Squalify

Squalify provides cyber risk quantification software that converts cybersecurity exposure into financial-impact estimates for boardroom and risk-committee decision-making, using Monte Carlo simulation and historical cyber-loss data rather than the maturity-scoring approaches (checklist-style ratings of security posture) common among traditional GRC tools. The platform is aimed at helping CISOs, board members, and risk managers answer questions in dollar terms, such as expected annual loss from a ransomware event or the financial effect of a specific control investment, rather than in abstract risk scores.

Squalify operates as a corporate venture of Munich Re, one of the world’s largest reinsurers, giving it access to a cyber-loss database built from more than a decade of cyber insurance underwriting experience covering more than 100,000 companies across 130 industries and 80 countries. This reinsurer-scale historical loss data is a meaningful differentiator versus risk quantification startups that must build actuarial-grade loss models from scratch, and the platform includes regulatory reporting features aligned to European requirements such as DORA and NIS2.

By pairing a reinsurer’s actuarial data with a self-service quantification platform, Squalify sits at the increasingly important intersection of cybersecurity and financial risk management, competing with other cyber risk quantification vendors like Kovrr and BitSight on the credibility and depth of the underlying loss data used to power its simulations.