AIG vs CNA: How Do They Compare for Cyber Insurance?

AIG names three CyberEdge forms and differentiates breach-response costs, physical cyber losses and excess coverage. CNA describes a cyber insurance offering for businesses but provides a different level of line-item detail in the reviewed claims. 3,7

What Is AIG?

AIG is the marketing name for American International Group, Inc.; AIG says its insurance products are written or provided by subsidiaries or affiliates. Its U.S. business pages list commercial casualty, property, cyber, management and professional liability, and specialty programs, but a brand-level page does not identify the insurer for a particular policy. 1,2

Read the AIG profile

Read the AIG Cyber Insurance page

CNA Small Business Insurance: Products, Agents and Service

CNA directs small-business buyers to independent agents and describes CNA Connect as a businessowners policy for more than 600 small-business classes. Issuer and availability vary by policy and state, so confirm both in a quote. 4,5,6

Read the CNA profile

What Is Cyber Insurance?

Cyber insurance can help pay covered response costs and claims against your business after a cyber incident. If your business relies on data, software or outside providers, compare response limits, vendor outages and approval rules. 8,9

Read the full coverage guide

Key Differences in Cyber Insurance

Named forms and published coverage detail

AIG names three CyberEdge forms and differentiates breach-response costs, physical cyber losses and excess coverage. CNA describes a cyber insurance offering for businesses but provides a different level of line-item detail in the reviewed claims. Ask CNA for its current form and whether it addresses AIG's listed interruption, extortion and physical-loss scenarios. 3 7

Risk services and claim access

AIG describes threat intelligence and vulnerability alerts, plus a 24/7 claims hotline with legal and forensic partners. CNA describes cyber risk resources and an agent-led placement route. Ask CNA which services are included with the quoted policy and request its claim-reporting contact; ask AIG which services attach to the form under consideration. 3 3 7 7

What to Confirm in Cyber Insurance Quotes

  • For AIG, ask for the exact policy form, covered-event schedule and limits relevant to the differences above. 3
  • For CNA, ask which carrier, endorsements and application route apply to the quoted placement, and confirm the specific terms above. 7

Review Scores

These averages can combine ratings for different products, locations, and customer groups, including approximate BBB grade conversions. Read each review for the sources, scope, and calculation.

AIG

4.4/ 10

Review Score

2 rated sources

Customer ratings for AIG are low: Trustpilot shows 1.9 out of 5 from 252 reviews, and NerdWallet gives 2.5 stars and notes more claims complaints than expected. These pages cover many AIG products and countries, so they only loosely describe business insurance.[1][2]

Read AIG reviews

CNA

9.0/ 10

Review Score

1 rated source

Customer feedback on CNA is mixed and hard to compare. NerdWallet gave it 4.5 out of 5 for manufacturers, while Trustpilot shows about 1.4 out of 5 from 49 mostly self-selected reviews.[1][5]

Read CNA reviews

Offering Details

AIG vs CNA: Cyber Insurance: documented features by provider

CriteriaAIG CyberEdge, CyberEdge Plus and CyberEdge PCCNA Cyber Insurance
Role in This Line

AIG markets three distinct cyber forms: CyberEdge, CyberEdge Plus and CyberEdge PC. AIG says coverage may be bought as a standalone CyberEdge policy or endorsed onto selected Financial Lines, Property and Casualty policies; the forms are not interchangeable descriptions of one coverage grant. 3Company-reported. AIG’s U.S. CyberEdge page; endorsement availability is stated only for selected policies. AIG’s legal footer says policies are written by subsidiaries or affiliates and coverage depends on underwriting and policy language.

Confirm in your quote.

Who It’s For

AIG describes cyber coverage and risk services for organizations and clients. The reviewed product page does not publish a complete eligible-industry, revenue or security-control appetite; a particular applicant’s eligibility remains subject to underwriting. 3Company-reported. Audience stated by AIG on its U.S. CyberEdge marketing page; no application eligibility schedule was reviewed.

CNA offers EPS Plus for professional-services firms and Epack 3, an admitted modular policy designed for small and midsize businesses that combines cyber, media, technology and professional liability. 7Company-reported. Entity: CNA brand; issuing CNA subsidiary may vary by product/state Product: United States commercial insurance Jurisdiction: United States Research source scope: US specialty commercial liability Claim limitation: Company-reported; policy wording, underwriting and jurisdiction-specific availability control.

Coverage Features

AIG describes CyberEdge as addressing breach-related financial costs such as response, data restoration, network interruption and cyber extortion. CyberEdge Plus is described for physical-world losses caused by a cyber event, including business interruption, property damage and physical injury; CyberEdge PC is described as excess of traditional property and casualty policies on a difference-in-conditions/difference-in-limits basis. The page says actual coverage depends on the facts and policy terms, conditions and exclusions. 3Company-reported. Product summaries on AIG’s U.S. page, preserving differences among the three forms. Examples are not a promise that any loss or expense is covered under an issued policy.

Confirm in your quote.

