Key Takeaways
- Qualys, in collaboration with Converge, has launched an offering that ties your security posture to your cyber insurance costs.
- The Qualys Converge Connect Insurance Report (CCIR) supplements manual insurance questionnaires with objective, platform-generated, real-time security data.
- Qualys customers with active Qualys Enterprise TruRisk Management (ETM); Qualys Vulnerability Management, Detection & Response (VMDR); Patch Management (PM), now part of TruRisk Eliminate; and Endpoint Detection & Response (EDR) subscriptions may qualify for potential cyber insurance premium reductions.
- The offering is available to US-based organizations across most industries with revenues up to $5B.
The Mythos moment is forcing cyber insurers to confront a question they have been deferring: what does it mean to underwrite cyber risk in real time? Historically, the answer has been that it doesn’t matter because the questionnaire is good enough. That assumption is no longer holding up in the market.
Cyber insurance has a measurement problem. Most underwriters still rely on self-reported static questionnaires, documents that are time-consuming to complete, inconsistent across organizations, and fundamentally disconnected from the reality of your security program. The result is premiums based on assumptions about your security practices, not evidence.
Moreover, security leaders invest significant budgets and effort to reduce risk. They deploy vulnerability management. They enforce patch management. They monitor endpoints. And then they sit down to renew their cyber insurance policy and answer the same static questionnaire they filled in 12 months ago — manually, by memory, with no connection to the verified data sitting on their security platform.
That data gap costs organizations money. Underwriters, operating on incomplete information, price risk conservatively. Organizations with a genuinely strong security program end up subsidizing those with weaker ones.
That disconnect ends today.
We’re proud to announce that Qualys has joined forces with Converge to offer a first-of-its-kind offering that creates a direct, verified link between your cybersecurity posture and your cyber insurance premiums.
Introducing Qualys Converge Connect Insurance Report
Converge Connect is a strategic offering that connects Qualys Enterprise TruRisk Management (ETM) directly with the cyber insurance underwriting process. At the center of this is the Qualys Converge Connect Insurance Report (CCIR), an objective, independently generated assessment of your security posture, generated directly from your ETM instance.
The CCIR captures verified evidence across these core control domains:
This report is submitted to Converge via an appointed broker—Symphony Risk Solutions, supplementing the traditional questionnaire to reduce the number of questions asked during the insurance process. Underwriters get the verified data they need. You get a premium that reflects your actual cyber risk.
“Cyber risk has historically been priced on snapshots and self-reported answers, leaving real exposure invisible between renewals. With verified data, we will be able to underwrite to a company’s live security posture and provide policyholders who do the hard work of reducing risk to see benefits.”
— Tom Kang, CEO, Converge
What This Means for Qualys Customers
For organizations using Qualys, the path to Converge Connect is straightforward. The CCIR is generated directly with data from eligible Qualys products — no third-party tools, no manual data exports. Any user with Dashboard access can produce the report and submit it to Symphony Risk Solutions as part of their insurance application or renewal.
The financial and operational benefits are concrete:
- Potential premium reductions tied directly to your documented security posture. Lower premiums.
- Automated, platform-generated data replaces hours of manual questionnaire completion. Less admin.
- Verified evidence of your controls means your premium reflects reality, not industry averages. Fairer underwriting.
- Converge offers comprehensive cyber coverage backed by AM Best A++ rated capacity. Stronger coverage.
This offering is open to US-based Qualys customers across most industries with revenues up to $5B. At a minimum, an active VMDR subscription is required.
Get Started
If you’re a Qualys customer in the US, you can begin the enrollment process now, ahead of your next policy renewal.

Deixe o seu comentário