Skip to content

EBITDA-at-Risk Calculator

What is your cyber exposure, in EBITDA dollars?

A personalized, FAIR-inspired estimate of cyber-driven EBITDA impact. Fill in six inputs. Get an illustrative P10/base/P90 exposure band, a 4-tier readiness rating, and a bridge breakdown, in under two minutes.

Design partnerIllustrative, not actuarial

Decision-support boundary

These estimates are decision-support inputs, not insurance quotes or actuarial reports.

All outputs are illustrative, generated from sector-average baselines and your self-reported inputs. They carry visible method, source, and confidence band. Before using any figure in a transaction, board filing, or insurance procurement, have it reviewed by qualified risk practitioners.

Step 1 of 1 · six inputs, live output

Enter your parameters. Results update as you type.

Every field maps to a transparent model assumption. The “How this is calculated” disclosure shows every factor before you request a board-ready estimate.

Approximate is fine. Round to nearest $50M for early-stage estimates.

EBITDA margin sets the pool that cyber risk draws against.

Sector sets base loss-frequency and severity baselines from Verizon DBIR and IBM Cost of a Data Breach (2025).

Self-reported incident history lifts expected frequency.

Longer holds compound expected loss exposure over multiple event windows.

Maturity reduces expected frequency and severity, scaled from NIST CSF baselines.

Results appear as you fill in each field

No sign-in required for the illustrative estimate.

Output will appear here

As you fill in the form, you will see a readiness gauge, an EBITDA bridge breakdown, model assumptions, and a confidence band, all before any commitment is requested.

EBITDA sensitivity product surface
EBITDA sensitivityIllustrative sensitivity surface showing how control gaps compound across scenarios and hold periods.

Next step

Ready to see how remediation ranks against your exposure?

The board-ready estimate maps your specific controls, evidence sources, and hold-period to ranked remediation paths. Decision-support output, not a sales pitch.

Get your board-ready estimateReview the methodology

Estimates are illustrative decision-support outputs. Not actuarial. Not a warranty. Source citations in the assumption disclosure above.