Northwind Insurance plc cyber risk score · Universal Cyber Risk Score

Northwind Insurance plc

northwind-insurance.example · United Kingdom · Insurance · 1,000+ staff

Non-intrusive assessmentScored 1 Nov 2026

Universal Cyber Risk Score

Higher is better

812

out of 1,000

Assessed scoreLow risk

Benchmark position

Peer group: Insurance, United Kingdom (1,760 organisations)

Number of peer organisations by score range. The darker bar is the range containing this organisation.

Cyber risk indicators

Category scores out of 100

Email security71/100

Observed · Passive check

Web security74/100

Observed · Passive check

Infrastructure exposure87/100

Observed · Passive check

Information disclosure72/100

Observed · Passive check

Key observations

Observations from Cyber Tzar assessment.

Observation	Severity	Evidence
Missing security headers on main website Web security Add Content-Security-Policy and Strict-Transport-Security headers.	low	Observed · Passive check
Out-of-date server software banner Infrastructure exposure Confirm the version and patch, or suppress version banners.	medium	Observed · Passive check
DMARC policy not enforced Email security Move DMARC from p=none to quarantine or reject once reporting is clean.	medium	Observed · Passive check

Observation

Severity

Missing security headers on main website

Web security

Add Content-Security-Policy and Strict-Transport-Security headers.

low

Out-of-date server software banner

Infrastructure exposure

Confirm the version and patch, or suppress version banners.

medium

DMARC policy not enforced

Email security

Move DMARC from p=none to quarantine or reject once reporting is clean.

medium

Want a more accurate picture?

Non-intrusive and complete Cyber Tzar assessments go deeper than triage.