We check your Microsoft 365, endpoint protection and backups against what underwriters require, then hand you a fix list, draft questionnaire answers and an evidence pack you can submit with confidence.
Fixed price from $750 USD. Read-only access. Based in Vancouver, serving the US and Canada.
Insurers now expect evidence, not a ticked box. Partial MFA is the most common reason small businesses fail an assessment, and a wrong answer can put a claim at risk later. We connect each question to what your systems actually show.
Is multi-factor authentication required for all remote access and email?
You approve a read-only app in Microsoft 365 and share your EDR and backup reports. Nothing in your tenant is changed, and you can revoke access in one click.
Within 5 business days: a pass/review report by control, a prioritized fix list, and draft answers to your insurer's questions.
Close the gaps with your IT team, then get a final evidence pack, with every file fingerprinted so an underwriter can see it hasn't been altered.
Small-business cyber policies often cost $45 to $200 a month. Losing it can cost far more in client contracts.
For businesses with up to 100 staff on Microsoft 365. Larger or multi-tenant setups are quoted after a short call.
Monthly re-checks with alerts when something drifts, like a new admin without MFA or a lapsed backup test, so you're ready before the next renewal.
Available to assessment clients. Opening more widely in 2027.
Ask about monitoringInsurers increasingly ask about SPF, DKIM and DMARC because spoofed email is how most invoice fraud starts. Enter your domain to check its public records. It takes a few seconds and needs no access to your systems.
The check runs in your browser using Cloudflare's public DNS. We don't see or store the domain you enter.
Every renewal you rebuild the same screenshots and answer the same questionnaires for each client, often unpaid. Partner with us and turn that work into a service you can bill for.
We run the readiness check across your clients' tenants and deliver reports under your brand. You keep the client relationship and set your own price.
A multi-tenant dashboard where you scan every client, track drift and export evidence packs yourself. Founding partners help shape it and get it first.
Proofwell is run by Bryan Ward, a Vancouver-based security practitioner with nearly 30 years in IT and security. He ran IT operations and security at Softchoice, where he built the company's cyber security plan and managed infrastructure across 32 offices. Since 2018 he has worked in zero-trust security at Illumio, Guardicore and Akamai, where he served as a Field CISO.
Cyber insurers no longer accept a ticked box. They want proof of MFA, endpoint protection and tested backups, and a wrong answer can put a claim at risk. Bryan started Proofwell so small businesses can see exactly where they stand before the questionnaire arrives, and answer it honestly. His background covers what underwriters check: Microsoft infrastructure and identity, workload and network security, and backup and recovery.
Tell us about your business and your renewal. We'll reply within one business day with a fixed quote and a time for a 20-minute call.
Prefer email? Write to hello@proofwell.ca.
Read-only access to Microsoft 365 through an app you approve, plus exports from your endpoint protection and backup tools. We can't change anything, and you can remove the app at any time from your Microsoft 365 admin center.
We collect only what's needed to evidence each control, share it only with you and anyone you name (such as your broker), and delete working copies when the engagement ends unless you ask us to keep them for monitoring.
No. Insurers make their own decisions, and requirements differ by carrier and change over time. We help you find gaps and organize honest, evidence-backed answers. You review every answer before it goes to an underwriter.
Get in touch. Endpoint, backup and email checks apply to any setup, and we can quote a manual review for Google Workspace.
Many good providers don't produce insurer-ready evidence by default. We work alongside them, and the fix list goes straight to the people who can act on it.