One route is that insurers require due diligence from their clients & employ pen-testers, perhaps adjusting your rate based on the findings of the pen-testers...

Actually, this could be a viable business model for the white hats of the world.