Public API

Getting Help

The Cyber Insurance Readiness Workflow

Create & Finalize an Assessment

Answering Questions

Dashboard & Clients

Import Clients

Run an Insurability Scan

Understanding the Cyber Insurability Posture Score

Email & Web Protection

Access & Protocol Hardening

Vulnerability & Patch Management

End-of-Life Asset Management

Data & Backup Security

Deep Analysis

Invite a Client User

Organization Settings

Personal Settings

Prospecting

Integrations

Autotask - Get API Credentials

Service Catalog

Autotask - Connect to Inscora

Getting Started

Digital Asset Manager

ConnectWise - Get API Credentials

ConnectWise - Connect to Inscora

First steps with Inscora: navigating the dashboard and adding clients.

Running scans, understanding CIPScore categories, and using the Explain feature.

Scanning & CIPScore

Insurability assessments, carrier questionnaires, and broker selection (Inscora Partner Broker recommended).

Assessments & Brokerage

Team & Collaboration

Settings & Configuration

Connect Inscora to your PSA and RMM platforms. Each integration has a credentials page (steps to get the API key/secret in the third-party product) and a setup page (entering the credentials in Inscora).

Additional Features

Inscora's machine-to-machine API: API key management, authentication, endpoint reference.

How to get help: the Cora assistant, support handover, and email support.

