Obsidian RidgeReal estate · title · escrow
Title companies, escrow firms, and brokerages move large sums on tight timelines, which makes them the favorite target for business email compromise. The attacker rarely breaks anything — they sit in a mailbox, wait for a closing, and change the wire instructions.
The exposure
Business-email-compromise wire diversion is the most common and most expensive claim in this vertical. Carriers know it, which is why the funds-transfer controls — out-of-band verification on every payment and bank-detail change, with no dollar floor, plus dual authorization — are the make-or-break answers on the application.
The program
The managed security program — Huntress SOC-monitored detection, identity protection, and security awareness training, operated end-to-end — tuned to real estate, title & escrow.
Managed ITDR on Microsoft 365 / Google Workspace catches the stolen session tokens and the inbox rules that quietly reroute wire and closing emails — the exact mechanics of a BEC wire diversion. On Microsoft 365 it also catches the adversary-in-the-middle kits that bypass MFA in the first place.
We help you implement and document call-back verification on every payment and bank-detail change, and dual authorization above threshold — the controls carriers like Corvus and Beazley require with no dollar floor.
Security awareness training tuned to the people who actually move money — payment-redirect and closing-impersonation drills, not generic annual videos.
Managed detection and response on every endpoint, and if a wire is in motion when something is detected, we pick it up within one business day and coordinate the freeze request, the bank, and the carrier notification — not a ticket queue.
Fit
Further reading
CISSP-led guides on the threats, compliance, and controls that apply to real estate, title & escrow — the detail behind the program above.
Closing-wire fraud is the costliest cyberattack in real estate, and most title and settlement firms miss that the FTC Safeguards Rule already covers them.
Read the guideFAQ
Title and settlement firms are treated as 'financial institutions' under the FTC Safeguards Rule, so a written information security program, MFA, and encryption are required. Brokerages that handle closing funds carry the same wire-fraud exposure even where the rule's scope is narrower.
Business email compromise that redirects a closing wire. An attacker sits in a mailbox, waits for a closing, and changes the wire instructions — the most common and most expensive claim in the industry. Out-of-band verification of payment and bank-detail changes helps detect fraudulent instructions.
Managed coverage starts at $25 per person per month (Ridge Core, no minimum), which watches every computer and every email login.
Ridge Plus adds staff training, email protection and a secure browser; Ridge Reserve adds the incident response plan, access reviews and patch reporting.
All three are priced per person, and log collection is Ridge Log, an add-on on any tier. The one-time Cyber Insurance Readiness Sprint is a fixed fee from $1,500 (three tiers up to $3,500).
The Cyber Insurance Readiness Sprint runs seven business days from kickoff to a signed evidence pack mapped to your carrier's questionnaire. We agree the managed-monitoring deployment schedule after reviewing your environment.
Start with the questionnaire
The free 2026 Cyber Insurance Readiness Questionnaire scores you against the controls carriers actually ask about. Then the Readiness Sprint turns your environment into the evidence they accept.
Read the industry guide, compare the service scope and start with your carrier's actual questions.