AIG vs Gallagher: How Do They Compare for Cyber Insurance?

AIG markets three distinct cyber forms: CyberEdge, CyberEdge Plus and CyberEdge PC. AIG says coverage may be bought as a standalone CyberEdge policy or endorsed onto selected Financial Lines, Property and Casualty policies; the forms are not interchangeable descriptions of one coverage grant. ³Company-reported. AIG’s U.S. CyberEdge page; endorsement availability is stated only for selected policies. AIG’s legal footer says policies are written by subsidiaries or affiliates and coverage depends on underwriting and policy language.

Gallagher Small Business arranges cyber liability coverage with outside carriers for small businesses; Gallagher's group-level practice separately places cyber coverage with its own risk-consulting services for larger accounts. Gallagher does not underwrite either policy. ^9,10Company-reported. Small-business cyber product page and the group-level cyber liability page.

Confirm in your quote.

Neither the small-business cyber page nor the group-level cyber liability page names the insurer that would issue a given client's policy. ^9,10Not publicly disclosed. Checked both pages on 2026-09-23.

AIG describes cyber coverage and risk services for organizations and clients. The reviewed product page does not publish a complete eligible-industry, revenue or security-control appetite; a particular applicant’s eligibility remains subject to underwriting. ³Company-reported. Audience stated by AIG on its U.S. CyberEdge marketing page; no application eligibility schedule was reviewed.

Gallagher recommends this coverage for small businesses that handle customer data or accept credit card or electronic-funds-transfer payments, and specifically names retail, healthcare, financial services and home-repair businesses as frequent attack targets. ⁹Company-reported. Small-business cyber product page "Who needs Cyber Liability Insurance" section; actual acceptance depends on underwriting.

AIG describes CyberEdge as addressing breach-related financial costs such as response, data restoration, network interruption and cyber extortion. CyberEdge Plus is described for physical-world losses caused by a cyber event, including business interruption, property damage and physical injury; CyberEdge PC is described as excess of traditional property and casualty policies on a difference-in-conditions/difference-in-limits basis. The page says actual coverage depends on the facts and policy terms, conditions and exclusions. ³Company-reported. Product summaries on AIG’s U.S. page, preserving differences among the three forms. Examples are not a promise that any loss or expense is covered under an issued policy.

Gallagher describes two components of cyber coverage: first-party coverage for when a business's own technology or data is breached, and third-party coverage for when a customer sues the business for failing to prevent a breach. It says the policy can cover customer notification, credit monitoring, legal fees and regulatory fines. ⁹Company-reported. Small-business cyber product page; a coverage description, not a specific policy's insuring agreement or exclusions.

Gallagher's small-business team says cyber insurance rates are flat to down due to competitive market forces despite high-profile losses, and flags generative-AI-driven risks such as more convincing phishing, social-engineering and deepfake attacks as an emerging concern. ⁹Company-reported. Small-business cyber product page market-commentary section; a general market view, not a quote for any specific business.

The reviewed page does not state standard cyber limits, retentions or sublimits. Confirm each amount and applicable form in the quote and issued policy. ³Not publicly disclosed. AIG’s U.S. CyberEdge marketing page reviewed 2026-09-30; no buyer-specific quote, application outcome or policy wording was reviewed.

Neither page publishes specific cyber coverage limits, retentions or premium ranges; the small-business page's $60 million claim example is an illustrative scenario, not a stated policy limit. ^9,10Not publicly disclosed. Checked both pages on 2026-09-23.

AIG describes cyber risk assessment, threat intelligence, alerts about known vulnerabilities, and a Cyber Resiliency Program. The page says these services help clients assess and improve cyber resilience; it does not promise that they prevent a breach or are available on identical terms with every form. ³Company-reported. Company-described cyber risk services on AIG’s U.S. CyberEdge page; product and account applicability should be confirmed in the quote.

For larger accounts, Gallagher's group-level cyber practice gives clients access to the Gallagher eRiskHub risk-management portal and a dedicated claims team that includes cyber forensic accountants; the small-business product page does not describe an equivalent service for that segment. ¹⁰Company-reported. Group-level cyber liability page; not confirmed as included with the small-business product.

AIG links a U.S. Cyber underwriting application and invites brokers to contact its national product and distribution teams. The page does not say that submitting an application results in a quote, acceptance or binding. ³Company-reported. Application and broker contact links on AIG’s U.S. CyberEdge page; no completed application or binding workflow was reviewed.

Confirm in your quote.

AIG says its cyber insureds can use a 24/7 claims hotline and that its claims team works with specialized legal and forensic firms on incident response. AIG’s example also describes assistance with regulatory disclosures and notifications. These service statements do not guarantee claim acceptance, payment or a particular response time. ³Company-reported. Company-reported services and example on AIG’s CyberEdge page; policy terms and the circumstances of a loss control any claim.

Confirm in your quote.