Support

The insurability scan evaluates your client's internet-facing assets and produces a Cyber Insurability Posture Score (CIPScore): a rating that shows how ready they are for cyber insurance. Inscora runs an insurability scan automatically at three points: when you first create a client, every 30 days after that, and whenever you trigger a manual scan.<h2 class="LexTKB__h2 hashed-header" id="automatic-scan-on-client-creation">Automatic Scan on Client Creation</h2>When you create a new client (see <a href="/en/article/add-customer" class="LexTKB__link">Add Clients</a>), Inscora runs discovery and an insurability scan from the domain you provided. No manual action needed; results show up on the client page as the scan completes.<h2 class="LexTKB__h2 hashed-header" id="running-a-manual-scan">Running a Manual Scan</h2>To re-scan a client (for example, after they've made security improvements):<ul class="LexTKB__ul"><li value="1" class="LexTKB__listItem">Navigate to the client's page and scroll down to the CIPScore Detail tab.</li></ul><ul start="2" class="LexTKB__ul"><li value="1" class="LexTKB__listItem">Click the "Start Scan" button in the top-right of the CIPScore Detail section.</li></ul><ul start="3" class="LexTKB__ul"><li value="1" class="LexTKB__listItem">A "Launch Scan" confirmation dialog will appear, showing the domain that discovery and scanning will be initiated from. Click "Scan" to proceed, or "Cancel" to abort.</li></ul><img src="https://cdn-assets.productfruits.com/0415ed1f-9ac5-4b12-9d47-bb63800cd848" alt="Launch Scan confirmation dialog showing the domain to be scanned with Cancel and Scan buttons" style="width: 100%; height: auto; float: full; z-index: 20;" class="lexical-inline-image position-full">The Launch Scan confirmation dialog.<ul start="4" class="LexTKB__ul"><li value="1" class="LexTKB__listItem">The "Start Scan" button will change to indicate the scan is in progress. Results will appear automatically when the scan completes.</li></ul><img src="https://cdn-assets.productfruits.com/f609352e-3628-437f-8b74-cfcd67a762fd" alt="Client page showing scan in progress with Cancel scan button and Scan in progress indicator" style="width: 100%; height: auto; float: full; z-index: 20;" class="lexical-inline-image position-full">Scan in progress. The button changes to "Cancel scan" and an indicator appears.<ul start="5" class="LexTKB__ul"><li value="1" class="LexTKB__listItem">Hover the "Scan in progress" button at any time to see exactly where the scan is. A small Scan Progress popover appears showing each step the scan goes through and which one is currently running. The five steps are:</li></ul><ul class="LexTKB__ul"><li value="1" class="LexTKB__listItem">Queued for scanning - the scan is in the queue, waiting to be picked up by Inscora's scanning engine.</li></ul><ul start="2" class="LexTKB__ul"><li value="1" class="LexTKB__listItem">Discovering all scannable assets - building the full asset inventory from the client's domains, expanding outward to related domains, subdomains, and the underlying assets behind them.</li></ul><ul start="3" class="LexTKB__ul"><li value="1" class="LexTKB__listItem">Running Insurability Scan on assets - actively probing the discovered assets for insurability controls validation.</li></ul><ul start="4" class="LexTKB__ul"><li value="1" class="LexTKB__listItem">Processing results into global CIPScore - aggregating insurability scan results into category scores.</li></ul><ul start="5" class="LexTKB__ul"><li value="1" class="LexTKB__listItem">Finalizing controls &amp; services knowledge - last-mile enrichment before results appear.</li></ul>The popover header also shows a count, e.g. "1 of 5 steps completed", so you can tell at a glance how far along the scan is.<img src="https://cdn-assets.productfruits.com/b1696264-b8c6-4728-993e-4539ae402385" alt="Scan Progress popover shown on hover, with the header '1 of 5 steps completed' and a numbered list: Queued for scanning (Completed), Discovering all scannable assets (In progress), Running Insurability Scan on assets (Queued), Processing results into global CIPScore (Queued), Finalizing controls and services knowledge (Queued)." style="width: 100%; height: auto; float: full; z-index: 20;" class="lexical-inline-image position-full">Hover the in-progress button to see exactly which step the scan is on.<blockquote class="LexTKB__quote">ℹ️ How long does an insurability scan take? Usually fast, but it can take a few minutes depending on how many internet-facing assets your client has. You don't need to stay on the page; results will be ready when you come back, and the hover popover above tells you which step is currently running if you want to check in.</blockquote><h2 class="LexTKB__h2 hashed-header" id="recurring-scans">Recurring Scans</h2>Inscora automatically re-scans every client every 30 days. This keeps CIPScores current without any manual effort on your part. When a recurring scan completes, the CIPScore and all category validations are updated with the latest data.Because scanning is continuous, you don't need to wait until a renewal date is approaching to address gaps. As insurer requirements evolve or new issues surface, you and your client can make improvements throughout the year and see the results reflected in the CIPScore well before the renewal window opens.You can always trigger a manual scan on top of the 30-day cycle, for example after a client has addressed issues and you want to verify the improvements right away. Manual scans reset the 30-day timer.<blockquote class="LexTKB__quote">💡 Notifications for scan changes. You can configure notifications to alert you when a recurring scan detects significant changes in a client's posture. See <a href="/en/article/personal-settings" class="LexTKB__link">Personal Settings</a> to manage your notification preferences.</blockquote><h2 class="LexTKB__h2 hashed-header" id="reviewing-the-results">Reviewing the Results</h2>Once the scan completes, the CIPScore Detail section displays a breakdown of your client's cyber insurability posture across several categories. Each category receives its own score and validation summary.<img src="https://cdn-assets.productfruits.com/eb074e7a-44c4-4d3c-bda6-8009635e858f" alt="CIPScore Detail section showing category cards with scores and insurability validations" style="width: 100%; height: auto; float: full; z-index: 20;" class="lexical-inline-image position-full">CIPScore breakdown by security category.For a complete walkthrough of what each category means, how scores are calculated, and how to interpret insurability scan results, see <a href="/en/article/cipscore-detail" class="LexTKB__link">Understanding the Cyber Insurability Posture Score</a>.<blockquote class="LexTKB__quote">💡 Use Deep Analysis to understand insurability scan results. Every validation in the CIPScore detail view has a <a href="/en/article/explain-feature" class="LexTKB__link">Deep Analysis</a> toggle. Open it to get an AI-generated briefing tailored to your client's specific situation: what was found, why it matters for insurability, how to fix it, and how your services connect to the solution. It's the most complete way to understand any insurability scan result.</blockquote><h3 class="LexTKB__h3 hashed-header" id="exporting-results">Exporting Results</h3>Click the "Export Summary" button at the top of the CIPScore Detail section to generate a downloadable report of the insurability scan results. This is useful for sharing with clients, brokers, or for your own records. The report language matches the client's Communication Language setting (English or French), which you can change via the pencil icon at the top-right of the client card. For a detailed walkthrough of the export options and what the report contains, see <a href="/en/article/cipscore-detail#export-summary" class="LexTKB__link">Export Summary</a> in the CIPScore detail guide.

