AIG vs CFC: How Do They Compare for Cyber Insurance?

AIG markets three distinct cyber forms: CyberEdge, CyberEdge Plus and CyberEdge PC. AIG says coverage may be bought as a standalone CyberEdge policy or endorsed onto selected Financial Lines, Property and Casualty policies; the forms are not interchangeable descriptions of one coverage grant. ³Company-reported. AIG’s U.S. CyberEdge page; endorsement availability is stated only for selected policies. AIG’s legal footer says policies are written by subsidiaries or affiliates and coverage depends on underwriting and policy language.

CFC's flagship cyber product, Cyber Proactive Response, targets businesses with revenues from $0 to $250 million and pairs the policy with built-in security monitoring, incident response and claims handling rather than selling those as add-ons. ⁸Company-reported. Cyber insurance product page's Cyber Proactive Response summary; CFC separately sells Cyber (admitted), Corporate cyber for businesses at $250 million and up, and a Cyber excess policy.

Confirm in your quote.

The Cyber Proactive Response application form names only CFC Underwriting Limited, an entity authorized and regulated by the UK Financial Conduct Authority, as the party administering the form. Neither the cyber product page nor the application discloses which specific insurer or Lloyd's syndicate capacity sits behind a US Cyber Proactive Response policy. ^11,7Not publicly disclosed. Application footer and the regulatory information page, both checked on 2026-09-23; CFC also operates Lloyd's Syndicate 1988 and CFC USA Inc.'s admitted and E&S licenses, but no page ties one of these specifically to Cyber Proactive Response.

AIG describes cyber coverage and risk services for organizations and clients. The reviewed product page does not publish a complete eligible-industry, revenue or security-control appetite; a particular applicant’s eligibility remains subject to underwriting. ³Company-reported. Audience stated by AIG on its U.S. CyberEdge marketing page; no application eligibility schedule was reviewed.

CFC segments cyber eligibility by revenue: Cyber Proactive Response and Cyber (admitted) are positioned for businesses with revenues from $0 to $250 million, while Corporate cyber is for businesses at $250 million and above. ⁸Company-reported. Cyber product page product summaries; actual eligibility for a given applicant depends on underwriting.

AIG describes CyberEdge as addressing breach-related financial costs such as response, data restoration, network interruption and cyber extortion. CyberEdge Plus is described for physical-world losses caused by a cyber event, including business interruption, property damage and physical injury; CyberEdge PC is described as excess of traditional property and casualty policies on a difference-in-conditions/difference-in-limits basis. The page says actual coverage depends on the facts and policy terms, conditions and exclusions. ³Company-reported. Product summaries on AIG’s U.S. page, preserving differences among the three forms. Examples are not a promise that any loss or expense is covered under an issued policy.

Cyber Proactive Response includes crime cover, a 12-month indemnity period for business interruption, and data recreation cover, with unlimited claim reinstatements available at either no deductible or a single deductible at most. ⁸Company-reported. Cyber product page Key features list for Cyber Proactive Response.

The reviewed page does not state standard cyber limits, retentions or sublimits. Confirm each amount and applicable form in the quote and issued policy. ³Not publicly disclosed. AIG’s U.S. CyberEdge marketing page reviewed 2026-09-30; no buyer-specific quote, application outcome or policy wording was reviewed.

For larger businesses, CFC's Corporate cyber product (for revenues of $250 million or more) has a published maximum line size of $25 million; the Cyber Proactive Response and Cyber (admitted) pages for smaller businesses do not publish a maximum dollar limit. ⁸Company-reported. Cyber product page Corporate cyber Key features; limit for any individual policy appears on its declarations.

AIG describes cyber risk assessment, threat intelligence, alerts about known vulnerabilities, and a Cyber Resiliency Program. The page says these services help clients assess and improve cyber resilience; it does not promise that they prevent a breach or are available on identical terms with every form. ³Company-reported. Company-described cyber risk services on AIG’s U.S. CyberEdge page; product and account applicability should be confirmed in the quote.

Every CFC cyber policyholder gets CFC Response, described as an in-house incident-response service available 24/7, plus a free mobile app offering dark web monitoring, phishing simulations and external network deep scanning. ^9,10Company-reported. Response page and cyber brochure; CFC characterizes its incident response team as one of the largest in-house teams in the industry, a claim not independently verified here.

AIG links a U.S. Cyber underwriting application and invites brokers to contact its national product and distribution teams. The page does not say that submitting an application results in a quote, acceptance or binding. ³Company-reported. Application and broker contact links on AIG’s U.S. CyberEdge page; no completed application or binding workflow was reviewed.

The US Cyber Proactive Response application is a one-page form asking whether multi-factor authentication is enforced for remote network access and email, whether backups are offline or MFA-secured, and whether the business had a cyber incident in the last three years. ¹¹Company-reported. Cyber Proactive Response application form sections on cyber security controls and previous cyber incidents.

AIG says its cyber insureds can use a 24/7 claims hotline and that its claims team works with specialized legal and forensic firms on incident response. AIG’s example also describes assistance with regulatory disclosures and notifications. These service statements do not guarantee claim acceptance, payment or a particular response time. ³Company-reported. Company-reported services and example on AIG’s CyberEdge page; policy terms and the circumstances of a loss control any claim.

CFC says its in-house cyber claims team resolves several thousand cyber claims a year and reports a 99.4% cyber claims acceptance rate over a recent 12-month period. ¹⁰Company-reported. Cyber brochure claims statistics; these are company-reported figures and were not independently audited.