Prevention, insurance and immediate help from a single source: together with our cooperation partner Stoïk, we make vulnerabilities in your company visible, cover the financial consequences of an attack and make sure that experts are at your side immediately in an emergency.
With AI tools, phishing e-mails, fake invoices and “fake president” requests look deceptively real today. Attackers pose as a supplier or the boss, hijack existing e-mail threads or steal login credentials – and divert payments to third-party accounts.
of all fraud cases involve an e-mail.
of all reported claims stem from e-mail incidents.
is the average amount stolen in payment transfer fraud.
* Source: Stoïk claims report, provider's figures.
How deepfakes and AI-supported fraud work today is explained in our article Deepfakes and cyber fraud: why private individuals should protect themselves too.
Cyber insurance alone does not prevent an attack. That is why the solution of our cooperation partner Stoïk combines prevention, cover and help in an emergency.
The prevention platform Stoïk Protect is included in the policy and detects technical and human vulnerabilities before attackers exploit them.
The cyber insurance covers the financial consequences: business interruption, restoration, cyber extortion, third-party liability claims and – where agreed – cyber fraud.
In an emergency, the insurer's own incident response team helps to stop the attack, restore systems and handle notifications to authorities.
An online platform that continuously checks your company from the first day of the contract. Nothing needs to be installed: the tools are set up once remotely and work with read-only permissions.
Weekly check of your internet-facing systems for exploitable security gaps.
Check of user rights, password policies and how up to date the systems at the core of your network are.
Check of Microsoft, Google and Amazon environments for misconfigurations, access rights, backup policies and firewall rules.
Realistic test e-mails and short training sessions so that your team reliably recognises fraud attempts.
A 30-minute appointment with your IT manager to set up the tools.
You will be notified of critical vulnerabilities; according to the provider, the experts get in touch within 24 hours and help with remediation.
According to the provider, the deductible is reduced by 25 % once all available prevention tools have been set up. The insurance policy is authoritative.
The basis is the “Cyber Serenity” conditions (version DE2603.1). Insured are financial losses caused by information security breaches, operating and programming errors, system failures and – where agreed – cyber fraud. Attacks carried out with the help of artificial intelligence are also expressly covered.
Insurance cover only exists if all data and critical systems are backed up at least weekly, retained for at least two weeks and stored as an offline, immutable or isolated backup. The backups must be documented and tested at least once a year. Not insured are, among other things, losses caused by war and by the failure of public or third-party technical infrastructure (e.g. power or internet supply). We are happy to go through the requirements with you and your IT.
The insurer has its own incident response team (CERT) and a claims management team. Both support you – and us as your broker – from notification to compensation.
Via the insurer's emergency number, available around the clock (stated in your contract documents). A false alarm costs nothing.
An IT security expert analyses the incident, usually via remote access, on site if necessary. A permanent contact person is appointed, and we are informed.
Attackers are locked out, systems and data are restored together with your IT – according to the provider, usually within a few days.
Support with filing a criminal complaint and reporting data protection breaches to the supervisory authority within 72 hours (DSGVO/GDPR).
Help with internal and external crisis communication, with a specialised agency if desired.
Determination of the amount of loss, by external experts in the case of business interruption. Once the amount has been agreed, payment is made within 30 days at most, according to the provider.
An employee of a software company fell for a phishing e-mail, and attackers gained access to customer data. The experts stopped the attacker and restored the system; legal costs and liability claims were reimbursed.
Paid: 115.000 €
In the middle of the clearance sale, a retailer's online shop was locked and a ransom was demanded. The website was running again after a few hours; the business interruption was compensated.
Paid: 250.000 €
A misused e-mail address was used to trigger a transfer to fraudsters. The attack path was quickly found and closed; the stolen amount was replaced.
Paid: 50.000 €
Case examples and amounts according to Stoïk. Whether and to what extent benefits are paid depends in each individual case on the insurance policy and conditions.
Because most attacks come by e-mail, there is dedicated protection for Microsoft 365 mailboxes: incoming e-mails are checked with AI support for phishing, invoice fraud and compromised accounts, and the provider's Security Operations Center (SOC) assesses alerts around the clock.
Connection to Microsoft 365 via an interface – without changes to the mail flow and without plug-ins, according to the provider in less than 5 minutes.
Rule-based filters and machine learning models assign a risk score; suspicious logins and account behaviour are also assessed.
The SOC adds a warning to suspicious e-mails, isolates them or contacts you directly in the case of a compromised account.
Read-only access. E-mail content is only stored if it is classified as malicious – then encrypted in data centres in Europe.
According to the provider, with complete setup. Licence costs depend on the number of active e-mail accounts.
Before making an offer, we use the external scan to prepare a cyber risk report. It shows from the outside how your company looks to attackers. This is what the result looked like for a reference client:
Good risk rating – the company is insurable. The status is valid for 90 days.
Medium risk: a server allowed login by password instead of by key – a gateway for automated password attacks.
Passwords of employee accounts appeared in public data leaks – two of them very recent.
Correct DMARC and SPF records were missing on more than 20 domains. Fraudsters could therefore send e-mails in the company's name.
More than 250 domains and subdomains, 178 IP addresses and 137 services were visible from outside.
The result shows: even a good overall rating does not protect against attacks due to misconfigurations or human error. The issues found can usually be fixed quickly – with instructions from the help centre or an appointment with a security expert that we arrange for you.
For some companies, cyber insurance is not (yet) an option – for example because of the industry, a turnover of more than 500 Mio. € or a security set-up that is not yet sufficient. For them there is Stoïk Response: access to the prevention platform, support in fixing critical vulnerabilities and immediate help in an emergency – from investigation and restoration from backups to crisis communication and the reporting obligations under DSGVO.
You can generally withdraw your contractual declaration within 14 days without giving reasons, in text form, by notifying the insurer (§ 8 VVG; exceptions include contracts covering large risks). The period begins when you have received the insurance policy, contract terms and the withdrawal notice in text form. The address for the withdrawal can be found in your withdrawal notice.
Provider: Stoïk GmbH (Munich), as authorised representative of the insurers named in the insurance policy, e.g. Tokio Marine HCC, Swiss Re or Axeria. Only the insurance policy and conditions are authoritative. All information without guarantee, as of October 2026. General information, not individual advice.
We prepare the cyber risk report for your company, discuss the results with you and your IT and check which cover is suitable. Without obligation – there is no additional fee for you, we are paid by the insurers.
Looking for personal insurance advice in Lörrach, Weil am Rhein, Rheinfelden, Schopfheim, Steinen or elsewhere in the Landkreis Lörrach? As an insurance broker in the tri-border region, we specialise in cross-border commuters working in Switzerland – from health insurance for cross-border commuters to retirement provision and property and liability cover. Book your appointment now – in person, by phone or online.
This page is a translation of our German website. The German version is authoritative: in the event of any discrepancies or ambiguities, only the German version is legally binding, not the translation. We offer advice in German or English. You will receive contracts, insurance terms and documents in German.