(Image source: IIR.)
Cork Cyber (Boulder, Colo.), a cyber risk intelligence, remediation and financial resilience technology provider serving managed service providers (MSPs), has added automated patching and vulnerability management to its platform, extending its capabilities from continuous cyber-risk monitoring into automated loss mitigation.
The development is significant for insurance because Cork combines cyber-risk telemetry, remediation and financial protection within the same platform. The company began as a cyber warranty provider and has since expanded its model around continuously determining whether an SMB’s cybersecurity protections are operating as intended.
Dan Candee, CEO, Cork.
“Insurance prices risk, but it cannot change it. Security changes risk, but it cannot price it,” comments Dan Candee, CEO, Cork Cyber. “Cork does both, on the same telemetry, with capital behind the outcome.”
The latest release completes what Cork describes as an automated remediation loop spanning detection, analysis and resolution of cyber vulnerabilities. The platform can identify software vulnerabilities and remediate eligible issues through tools already operating within an MSP’s environment.
Cork reports that 77 percent of eligible security tickets handled through the system are now resolved before requiring human intervention. The platform currently connects with 115 integrations across 11 technology categories and can support patching across more than 13,000 software titles through Chocolatey and Winget.
The capability extends Cork’s approach beyond identifying changes in an organization’s risk posture toward actively addressing those changes. That model potentially has implications for cyber insurance underwriting and loss control as insurers increasingly seek more current information about policyholders’ security environments rather than relying solely on point-in-time assessments.
Cork has previously connected its cyber-risk intelligence with insurance distribution and underwriting processes. Its platform also provides financial protection for certain cyber losses, positioning continuous monitoring and remediation alongside financial risk transfer.
“Instead of handing a technician a list of 30 things to investigate on an endpoint, we handle 28 and hand back two,” Candee adds.
Expanding Access to Cyber Risk Data
Marcus Recck, Head of Product and Engineering, Cork Cyber.
Cork has also expanded its Model Context Protocol (MCP) server, enabling MSPs to query live cyber-risk information through MCP-compatible AI tools rather than relying exclusively on Cork’s own interface.
The company says the approach is intended to make its risk intelligence available within the systems MSPs already use while maintaining a continuous connection among detection, remediation and financial outcomes.
“By combining the lenses of the individual tools in a partner’s stack, Cork extrapolates risk signals no single product can see and now acts on them,” says Marcus Recck, Head of Product and Engineering, Cork Cyber.
Cork characterizes the release as the culmination of a two-year expansion from cyber warranty into a broader platform combining cyber-risk intelligence, active remediation and capital-backed financial protection.