Insurability Sprint · 30 Days · Fixed Fee

Failing your cyber-insurance renewal?We’ll get you compliant, and insurable, in 30 days.

For BC construction and professional firms on Microsoft 365. We find every control your insurer checks (MFA, EDR, backups, email security, incident response), fix the gaps, and hand you the evidence pack your broker takes to the underwriter.

Book your Insurability Check

Not ready to talk? See what the Sprint covers ↓

Established 2012 · Microsoft-Stack Specialists · Vancouver, BC

01 — The Problem

Insurers changed the rules. Most firms haven’t noticed yet.

Cyber-insurance carriers used to sell coverage on price and paperwork. Since 2022 that has flipped. Underwriters now enforce a hard baseline of security controls (multi-factor authentication, endpoint detection and response, immutable backups, a written incident-response plan, DMARC on email) and they check.

Answer the 100 to 200-question application without those controls in place, and the policy is declined. Answer “yes” without the evidence to back it up, and a future claim can be denied for misrepresentation. Some firms are already discovering the second one the hard way.

For a mid-sized firm bidding on a project, insurance isn’t optional paperwork any more. It’s a gate. General contractors, owners, and prime insurers now flow security requirements down through the whole chain. If your renewal fails, you don’t just lose coverage. You can lose the ability to bid.

80%

of cyber incidents start with a compromised credential, the exact thing insurers rate hardest

96%

of ransomware attacks specifically target the backups first

100-200

questions on the average Canadian cyber-insurance application

02 — The Sprint

A 30-day, fixed-fee readiness engagement, with the evidence pack your broker actually needs.

The Insurability Sprint scans your Microsoft 365 environment against the eight control domains cyber-insurance underwriters score, fixes the gaps that would cause a decline, and hands you a formal evidence pack your broker takes straight to the underwriter. Fixed fee. Fixed timeline. No open-ended consulting.

Insurability Scorecard

A one-page pass-fail against every control your insurer scores. Colour-coded, with an honest overall verdict: will you pass renewal today?

Insurer Evidence Matrix

A row-per-question mapping of your carrier’s application form to the exact evidence we collected, so you answer the 100-200 questions accurately, not from memory.

Risk Register

Every gap identified, with business risk stated in dollars, downtime, or uninsurability terms. Prioritized by what your carrier weighs hardest.

Fixed-price Remediation Roadmap

A 30-60-90-day plan to close every gap, with fixed pricing per phase. No surprise invoices.

Ongoing Managed Proposal

How we keep the controls in place after the Sprint ends, so next year’s renewal is easy, priced so you can compare it to what you pay today.

03 — How It Works

Four weeks, three milestones, one evidence pack.

Week 1

Discover

  • Read-only access to your Microsoft 365 tenant (least-privilege, never Global Admin)
  • Automated scan across identity, email, endpoint, backup, data governance, logging, exposure
  • 30-minute stakeholder interview (one call, no committees)

Weeks 2-3

Remediate

  • Prioritized fix-list by insurer impact
  • We do the technical work; you approve
  • Weekly written status update, no vendor meetings for the sake of meetings

Week 4

Deliver

  • Scorecard, Evidence Matrix, Risk Register, Remediation Roadmap, bound as one document you can send to your broker
  • 60-minute readout call with your leadership and, if you want, your broker
  • You keep the evidence pack. It’s yours.

04 — Fit Check

Built for one specific kind of firm.

Right fit if you are:

  • 10-75 employees, one to five offices, running on Microsoft 365
  • BC-based construction, accounting, legal, or professional services
  • Facing a cyber-insurance renewal, application, client security questionnaire, or a Copilot rollout
  • Without a senior in-house security lead
  • Willing to make the fixes the underwriter needs, not just get a report

Not a fit if you are:

  • Under 10 employees or over 250, different economics either way
  • Not on Microsoft 365 (Google Workspace-primary firms need a different provider)
  • Looking for a one-off audit with no fixes
  • Looking for compliance certification (SOC 2, ISO 27001), that is a different, longer engagement

05 — Why Sun Gate

We don’t just scan. We fix it and manage it so you stay insurable.

Microsoft-stack specialists.

Deep in Entra, Defender, Intune, Purview, and the whole M365 identity and security surface. Not a generalist IT shop that also does security.

Independent of your current provider.

We’re not the MSP who let this slip. Our findings are honest, even when the honest finding is that your incumbent needs to be replaced.

Local, accountable, Vancouver-based.

Founder-led out of Metro Vancouver. Delivery hours, not offshore-only. Real names on the report.

06 — Next Step

Book a 20-minute Insurability Check.

Bring the last cyber-insurance application you filled out (or the one you’re staring at). In 30 minutes we’ll tell you honestly which questions you would fail today, what a full Sprint would cover, and whether it’s worth doing before your next renewal date.

No slide deck. No sales pitch. If it’s not a fit we’ll tell you.

Book your Insurability Check

Or email us at info@sungatetech.com, a real person replies.

07 — Questions People Ask

Frequently Asked Questions

How much does the Sprint cost?
A fixed fee, scoped by the size of your user base. We share the number on the discovery call once we know your headcount, because pricing a 15-person firm the same as a 75-person firm would be dishonest either way.
Do you replace our current IT provider?
Not automatically. The Sprint runs alongside your current provider. Many clients keep the existing provider and add us for security only; others discover through the Sprint that the incumbent is the reason they're uninsurable and choose to move. Either path is fine.
What access do you need to our systems?
Read-only, least-privilege access to Microsoft Graph and admin surfaces for the assessment phase. For remediation, time-boxed elevated access that we return the moment the work is done. Never standing Global Admin.
What if our insurance carrier has a specific questionnaire?
Bring it. The Evidence Matrix maps directly to your carrier's questions. If you don't have one yet, we know the common Canadian carrier questionnaires (Chubb, Beazley, Coalition, CFC, Intact, and others) and can prepare against them.
Can you guarantee we'll get coverage?
No. Nobody can, that decision is the underwriter's. What we can guarantee is that you'll answer the application truthfully, with the evidence to back it up, and that the controls the underwriter cares about are actually in place. That is what moves a decline to an offer.
What if we don't need cyber insurance?
The Sprint is still useful, most of what insurers require is what a well-run firm should have anyway. But if insurance isn't on your radar, you're probably a better fit for our Managed Workplace service. Book a call and we'll route you correctly.
Is Sun Gate certified in Microsoft security?
Yes, founder holds current Microsoft Security certifications (SC-200, SC-300, MS-102) with SC-100 in progress. Certifications on the About page.