CyberCube

Name: CyberCube
Brand: CyberCube

Delivering data-driven cyber risk analytics for the insurance industry

Est 2015|Valuation $140M|Raised $105M|64 Ref Customers

LinkedIn 15K|Web traffic 5K|FTEs 116|HQ San Francisco, California, US

Published Oct 13, 2026

01Common complaints

Primary need is continuous security posture monitoring rather than financial accumulation modeling
- If the organization requires continuous applicant scoring, monitoring insureds, and managing operational risk vectors, telemetry-focused tools (e.g., Bitsight, SecurityScorecard) may be more directly aligned.
The organization cannot support exposure data quality and model governance
- If policy/exposure detail cannot be reliably provided or data pipelines cannot be maintained, portfolio model outputs may be unreliable and operational overhead may outweigh benefits.
Procurement requires publicly posted security certifications prior to engagement
- If procurement requires vendors to publicly post SOC 2, ISO certificates, or detailed security control statements, expect CyberCube to provide documentation under NDA rather than via a public compliance page.
Budget constraints or preference for lower-cost tooling
- CyberCube is likely an enterprise purchase. Organizations with limited cyber premium or early-stage cyber offerings may find lower-cost, more targeted tools preferable.
Program focus is enterprise third-party risk management (TPRM) workflows
- If the program emphasizes vendor questionnaires, supply chain monitoring, and enterprise compliance, a TPRM-focused platform will typically be a better fit.

1. **Primary need is continuous security posture monitoring rather than financial accumulation modeling** - If the organization requires continuous applicant scoring, monitoring insureds, and managing operational risk vectors, telemetry-focused tools (e.g., Bitsight, SecurityScorecard) may be more directly aligned. 2. **The organization cannot support exposure data quality and model governance** - If policy/exposure detail cannot be reliably provided or data pipelines cannot be maintained, portfolio model outputs may be unreliable and operational overhead may outweigh benefits. 3. **Procurement requires publicly posted security certifications prior to engagement** - If procurement requires vendors to publicly post SOC 2, ISO certificates, or detailed security control statements, expect CyberCube to provide documentation under NDA rather than via a public compliance page. 4. **Budget constraints or preference for lower-cost tooling** - CyberCube is likely an enterprise purchase. Organizations with limited cyber premium or early-stage cyber offerings may find lower-cost, more targeted tools preferable. 5. **Program focus is enterprise third-party risk management (TPRM) workflows** - If the program emphasizes vendor questionnaires, supply chain monitoring, and enterprise compliance, a TPRM-focused platform will typically be a better fit.

Deal disqualifiers (poor fit)

Small insurers or MGAs without data operations or model governance capacity
Teams seeking a simple security rating rather than financial modeling
Buyers requiring transparent, self-serve pricing and lightweight deployment

Publicly observable limitations

Limited public reviews: Lack of robust listings on mainstream review platforms makes it harder to benchmark customer satisfaction externally.
Security/compliance transparency: Security certifications and controls are not prominently published on the vendor’s public pages.
Pricing opacity: No public tiered pricing; procurement requires a sales engagement.

Roadmap / versioning signals

CyberCube’s Portfolio Manager has multiple versions over time (references to v3.0, later versions, and Version 6 in partner statements). Frequent evolution can improve model relevance but can complicate governance and version comparison.

Technical and organizational constraints to check in diligence

API coverage and rate limits (CyberConnect)
Required data schemas and fields for modeling
Explainability of scenarios and availability of sensitivity controls
Model update cadence and backward comparability of results

02Why they buy

Validated or directionally supported differentiators:

Insurance-centric accumulation and scenario modeling focus: Portfolio Manager is positioned as a cyber portfolio modeling solution for (re)insurers with pricing analytics and exposure management.
Workflow integration via APIs (CyberConnect): CyberConnect provides API delivery of models, signals, and analytics into existing systems, addressing integration needs beyond spreadsheets.
Vendor-reported market adoption: The vendor reports adoption among insurers and brokers, which indicates embeddedness in the cyber insurance ecosystem; these claims should be validated in procurement and reference checks.

Balanced caveat:

Many differentiators require hands-on evaluation, reference calls, and model performance testing to validate against internal standards and governance.

