The latest release marks a significant advancement in how (re)insurers assess, diversify, and manage cyber risk across geographies and threat types. Used by 75% of the top 40 U.S. and European cyber insurers, CyberCube’s analytics platform is a cornerstone of the industry’s approach to cyber risk aggregation and exposure management.
PMv6 reflects the growing globalisation of the cyber insurance market, shifting from its traditional U.S.-centric base to encompass international exposures. The model now includes enhanced capabilities to assess geographic variations in cyber threats, such as differences in cloud service provider outages and the origin and spread of global ransomware and wiper malware attacks. A key evolution in this version is the explicit modeling of mitigation strategies, recognizing the impact that strong security controls and risk management practices can have in reducing the severity of catastrophic events. Historically, cyber models have focused more on attritional loss resilience; PMv6 moves the industry closer to understanding the broader effects of protective measures in large-scale scenarios.
CyberCube undertook extensive research with both internal teams and external cyber experts to inform this release, focusing on what would best prepare organisations to avoid, withstand, and recover from catastrophic cyber incidents. The update introduces expanded use of company-level security scores, along with new underwriting-driven risk modifiers aligned with well-established frameworks such as NIST and CIS. This allows users to integrate a firm’s cyber hygiene directly into exposure modeling and risk quantification.
Another major theme in PMv6 is diversification. While the U.S. continues to dominate the cyber insurance landscape—both in terms of insured entities and reliance on U.S.-based technologies and data centers—CyberCube anticipates that meaningful growth will increasingly come from Europe and Asia. To support this expansion, the company has significantly upgraded its proprietary Enterprise Intelligence Layer (EIL), a comprehensive dataset covering millions of companies worldwide. New data sources have strengthened coverage in countries including Germany, France, Australia, Spain, Canada, the UK, and Japan, giving underwriters a more complete view of international cyber risk.
By expanding the EIL and incorporating regional threat variations, PMv6 enables insurers to better model the potential for single points of failure and systemic risk outside the U.S. These improvements are further bolstered by CyberCube’s updated Exposure Databases released in 2024, which together provide a powerful platform for cyber risk management in a global context.
“This release marks an important step forward for our industry,” said Jon Laux, CyberCube’s VP of Analytics. “We expect that over time, the new functionality introduced in this model will inform how (re)insurers understand the primary characteristics of cyber risk during underwriting and exposure management.”
Echoing this sentiment, CyberCube Co-founder and Chief Product Officer Ashwin Kashyap added, “PMv6 represents a major step forward for cyber catastrophe modeling. We have made significant progress in addressing the drivers of diversification and risk mitigation for the benefit of the cyber insurance market. As the market leader in cyber insurance analytics, CyberCube is proud to be the industry’s partner as insurers look to expand thoughtfully into new geographies.”
With the launch of PMv6, CyberCube continues to solidify its role as a foundational partner to insurers navigating the complexity and volatility of cyber risk, providing the tools necessary for smarter underwriting, better portfolio management, and more confident expansion into emerging markets.
