, and 4 devices with outdated definitions. |
| “Critical patches applied promptly?”Yes | Known vulnerabilities, patch status on managed devices Vulnerability | 12 critical vulnerabilities open more than 30 days. |
Illustrative example based on common findings, not a real client.
Modules
Each module reads one area of the environment and produces its own report. Run one, or combine them into a single view.
CIS Controls 5 and 6
See MFA AnalysisCIS Control 10
CIS Control 7
Who it's for
The findings stay the same. Each version of the report shows what they mean for the person reading it.
A renewal evidence pack for every client, in the language their insurer uses, plus a fix list your team can act on.
Walk into the carrier with verified controls behind the submission, and see what could slow the placement before you submit.
A wrong “Yes” can reduce or void a claim. See what is true now and what to fix to get or keep coverage.
The MFA analysis you would see after a breach, on your desk before you quote, with likely subjectivities called out.
How it works
A Microsoft 365 admin signs in and approves read-only access. Pulse never changes a setting.
Pulse reads configuration and recent sign-in activity, and scores each finding against CIS Controls.
Get a report for your role, and share a copy with your broker or insurer through a private link.
From the field
"Occasionally, an applicant says they have MFA on all their devices, and at the time of the claim we find out some of them didn't. That can lead to misrepresentation, and sometimes a denial of coverage."
"It's less 'do you have MFA?' and more 'prove your MFA is working and monitored.'"
Leave your work email and we will walk you through a real report from a test company, from the view of your choice: MSP, broker, organization or underwriter.
We'll only use this to set up the walkthrough.