Validated or directionally supported differentiators: - **Insurance-centric accumulation and scenario modeling focus**: Portfolio Manager is positioned as a cyber portfolio modeling solution for (re)insurers with pricing analytics and exposure management. - **Workflow integration via APIs (CyberConnect)**: CyberConnect provides API delivery of models, signals, and analytics into existing systems, addressing integration needs beyond spreadsheets. - **Vendor-reported market adoption**: The vendor reports adoption among insurers and brokers, which indicates embeddedness in the cyber insurance ecosystem; these claims should be validated in procurement and reference checks. Balanced caveat: - Many differentiators require hands-on evaluation, reference calls, and model performance testing to validate against internal standards and governance.

03Field reports

Review platform availability (G2/Capterra/TrustRadius)

A notable limitation in public market feedback is that CyberCube does not appear to have substantial mainstream review-platform coverage that is easily discoverable (e.g., G2/Capterra/TrustRadius listings with multiple reviews).

This pattern is common for highly specialized, enterprise, insurance-only modeling vendors where buyers rely on references and industry networks rather than public reviews.

Vendor-published testimonials (positive)

CyberCube product pages include customer quotes that are favorable. Examples:

Portfolio Manager page quotes executives and actuaries from insurance and brokerage firms describing value in quantifying cyber risk and accumulation scenarios.
CyberConnect page includes broker and carrier quotes focused on client advisory and growth-related outcomes.

These materials indicate which types of customers the vendor sells to, but they are vendor-provided and subject to selection bias.

CyberCube product pages include customer quotes that are favorable. Examples: - Portfolio Manager page quotes executives and actuaries from insurance and brokerage firms describing value in quantifying cyber risk and accumulation scenarios. - CyberConnect page includes broker and carrier quotes focused on client advisory and growth-related outcomes. These materials indicate which types of customers the vendor sells to, but they are vendor-provided and subject to selection bias.

Independent / third-party quotes and context

Independent coverage is primarily press and news about product releases, funding, and model updates rather than hands-on product reviews. For example:

Industry press coverage describes Portfolio Manager updates and scenario types such as cloud failures and ransomware contagion.
Joint reports with market participants indicate cooperative research and usage of vendor outputs in that context.

Community discussions (Reddit / Hacker News)

Implication: The buyer should rely more heavily on:

Reference calls with similar insurers and brokers
Pilot evaluations with historical portfolio back-testing
Independent validation of model performance versus internal experience

Public community commentary specific to “using CyberCube” is relatively sparse compared with mass-market SaaS. Searches did not surface widely referenced user review threads in the material collected for this report. Implication: The buyer should rely more heavily on: - Reference calls with similar insurers and brokers - Pilot evaluations with historical portfolio back-testing - Independent validation of model performance versus internal experience

Case studies and customer examples referenced publicly

Example: an ILS investor licensing Portfolio Manager

The vendor describes the product as a SaaS application to stress test portfolios against scenarios like ransomware and cloud outages.
The announcement provides qualitative statements of vendor value but does not provide independently verified quantitative ROI or a methodology for measuring impact.

Critical evaluation:

Announcements indicate adoption by market participants and provide qualitative descriptions of vendor value.
They do not provide independently verified quantitative ROI (loss-ratio improvement, capital efficiency) or a detailed methodology for impact measurement.

Vendor press releases and site content mention relationships with major market participants across insurers, reinsurers, brokers, and ILS/alternative capital investors. These are typically framed as licensing or partnership arrangements. Example: an ILS investor licensing Portfolio Manager - The vendor describes the product as a SaaS application to stress test portfolios against scenarios like ransomware and cloud outages. - The announcement provides qualitative statements of vendor value but does not provide independently verified quantitative ROI or a methodology for measuring impact. Critical evaluation: - Announcements indicate adoption by market participants and provide qualitative descriptions of vendor value. - They do not provide independently verified quantitative ROI (loss-ratio improvement, capital efficiency) or a detailed methodology for impact measurement.

Vendor loss estimates (example: major vendor-related outage event)

CyberCube has published insured loss estimates for market-impacting outage events. Those figures are model-based outputs and should be treated as indicative rather than definitive.

Critical evaluation:

Such estimates are model outputs and rely on underlying assumptions; methodology and assumptions are not typically fully disclosed in press releases.
Organizations considering CyberCube for event response or market insight should evaluate how those estimates are generated and whether they align with internal claims and exposure views.

CyberCube has published insured loss estimates for market-impacting outage events. Those figures are model-based outputs and should be treated as indicative rather than definitive. Critical evaluation: - Such estimates are model outputs and rely on underlying assumptions; methodology and assumptions are not typically fully disclosed in press releases. - Organizations considering CyberCube for event response or market insight should evaluate how those estimates are generated and whether they align with internal claims and exposure views.

