Free calculator · What I would lose
What a cyber attack would cost your business
Seven short steps about your business. We show what each incident would cost, where every number comes from and what brings it down. No sign-up: the calculation runs in your browser and your answers never leave your device.
- Data from 19 sources: Sophos, Verizon, the FBI, NetDiligence and more.
- 250 countries, each with its data protection law.
- Every version is tested on 10,000 simulated businesses before it goes live: same answers, same result.
How we calculate
For each type of attack (for example, ransomware or a data leak) we answer two questions: how much it would cost you if it happens, and how likely it is to happen in a year. We use Open FAIR, a public method for measuring risk in money.
An attack never costs the same twice. So, with your business data, we simulate 10,000 attacks of each type and note what each one cost. Then we line them up from cheapest to most expensive:
- Typical: the one right in the middle of the line. Half of the attacks cost less and half cost more.
- Bad case: an expensive attack, but a possible one. Only 1 in 10 costs more than that.
We do not use artificial intelligence. It is a fixed calculation: enter the same data and you get the same result.
In the result, every part of the cost has a “Where does this come from?”. There you see whether the number comes from a published study, from our own calculation based on those studies, or from an assumption: no study publishes it, so we estimate it and mark it.
Sources
- Sophos, The State of Ransomware 2026
- NetDiligence, Cyber Claims Study 2025
- FBI Internet Crime Complaint Center, Internet Crime Report 2025 (2026)
- Cyentia Institute, Information Risk Insights Study (IRIS) 2025 (2026)
- Association of Certified Fraud Examiners, Occupational Fraud 2026: A Report to the Nations
- Verizon, Data Breach Investigations Report 2015
- Hiscox, Cyber Readiness Report 2026
- IBM / Ponemon Institute, Cost of a Data Breach Report 2026
- Aswath Damodaran, NYU Stern, Margins by Sector (US) (2026)
- World Bank, World Development Indicators: PPP conversion factor (PA.NUS.PPP) and official exchange rate (PA.NUS.FCRF) (2025)
- U.S. Bureau of Labor Statistics, CPI-U, all items (CUUR0000SA0) (2026)
- Microsoft (Meyer et al., arXiv 2305.00945), How effective is multifactor authentication at deterring cyberattacks? (2023)
- UK Home Office, Crime against businesses: findings from the 2023 Commercial Victimisation Survey
- UK Home Office, Crime against businesses: wholesale and retail factsheet, 2014 Commercial Victimisation Survey
- National Retail Federation, National Retail Security Survey 2023
- Ponemon Institute (patrocinado por Intel), The Billion Dollar Lost Laptop Problem (2010)
- Sucuri, Hacked Website Report 2017 y 2018
- Akhawe y Felt, USENIX Security, Alice in Warningland: A Large-Scale Field Study of Browser Security Warning Effectiveness (2013)
- Marsh McLennan Cyber Risk Analytics Center, Using data to prioritize cybersecurity investments (2023)