Understanding the Cork Claims Process
Last updated: October 5, 2026
In event that you must submit a claim for a client that has Financial Protection, the Cork Cyber team will walk you through the entire process. This document serves to set the expectation regarding what the steps are and what to consider when submitting a claim.
Submit as soon as something looks off, respond promptly to Cork's follow-up questions, upload documentation and invoices to the Claims tab as they become available, and keep a log of billable hours for the incident.
Submit the claim: Submit a claim in Cork Vantage as soon as you suspect an incident, even before you know the full financial impact. There's no penalty for a claim that ends up going nowhere, so submit early rather than waiting.
Cork makes contact: A member of the Cork team contacts you directly (they do not contact your client), usually the same day, to understand what happened at a high level: what was affected, when it happened, and whether it's contained. If you need help covering urgent costs like forensics, Cork can issue a virtual credit card in different amounts depending on the financial protection tier. This can be requested from the Claims page.
Refer to 📄 Fundamentals for each Cork Protect plan's coverage limit.
Share initial details: Provide a few basics, including the endpoint or inbox involved, whether cyber insurance is in play, and whether a police or cybercrime (IC3 or CAFC/NC3) report was filed. If immediate funds are needed, this is also where Cork confirms the virtual card.
Upload evidence and invoices: All supporting documentation, SOC/EDR tickets, incident reports, invoices, goes directly into the Claims tab in Cork Vantage. This is the single place for everything, which means there is no need to email attachments back and forth.
Cork reviews the claim: Cork Cyber's team analyzes the evidence and invoice against the warranty agreement to determine what's covered, what needs more information, and what falls outside coverage.
Cork shares the decision: You'll receive a summary, including total amount covered, anything that needs review or was denied and why, and what happens next.
Payment is issued: Once approved, Cork schedules payment*.
Claim is closed: Check status and history on any claim anytime from the Claims tab, no need to ask Cork for an update.
*Payment is less any charges against the virtual credit card (i.e., If you claim $10K but but charge $2,500 to a virtual credit card, the payout would be $7,500)