We check your Microsoft 365, endpoint protection and backups against what underwriters require, then hand you a fix list, draft questionnaire answers and an evidence pack you can submit with confidence.
Fixed prices from $395 CAD. Read-only access. Based in Vancouver, serving the US and Canada.
Insurers now expect evidence, not a ticked box. Partial MFA is the most common reason small businesses fail an assessment, and a wrong answer can put a claim at risk later. We connect each question to what your systems actually show.
Is multi-factor authentication required for all remote access and email?
You approve a read-only app in Microsoft 365 and share your EDR and backup reports. Nothing in your tenant is changed, and you can revoke access in one click.
Within 5 business days: a pass/review report by control, a prioritized fix list, and draft answers to your insurer's questions.
Close the gaps with your IT team, then get a final evidence pack, with every file fingerprinted so an underwriter can see it hasn't been altered.
Small-business cyber policies often cost $45 to $200 a month. Losing it can cost far more in client contracts.
A quick read on where you stand, ideal if your renewal is a few months away.
Everything you need to answer your insurer with confidence. Up to 100 staff on Microsoft 365; larger setups are quoted after a short call.
Sign up, connect Microsoft 365 and run the scan yourself. Good for checking where you stand before you talk to your broker.
Insurers increasingly ask about SPF, DKIM and DMARC because spoofed email is how most invoice fraud starts. Enter your domain to check its public records. It takes a few seconds and needs no access to your systems.
The check runs in your browser using Cloudflare's public DNS. We don't see or store the domain you enter.
Stop rebuilding the same insurance evidence for every client. Proofwell standardizes the assessment, prepares the report, and identifies the remediation work, saving you time across your entire customer base and turning the gaps into billable projects.
We'll assess two or three of your clients at no cost, so you can judge the reports before committing.
Founding partners get preferred per-tenant pricing and shape what we build next: a cross-client dashboard, scheduled re-scans, and reports under your own brand.
Proofwell is run by Bryan Ward, a Vancouver-based security practitioner with nearly 30 years in IT and security. He ran IT operations and security at Softchoice, where he built the company's cyber security plan and managed infrastructure across 32 offices. Since 2018 he has worked in zero-trust security at Illumio, Guardicore and Akamai, where he served as a Field CISO.
Cyber insurers no longer accept a ticked box. They want proof of MFA, endpoint protection and tested backups, and a wrong answer can put a claim at risk. Bryan started Proofwell so small businesses can see exactly where they stand before the questionnaire arrives, and answer it honestly. His background covers what underwriters check: Microsoft infrastructure and identity, workload and network security, and backup and recovery.
Tell us about your business and your renewal. We'll reply within one business day with a fixed quote and a time for a 20-minute call.
Prefer email? Write to [email protected].
Read-only access to Microsoft 365 through an app you approve, plus exports from your endpoint protection and backup tools. We can't change anything, and you can remove the app at any time from your Microsoft 365 admin center.
We collect only what's needed to evidence each control, share it only with you and anyone you name (such as your broker), and delete working copies when the engagement ends unless you ask us to keep them for monitoring.
No. Insurers make their own decisions, and requirements differ by carrier and change over time. We help you find gaps and organize honest, evidence-backed answers. You review every answer before it goes to an underwriter.
Get in touch. Endpoint, backup and email checks apply to any setup, and we can quote a manual review for Google Workspace.
Many good providers don't produce insurer-ready evidence by default. We work alongside them, and the fix list goes straight to the people who can act on it.