<blockquote class="LexTKB__quote">💡 Do step 1 first even if you're tempted to skip it. Connecting your PSA is what removes the most tedious part of onboarding: assembling a client list by hand. Everything downstream is faster once it's done.</blockquote><h3 class="LexTKB__h3 hashed-header" id="1-connect-your-psa">1. Connect your PSA</h3>This lets Inscora read your client list directly instead of you typing it in.<blockquote class="LexTKB__quote">You'll need: API credentials for the PSA you use to manage clients.</blockquote>Open <a href="/en/article/integrations" class="LexTKB__link">Integrations</a> to see which platforms you can connect today. Each one has a pair of pages: how to create the API credentials inside the PSA, then how to enter them in Inscora and verify the connection.<h3 class="LexTKB__h3 hashed-header" id="2-import-your-clients">2. Import your clients</h3>Use the Import Clients panel on the Clients page and bring your whole portfolio in at once. If you connected a PSA in step 1 there's nothing to prepare: the panel reads your clients straight from it.The domain matters more than the name. It's where the insurability scan starts, so a wrong domain produces a score for the wrong company. See <a href="/en/article/add-customer" class="LexTKB__link">Add Clients</a> for the full flow, including the one-off + Create Client dialog for a single new client.<blockquote class="LexTKB__quote">ℹ️ No PSA? Import from a spreadsheet instead. The CSV tab of the same panel takes a file listing each client's company name and primary domain. Hit Download Import Template there to start from the correct header row, then upload it back. <a href="/en/article/add-customer" class="LexTKB__link">Add Clients</a> has the column list.</blockquote><h3 class="LexTKB__h3 hashed-header" id="3-add-your-team">3. Add your team</h3>Invite everyone who needs access, so they're working in the platform rather than waiting on you.<blockquote class="LexTKB__quote">You'll need: each person's name and e-mail address, and a decision on who should be an Admin.</blockquote>Admins see every client in the organization and can manage settings; standard Service Providers only see the clients assigned to them. Invite them from the Members section of <a href="/en/article/org-settings" class="LexTKB__link">Organization Settings</a>.<h3 class="LexTKB__h3 hashed-header" id="4-review-your-service-catalog">4. Review your Service Catalog</h3>This is what turns the CIPScore into a sales conversation: Inscora matches your own offers to each client's gaps and surfaces them in the remediation guidance and in client-ready reports.Inscora pre-loads your catalog for you, so this is usually a review-and-correct exercise rather than data entry.<blockquote class="LexTKB__quote">You'll need: your current service catalog, with prices if you want revenue projections rather than client counts.</blockquote>You can also send it over in whatever format you already keep it in: a spreadsheet, a price list, an export from another system. Once it's in, review and adjust it on the <a href="/en/article/service-catalog" class="LexTKB__link">Service Catalog</a> page.Your catalog stays under your control. It's used to generate your own recommendations and reports, and is never shared with other Service Providers, brokers, or anyone outside your organization.<h3 class="LexTKB__h3 hashed-header" id="5-set-your-preferred-broker">5. Set your Preferred Broker</h3>Optional. Do this if you already work with a cyber insurance broker you want to give access to Inscora so they can place your customers.<blockquote class="LexTKB__quote">You'll need: the broker's Agency Website and Broker Email. Those are the only two fields the invitation asks for.</blockquote>Set it in the Preferred Broker section of <a href="/en/article/org-settings#preferred-broker" class="LexTKB__link">Organization Settings</a>.If you don't have a broker, skip this step and use Inscora's Partner Broker instead. Inscora hand-picks its broker panel: specialists who place cyber risk every day, know how underwriters read a CIPScore, and take a strong score to the carriers most likely to reward it. Your client gets better premiums and terms than a generalist would find them, and you don't have to shop the market yourself.<h3 class="LexTKB__h3 hashed-header" id="6-map-your-existing-security-questionnaire">6. Map your existing security questionnaire</h3>Optional. Do this if you already put clients through a security questionnaire of your own: a compliance-driven assessment (SOC 2, ISO 27001, HIPAA, CIS), a pre-sales or onboarding cyber evaluation, an annual risk review, or a client's own vendor-security questionnaire you fill in on their behalf.<blockquote class="LexTKB__quote">You'll need: a copy of the questionnaire, in whatever format you keep it in.