Can we use NetSenX reports as evidence for our cyber insurer?
Yes, as one piece of evidence, but NetSenX does not certify anything and the insurer decides what it accepts. PDF compliance reports are available from the Starter plan. Together with the alert history, they help show that monitoring was running, what it found and when. Pair each report with the context an insurer needs: which segments were monitored and which were not, who reviewed the alerts, and what was done about the important ones. A report from a monitoring tool says nothing about your backups, MFA or patching, which are usually the insurer’s first questions. After an incident, export the relevant alerts promptly so they are kept beyond your plan’s alert history (30 days on Free, longer on paid plans, unlimited on Enterprise). From the Pro plan alerts can also be pulled through the API into your own archive.
General information, not legal advice. National laws can add to the EU texts quoted here, for example deadlines, forms or reporting channels: check your own country's rules.
Read next
Related questions
- Can network detection lower our cyber insurance premium?
- Does directors and officers insurance cover NIS2 fines or management liability?
- Will cyber insurance pay for a ransomware attack?
- Can network logs help a cyber insurance claim?
- We bought a security tool but nobody watched the alerts. Does that affect cover?