Amelia Risk vs At-Bay Cyber Insurance

Amelia Risk arranges cyber liability coverage for its clients, describing and structuring the policy around network security and privacy liability rather than underwriting it directly. ⁴Company-reported. Amelia's own cyber liability product page as of 23 September 2026. Does not establish who issues a particular client's policy.

At-Bay places cyber insurance through its disclosed producer, At-Bay Insurance Services LLC, which is licensed as an insurance producer in all 50 states. At-Bay says eligible new excess-and-surplus (E&S) cyber business has been written on its own carrier paper, At-Bay Specialty Insurance Company, since August 2023. ^12,13Company-reported. Producer role from the current license page; carrier role from a 2023 transition announcement, not confirmed for every current cyber quote.

The reviewed pages do not name an insurer for cyber placements; Amelia's marketing describes access to underwriters, wholesale brokers and carrier partners generally, without attributing any of them to cyber liability specifically. ⁴Not publicly disclosed. Cyber product page and specialty pages, checked 23 September 2026.

The current cyber product page does not name an issuing insurer. At-Bay's 2023 announcement says new E&S cyber business is quoted on At-Bay Specialty Insurance Company paper, but that is a historical statement, not a per-quote disclosure. ^11,13Company-reported. Cyber product page checked today names no insurer; the carrier-transition release is dated August 2023 and does not cover every current state or account.

Amelia Risk lists cyber liability among the policies it places for startups, technology companies, CPG (better-for-you food, beverage and cosmetic) brands, and consumer-product companies. ^5,6,7,8Company-reported. Specialty pages' "policies to consider" lists, marketed segments rather than an underwriting appetite statement.

Amelia Risk recommends buying cyber coverage early in a company's life, pointing to rising ransomware attacks against small businesses as the reason. ⁴Company-reported. Cyber product page timing guidance; a general recommendation, not a stated minimum revenue or headcount threshold.

Not described in the reviewed sources.

Amelia describes its cyber liability placements as combining network security and privacy liability (protecting a client's networks against unauthorized access and protecting personal, health or other sensitive data) with first-party coverage for losses the business incurs and third-party coverage for claims alleging the business is at fault. ⁴Company-reported. Cyber product page description; the actual policy wording and sublimits depend on the issuing insurer and the client's declarations.

Amelia describes cyber-crime and social engineering coverage as a traditional add-on to the base cyber policy rather than something included by default. ⁴Company-reported. Cyber product page description as of 23 September 2026.

At-Bay lists direct and contingent business interruption and system failure coverage, social engineering and invoice manipulation coverage for all classes of business, full limits for cryptojacking and bricking, broad cyber extortion coverage including cryptocurrency payment, and reputational-harm coverage for PR costs from adverse publicity. ¹¹Company-reported. Product-page coverage highlights; the issued policy and endorsements control actual terms.

At-Bay sells cyber insurance with optional InsurSec security tiers: Core includes vulnerability monitoring and a fraud-defense sub-limit; Advanced adds a reduced ransomware retention and a zero-hour ransomware waiting period; Complete adds a $0 financial-fraud retention and a $1 million financial-fraud sub-limit. Each higher tier requires a separately purchased managed detection and response (MDR) subscription. ¹¹Company-reported. Product-page InsurSec package descriptions and footnotes; availability depends on the business's risk profile and qualifying conditions.

Not described in the reviewed sources.

At-Bay says it writes primary and excess cyber insurance for businesses with revenue up to $5 billion and limits up to $10 million. Through its Broker Platform, brokers can get automated quotes only for businesses up to $100 million in revenue and $3 million in limits. ¹¹Company-reported. Published appetite ceilings, not guaranteed offers; underwriting and the appetite guide control individual accounts.

The reviewed cyber page does not describe security-monitoring, incident-response, or other risk-control services for cyber policyholders beyond the coverage description itself. ⁴Not found in reviewed sources. Cyber product page as read on 23 September 2026; does not establish that no such services exist, only that this page doesn't describe them.

Every At-Bay cyber policy includes access to At-Bay Stance, a security platform with vulnerability monitoring, vCISO advisory and tabletop exercises, and security awareness training. Managed detection and response (MDR) for endpoints or email costs extra, $16 or $25 per user per month respectively, and is sold separately by At-Bay Security, LLC. ¹¹Company-reported. Product-page InsurSec and footnote descriptions; MDR pricing is described as estimated and subject to change.

Not described in the reviewed sources.

You apply for At-Bay cyber coverage by emailing a submission to underwriting@at-bay.com or by requesting an automated quote through At-Bay's Broker Platform. ¹¹Company-reported. Product-page submission instructions; the Broker Platform route is limited to accounts within its lower appetite ceilings.

The reviewed cyber page does not describe a breach-response process or claims-handling steps specific to cyber incidents. ⁴Not found in reviewed sources. Cyber product page as read on 23 September 2026; Amelia's general claims-advocacy description on other pages is not cyber-specific.

At-Bay describes an in-house claims team and a named breach-coach phone line for active ransomware or system-interruption incidents, alongside a published cyber incident roadmap that assembles response partners after a claim is reported. ¹⁴Company-reported. Claims-handling page process description; does not establish claim outcomes or payment speed.