04Best fit

Company sizes (buyers)

Because CyberCube sells into insurers, brokers, and reinsurers, ICP is better described by insurance-market maturity than headcount. Typical strong fit:

Cyber (re)insurers and reinsurers with dedicated cyber underwriting and exposure management teams
Global and specialty brokers with cyber placement and advisory practices
MGAs scaling cyber underwriting who need consistent risk views
ILS / capital markets participants exploring cyber risk-linked structures

Because CyberCube sells into insurers, brokers, and reinsurers, ICP is better described by insurance-market maturity than headcount. Typical strong fit: - **Cyber (re)insurers and reinsurers** with dedicated cyber underwriting and exposure management teams - **Global and specialty brokers** with cyber placement and advisory practices - **MGAs** scaling cyber underwriting who need consistent risk views - **ILS / capital markets participants** exploring cyber risk-linked structures

Industries/verticals (end insureds)

CyberCube’s customers are insurance market participants insuring enterprises across sectors. The vendor publishes sector-focused briefings and systemic concerns such as cloud outages and ransomware contagion.

Roles and personas

Decision makers: Head of Cyber Underwriting, Chief Risk Officer / ERM leaders, Reinsurance buying leaders, Cyber product leadership
End users: Underwriters, actuaries, portfolio managers, catastrophe modelers, cyber analytics teams, broker advisory teams
Technical stakeholders: Data engineering and platform teams if CyberConnect APIs are used

Pain points addressed

Translating cyber threats into financial loss distributions
Managing accumulation risk (systemic events, cloud concentration, ransomware contagion)
Supporting technical pricing and portfolio steering beyond experience rating
Providing defensible analytics for reinsurance and potential regulatory or ratings agency review

Qualification criteria (good fit)

The organization writes sufficient cyber premium that accumulation risk is a board-level concern
The organization has (or is willing to build) portfolio exposure data discipline
The organization has model governance maturity (sensitivity testing, versioning, documentation)
The organization needs API integration into internal underwriting tools (CyberConnect)

05The pitch

What the product does (objective value proposition)

Key product families called out by CyberCube include:

Portfolio Manager: portfolio/accumulation modeling and reporting; includes pricing analytics, exposure management, and scenario-based catastrophe modeling.
Account Manager: single-risk underwriting support (vendor materials indicate underwriters can assess an individual account’s portfolio impact when licensed alongside Portfolio Manager).
CyberConnect: APIs that embed CyberCube’s models, signals, and analytics into a customer’s internal workflow.
SPoF Intelligence and Industry Exposure Databases (IEDs): capabilities focused on technology dependency / single point of failure accumulation risk and industry exposure/loss curves.
Services: Consulting and Concierge support services.

CyberCube provides cyber risk analytics and modeling software (plus services) purpose-built for the cyber (re)insurance ecosystem. Its platform is intended to help insurers, reinsurers, brokers, MGAs, and related capital providers quantify cyber risk in financial terms for underwriting, pricing, portfolio/accumulation management, and reinsurance/ILS decision-making. The platform emphasizes scenario-based cyber catastrophe modeling, risk signals, and workflow integration via APIs. Key product families called out by CyberCube include: - **Portfolio Manager**: portfolio/accumulation modeling and reporting; includes pricing analytics, exposure management, and scenario-based catastrophe modeling. - **Account Manager**: single-risk underwriting support (vendor materials indicate underwriters can assess an individual account’s portfolio impact when licensed alongside Portfolio Manager). - **CyberConnect**: APIs that embed CyberCube’s models, signals, and analytics into a customer’s internal workflow. - **SPoF Intelligence** and **Industry Exposure Databases (IEDs)**: capabilities focused on technology dependency / single point of failure accumulation risk and industry exposure/loss curves. - **Services**: Consulting and Concierge support services.

Target market and positioning

CyberCube is positioned as a specialist vendor focused on cyber risk quantification for the insurance market (carriers, reinsurers, brokers, MGAs, ILS/capital markets, government/regulators). The vendor reports notable penetration among major cyber insurers and brokers and emphasizes capabilities in portfolio and catastrophe accumulation modeling.

Get a comprehensive analysis of CyberCube including market position, competitive landscape, adoption trends, and peer benchmarks.

Download full report →