External scan and eligibility

What is the external scan?

The external scan is a tool developed by our teams to simplify the underwriting process. It audits the external surface of your client's information system in search of potential cyber vulnerabilities, much like a burglar checking from the street whether a house's front door is open or its alarm system is poorly configured.

Once launched, the external scan runs for anywhere between 20 minutes and a few hours. Our goal is to run the most accurate and complete audit possible, testing a wide range of vulnerabilities.

For standard studies, the external scan score determines your client's eligibility. You must therefore wait for the scan to finish before sending your project for signature. From the Prospects page, click the grey arrow to the right of Domain name: you can filter by status: In progress, Eligible, Not eligible.

What happens once the scan is complete?

For a standard underwriting process, you will receive an email inviting you to continue with underwriting:

• If the score is above 60/100, your client is immediately eligible;

• If the score is below 60/100, your client can receive free support from one of our Stoïk Experts to improve their security posture and become eligible.

The external scan score is valid for 90 days. After this period, you will need to re-run the scan to reconfirm your client's eligibility.

The external scan is also part of our prevention toolset: once your client is insured with Stoïk, it will run automatically every week from Stoïk Protect, looking for potential security gaps.

The risk report provides a summary of the external scan results and cyber recommendations to share with your client. It is automatically emailed to you once the scan is complete, and you can find it at any time in your Broker Space, under the Documents tab of the project page.

What if my client is not eligible?

If critical vulnerabilities are detected on your client's information system, they are not eligible. The company can receive free support from one of our cyber experts, who help them resolve the detected vulnerabilities in order to become eligible.

Once your client has taken corrective action to improve their security posture, you can re-run the scan by clicking More actions from the prospect view, then Re-run scan.