MoxFive | vCISO Security Stack & Spend Review (Included with Policy)
- Best for insureds with 250–2,500 employees.
- This product reviews security tools, infrastructure, and controls to identify gaps, overlap, and savings opportunities. It delivers prioritized recommendations and a roadmap to strengthen security and align cyber spending with business needs.
- MoxFive website
Ballard Spahr | Privacy Regulatory (Included with Policy)
These are 30-minute consultations with Pierson Ferdinand, Clark Hill and Ballard Spahr. The review covers evolving privacy laws, website and mobile data collection practices, tracking and consent requirements, and litigation trends, with practical steps to strengthen compliance and reduce privacy risk.
Clark Hill | Privacy Consultation (Included with Policy)
These are 30-minute consultations with Pierson Ferdinand, Clark Hill and Ballard Spahr. The review covers evolving privacy laws, website and mobile data collection practices, tracking and consent requirements, and litigation trends, with practical steps to strengthen compliance and reduce privacy risk.
Pierson Ferdinand | AI Regulatory Consultation & Privacy Regulatory Call (Included with Policy)
The AI Regulatory Consultation provides a targeted review of emerging AI regulations, including the EU AI Act and evolving U.S. requirements. It covers privacy, bias, governance, and enforcement trends, with practical recommendations to strengthen oversight and reduce risk.
Captain Compliance | Website Privacy Audit (Included with Policy)
Captain Compliance’s Website Privacy Audit reviews cookies, tracking tools and consent practices to uncover compliance gaps and privacy risks. Insureds receive prioritized findings and practical next steps to strengthen transparency, improve controls and reduce regulatory and litigation exposure.
Silverfort | Identity Services Assessment (Included with Policy)
• Best for insureds with a minimum of 250 employees.
• Silverfort’s Identity Security Assessment identifies identity risks, weak authentication, misconfigurations and active threats across the enterprise. Insureds receive practical recommendations to strengthen security and resilience.
KnowBe4 | Security Awareness and Phishing Training (Included with Policy)
- Access the free phishing test for up to 100 users on the KnowBe4 phishing test page.
- Explore preferred pricing on KnowBe4 offerings on the CNA offer page.
- Help reduce human error with KnowBe4’s phishing simulations and security awareness training. The free phishing test benchmarks employee risk, while ongoing training builds stronger habits and a more resilient security culture.
Captain Compliance – Website Privacy Assessment (Preferred Pricing)
Captain Compliance is a comprehensive website privacy platform designed to simplify compliance with evolving data protection laws. It combines automated cookie scanning, customizable consent management, integrated privacy notices and request portals into a single easy‑to‑use solution. By reducing manual effort and improving transparency, the platform helps organizations stay compliant while strengthening customer trust.
eRiskHub | Cyber Risk Management Platform (Included with Policy)
eRiskHub helps organizations manage cyber risk before, during and after an incident. The platform includes self-assessments, response roadmaps, cost calculators, training and breach response resources to improve preparedness and resilience.
Cloud Capsule | Microsoft 365 Security Assessment (Included with Policy)
Cloud Capsule delivers an automated Microsoft 365 security assessment that quickly identifies risks, configuration gaps, and coverage shortfalls across the cloud environment. Insureds receive an executive summary and practical roadmap to strengthen controls and improve security posture.
Watchguard | Endpoint Protection/Managed Detection and Response (Preferred Pricing)
WatchGuard and CrowdStrike with MDR (Managed, Detection & Response) combine AI and expert response to detect, investigate and stop threats across endpoint, identity and cloud from one unified platform.
CrowdStrike | Endpoint Protection/Managed Detection and Response (Preferred Pricing)
Pierson Ferdinand | IR Tabletop (Preferred Pricing)
This tailored tabletop exercise tests incident response readiness through customized scenarios, a live facilitated session and a written report with key findings and practical next steps.
CNA Cyber Risk Control Team Services | CyberRiskControl@cna.com (Included with Policy)
Client IR Tabletop Feedback | (free) - Our Cyber Risk Control team joins client-led incident response tabletops to provide real-time feedback, identify gaps, and strengthen response readiness.
- IR Policy Review | (free) -
We review incident response and information security policies, with practical guidance to improve clarity, strengthen controls, and better align policies to cyber risk.
NetDiligence | Breach Plan Connect (preferred pricing)
Breach Plan Connect is a cloud-based incident response planning platform that helps organizations prepare for cyber events. Prebuilt templates, guided workflows, and mobile access support faster response, better coordination and reduce breach-related disruption and costs.
Cyber Response Vendors