ORPHEUS SCORING MODEL:
FROM DATA TO VALIDATION

Gallagher Re independently validated our model in a study of 47,000+ organisations. Their findings showed:
- If Orpheus scores a company as high risk, they are 3.2× more likely to make an insurance claim for a ransomware attack.
- A high risk score from Orpheus means a company is 2.3× more likely to suffer any other type of cyber attack.
- Orpheus’s predictive power remains consistent across organisations of different sizes.
This robust correlation confirms the real-world value our cyber risk scores deliver to insurers, regulators, and organisations seeking clarity about their threat landscape and that of their third-party ecosystem.
To calculate our Cyber Risk Scores, we start by analysing an organisation’s domain and collecting thousands of connected data points across its digital footprint. Our machine learning models process and assess this intelligence to produce a tailored Orpheus Cyber Risk Rating for each monitored entity. Our scores are uniquely calculated from a Vulnerability (or ‘Attack Surface’) perspective and then combined with a Threat score, allowing any organisation’s cyber risk level to be truly quantified.

FROM DATA TO DECISIONS:
OUR SCORING WORKFLOW
Gallagher Re independently verified our model in a study of 47,000+ organisations and 1,000+ cyber claims. Their findings showed that entities in Orpheus’ highest risk quintile were 3.2x more likely to suffer a ransomware incident than those in the lowest risk category.
This robust correlation conforms the predictive power of our threat-led approach and reinforces the real-world value our scores deliver for insurers, regulators, and organisations seeking clarity in a complex threat landscape.


Trusted by major organisations worldwide

































