EBITDA-at-Risk Calculator

What is your cyber exposure — in EBITDA dollars?

A personalized, FAIR-inspired estimate of cyber-driven EBITDA impact. Fill in six inputs. Get an illustrative P10/base/P90 exposure band, a 4-tier readiness rating, and a bridge breakdown — in under two minutes.

Design partnerIllustrative — not actuarial

Decision-support boundary

These estimates are decision-support inputs, not insurance quotes or actuarial reports.

All outputs are illustrative, generated from sector-average baselines and your self-reported inputs. They carry visible method, source, and confidence band. Before using any figure in a transaction, board filing, or insurance procurement, have it reviewed by qualified risk practitioners.

Step 1 of 1 — six inputs, live output

Enter your parameters. Results update as you type.

Every field maps to a transparent model assumption. The “How this is calculated” disclosure shows every factor before you request a board-ready estimate.

Approximate is fine. Round to nearest $50M for early-stage estimates.

EBITDA margin sets the pool that cyber risk draws against.

Sector sets base loss-frequency and severity baselines from IBM DBIR 2023.

Self-reported incident history lifts expected frequency.

Longer holds compound expected loss exposure over multiple event windows.

Maturity reduces expected frequency and severity — scaled from NIST CSF baselines.

Results appear as you fill in each field

No sign-in required for the illustrative estimate.

Output will appear here

As you fill in the form, you will see a readiness gauge, an EBITDA bridge breakdown, model assumptions, and a confidence band — all before any commitment is requested.

EBITDA sensitivityIllustrative sensitivity surface — how control gaps compound across scenarios and hold periods.

Next step

Ready to see how remediation ranks against your exposure?

The board-ready estimate maps your specific controls, evidence sources, and hold-period to ranked remediation paths. Decision-support output, not a sales pitch.

Estimates are illustrative decision-support outputs. Not actuarial. Not a warranty. Source citations in the assumption disclosure above.