Optional. Upload a company's annual report (or similar) and Xylo will read it and fill in the fields below — company name, sector, revenue, size and more. You can review and edit everything before continuing.
Drop an annual report here, or click to browse
Accepts PDF, DOCX or TXT — nothing is stored
📑Remove
Step 02
Insurance Structure
Select policies in place. No insurer names or pricing required.
Policies Held
🛡️
Cyber Liability
Toggle
⚡
Business Interruption
Toggle
🏢
Property
Toggle
👔
D&O Liability
Toggle
📋
Professional Indemnity
Toggle
🌐
General Liability
Toggle
AI Deployment Posture
Most policies never mention AI, yet their general wording would still capture an AI-driven loss. These answers determine where that exposure sits today and whether you could prove what caused it.
Step 03
Select Scenario
Choose a catastrophic but plausible failure scenario.
Dependency Failure
🔗 Supplier Platform CompromiseSPOF
Tier-1 supplier breached via phishing. Malware propagates through trusted APIs. No direct attack on your network.
Duration: 14–30 days
☁️ Major Cloud OutageSPOF
Major cloud provider suffers extended multi-region outage. All dependent services unavailable.
Duration: 3–10 days
🔒 Ransomware at Logistics ProviderSPOF
Ransomware encrypts critical logistics partner. Supply chain freezes for weeks.
Duration: 14–42 days
💻 SaaS Dependency FailureSPOF
Critical SaaS platform suffers catastrophic failure. Data export delayed or incomplete.
Duration: 7–21 days
💳 Payment Processor FailureSPOF
Payment processor breached or shut down. Cannot process payments or collect from customers.
Duration: 5–14 days
AI Agent Exposure
🧠 Upstream Model FailureSPOF
A defect or outage at a foundation model provider propagates to every agent built on its API. Your systems are untouched — the fault is entirely upstream.
Duration: 2–14 days
🧩 Agent Platform CompromiseSPOF
A vulnerability in a shared agent platform exfiltrates data through the agent's own trusted permissions. Every customer of that platform is hit at once.
Duration: 7–30 days
🦠 Self-Propagating InjectionCorrelation
A contagious prompt injection spreads across agent populations. Agents ingest poisoned content, act on it, and pass the payload onward.
Duration: 5–21 days
⚖️ Liability Doctrine ShiftCorrelation
One ruling or regulatory action expands deployer liability retrospectively. Exposure rises across deployments already in the field.
Duration: 90–540 days
🌀 Emergent Multi-Agent FailureSystemic
Agents interacting across organisations produce feedback loops nobody engineered. The mechanism is the interaction, not any single defect.
Duration: 1–10 days
🕒 Model DeprecationSPOF
A relied-upon model is withdrawn. Every workflow tuned against it must be revalidated on a successor that fails differently.
Duration: 30–120 days
Step 04
Upload Insurance Document
Upload your policy, certificate, or schedule. Xylo extracts the structure automatically.
📄
Drop your insurance document here, or click to browse
Accepts PDF, DOCX, or TXT — no insurer names or pricing stored
📄Remove
— or continue without a document —
Without a document, Xylo uses the insurance parameters from Step 2.
Analysing Exposure
Running your insurance structure against the selected scenario.