</blockquote>Inscora maps it automatically and scores the answers against insurability requirements. You won't be asking clients the same questions twice, and a process you already run becomes behind-the-firewall input that fills in the parts of the CIPScore an insurability scan can't see. Send it to <a href="https://help.inscora.com/en/article/support" class="LexTKB__link">Inscora support</a>: unlike the steps above, this one is set up with you rather than self-serve.<h3 class="LexTKB__h3 hashed-header" id="7-let-the-insurability-scan-run">7. Let the insurability scan run</h3>Nothing to configure. The moment a client lands in Inscora, discovery and an insurability scan start automatically from the website you provided.Results appear on each client's page as the insurability scan completes. Hover the Scan in progress button to see which step it's on. For the detail, see <a href="/en/article/run-scan" class="LexTKB__link">Run an Insurability Scan</a>.<h3 class="LexTKB__h3 hashed-header" id="8-review-the-cipscore-and-start-the-sales-conversation">8. Review the CIPScore and start the sales conversation</h3>Open a client's page and look at the CIPScore card and the CIPScore Detail tab, where each control category carries its own score and validation list. See <a href="/en/article/cipscore-detail" class="LexTKB__link">Understanding the Cyber Insurability Posture Score</a> for how the score is built.This is where the catalog review in step 4 pays off. On any insurability scan result, open <a href="/en/article/explain-feature" class="LexTKB__link">Deep Analysis</a>: as well as what was found and why an underwriter cares, it closes with How your Service Provider can help, naming the specific offers from your catalog that address that gap. You're not pitching in the abstract, you're pointing at an evidenced problem and the service you already sell that fixes it.When you're ready to put it in front of the client, use Export Summary to generate the Cyber Insurability Report: a client-ready PDF carrying the same posture detail and the same recommendations from your catalog, under a heading in your own MSP's name. Hand it to the client or their broker as it comes. See <a href="/en/article/cipscore-detail#export-summary" class="LexTKB__link">Exporting the Cyber Insurability Report</a>.<h3 class="LexTKB__h3 hashed-header" id="9-invite-the-client-and-complete-the-assessment">9. Invite the client and complete the assessment</h3>The insurability scan sees what's exposed to the internet. The rest of the CIPScore comes from behind the firewall: partly from the systems Inscora connects to, and partly from answers only the client can give, because no system can attest to a policy, a response plan, or how often staff are trained.Use <a href="/en/article/invite-user" class="LexTKB__link">Invite a Client User</a> to bring someone from the client's organization in to answer the parts only they can (MFA, backups, incident response plan, employee training). Once the questionnaire is far enough along, follow <a href="/en/article/insurability-assessment" class="LexTKB__link">Create &amp; Finalize an Assessment</a> to pick the carrier questionnaire(s), assign a broker, and submit the application.<h2 class="LexTKB__h2 hashed-header" id="whats-next">What's next</h2>Once you've done this for one client, the same pattern applies to the rest of your portfolio. A few places to go from here:<ul class="LexTKB__ul"><li value="1" class="LexTKB__listItem"><a href="/en/article/dashboard" class="LexTKB__link">Dashboard &amp; Clients</a> - your portfolio at a glance, with the revenue opportunity your catalog unlocks and filters for CIPScore, renewal date and application progress.</li></ul><ul class="LexTKB__ul"><li value="1" class="LexTKB__listItem"><a href="/en/article/pipeline" class="LexTKB__link">Prospecting</a> - the same machinery pointed at prospects you're selling to, using insurability as the opening.</li></ul><ul class="LexTKB__ul"><li value="1" class="LexTKB__listItem"><a href="/en/article/personal-settings" class="LexTKB__link">Personal Settings</a> - notifications for posture changes and questionnaire progress.</li></ul><ul class="LexTKB__ul"><li value="1" class="LexTKB__listItem"><a href="/en/article/public-api" class="LexTKB__link">Public API</a> - push clients in and pull scores out programmatically, if you'd rather drive Inscora from your own systems.</li></ul>

Go back to application

Was this article helpful?

You recently requested to reset your password for your account. Use the button below to reset it. This password reset is only valid for the next 24 hours.

If you’re having trouble with the button above, copy and paste the URL below into your web browser.

Inscora Help Center

Featured Articles

Getting Started

Import Clients

Run an Insurability Scan