Limits and Retentions

The reviewed page does not state standard cyber limits, retentions or sublimits. Confirm each amount and applicable form in the quote and issued policy. 3Not publicly disclosed. AIG’s U.S. CyberEdge marketing page reviewed 2026-09-30; no buyer-specific quote, application outcome or policy wording was reviewed.

Confirm in your quote.

Risk Services

AIG describes cyber risk assessment, threat intelligence, alerts about known vulnerabilities, and a Cyber Resiliency Program. The page says these services help clients assess and improve cyber resilience; it does not promise that they prevent a breach or are available on identical terms with every form. 3Company-reported. Company-described cyber risk services on AIG’s U.S. CyberEdge page; product and account applicability should be confirmed in the quote.

CNA CyberAssist gives policyholders cybersecurity specialists, tools and services to identify vulnerabilities, strengthen defenses and respond. 7Company-reported. Entity: CNA brand; issuing CNA subsidiary may vary by product/state Product: United States commercial insurance Jurisdiction: United States Research source scope: US specialty commercial liability Claim limitation: Company-reported; policy wording, underwriting and jurisdiction-specific availability control.

CNA identifies breach coaches, forensic firms and notification/call-center vendors for incident response. 7Company-reported. Entity: CNA brand; issuing CNA subsidiary may vary by product/state Product: United States commercial insurance Jurisdiction: United States Research source scope: US specialty commercial liability Claim limitation: Company-reported; policy wording, underwriting and jurisdiction-specific availability control.

How to Apply

AIG links a U.S. Cyber underwriting application and invites brokers to contact its national product and distribution teams. The page does not say that submitting an application results in a quote, acceptance or binding. 3Company-reported. Application and broker contact links on AIG’s U.S. CyberEdge page; no completed application or binding workflow was reviewed.

Confirm in your quote.

Claims Support

AIG says its cyber insureds can use a 24/7 claims hotline and that its claims team works with specialized legal and forensic firms on incident response. AIG’s example also describes assistance with regulatory disclosures and notifications. These service statements do not guarantee claim acceptance, payment or a particular response time. 3Company-reported. Company-reported services and example on AIG’s CyberEdge page; policy terms and the circumstances of a loss control any claim.

Confirm in your quote.

Full Comparison

More AIG vs CNA Comparisons

Other Cyber Insurance Comparisons

Sources

AIG

  1. Investor Relations. American International Group, Inc. (AIG); About AIG and legal footer; lines 244–246 and 327–331. Accessed 2026-09-28.
  2. Business. AIG US; Surplus Lines heading and paragraph, lines 357–359. Accessed 2026-09-28.
  3. Cyber Insurance — CyberEdge. AIG US; Cyber risk services and hotline, lines 253–284; coverage structure and separate CyberEdge, CyberEdge Plus, and CyberEdge PC descriptions, lines 353–374; AIG cyber claim expenses example, lines 343–352; application/contact materials, lines 358–409; policy-language caveat and legal footer, lines 449–485. Accessed 2026-09-30.

CNA

  1. Insurance for Small Businesses. CNA; Insurance for Small Businesses, lines 38-50 and 65-67 (CNA Central and agent route); lines 79-106 (product and stated appetite lists); page footer line 132 (CNA registered service mark). Accessed 2026-09-28.
  2. CNA Connect Small Businessowners Policy (BOP) | CNA Insurance. CNA; CNA Connect; coverages, product range, services. Accessed 2026-09-28.
  3. General Disclaimer. CNA; General Disclaimer paragraphs 1 and 5 (HTML lines 24 and 28): CNA describes Continental Casualty Company and its relevant affiliates; references to CNA may include one or more CCC affiliates; each particular policy/product/service is the responsibility only of the specific CNA company that issues or supplies it. Footer line 57 identifies CNA Financial Corporation as trademark registrant. Re-read 2026-09-29. Accessed 2026-09-29.
  4. Cyber Insurance - Cyber Risk Solutions | CNA Insurance. CNA; Cyber, Media, Technology & Professional Liability; product sections. Accessed 2026-09-28.

Cyber Insurance Guide

  1. Cyber Insurance. Federal Trade Commission; Opening; First-Party and Third-Party Coverage; First-Party Coverage; Third-Party Coverage; What Should Your Cyber Insurance Policy Cover. Accessed 2026-09-16.
  2. CyberEdge specimen policy. AIG; General Terms §§4–6, PDF pp.3–6; Security and Privacy §1 p.11, §2(l)/(p) p.14, §3 pp.15–18, exclusions p.18; Event Management §1 and §2(h), PDF pp.19–20. Accessed 2026-09-16.

Updated . Spot, a product of Tools for Enlightenment, publishes this research and works in the commercial insurance market. The comparison applies the same criteria to both providers. Editorial policy. To suggest a correction, contact Spot with the page URL and supporting source.

Get Help With Insurance Buying and Renewals.

Get help buying coverage and managing renewals, with less paperwork for your team. Start with a free consultation.

Talk to Spot