Amelia Risk vs Gallagher Cyber Insurance

Amelia Risk arranges cyber liability coverage for its clients, describing and structuring the policy around network security and privacy liability rather than underwriting it directly. ⁴Company-reported. Amelia's own cyber liability product page as of 23 September 2026. Does not establish who issues a particular client's policy.

Gallagher Small Business arranges cyber liability coverage with outside carriers for small businesses; Gallagher's group-level practice separately places cyber coverage with its own risk-consulting services for larger accounts. Gallagher does not underwrite either policy. ^14,15Company-reported. Small-business cyber product page and the group-level cyber liability page.

The reviewed pages do not name an insurer for cyber placements; Amelia's marketing describes access to underwriters, wholesale brokers and carrier partners generally, without attributing any of them to cyber liability specifically. ⁴Not publicly disclosed. Cyber product page and specialty pages, checked 23 September 2026.

Neither the small-business cyber page nor the group-level cyber liability page names the insurer that would issue a given client's policy. ^14,15Not publicly disclosed. Checked both pages on 2026-09-23.

Amelia Risk lists cyber liability among the policies it places for startups, technology companies, CPG (better-for-you food, beverage and cosmetic) brands, and consumer-product companies. ^5,6,7,8Company-reported. Specialty pages' "policies to consider" lists, marketed segments rather than an underwriting appetite statement.

Amelia Risk recommends buying cyber coverage early in a company's life, pointing to rising ransomware attacks against small businesses as the reason. ⁴Company-reported. Cyber product page timing guidance; a general recommendation, not a stated minimum revenue or headcount threshold.

Gallagher recommends this coverage for small businesses that handle customer data or accept credit card or electronic-funds-transfer payments, and specifically names retail, healthcare, financial services and home-repair businesses as frequent attack targets. ¹⁴Company-reported. Small-business cyber product page "Who needs Cyber Liability Insurance" section; actual acceptance depends on underwriting.

Amelia describes its cyber liability placements as combining network security and privacy liability (protecting a client's networks against unauthorized access and protecting personal, health or other sensitive data) with first-party coverage for losses the business incurs and third-party coverage for claims alleging the business is at fault. ⁴Company-reported. Cyber product page description; the actual policy wording and sublimits depend on the issuing insurer and the client's declarations.

Amelia describes cyber-crime and social engineering coverage as a traditional add-on to the base cyber policy rather than something included by default. ⁴Company-reported. Cyber product page description as of 23 September 2026.

Gallagher describes two components of cyber coverage: first-party coverage for when a business's own technology or data is breached, and third-party coverage for when a customer sues the business for failing to prevent a breach. It says the policy can cover customer notification, credit monitoring, legal fees and regulatory fines. ¹⁴Company-reported. Small-business cyber product page; a coverage description, not a specific policy's insuring agreement or exclusions.

Gallagher's small-business team says cyber insurance rates are flat to down due to competitive market forces despite high-profile losses, and flags generative-AI-driven risks such as more convincing phishing, social-engineering and deepfake attacks as an emerging concern. ¹⁴Company-reported. Small-business cyber product page market-commentary section; a general market view, not a quote for any specific business.

Not described in the reviewed sources.

Neither page publishes specific cyber coverage limits, retentions or premium ranges; the small-business page's $60 million claim example is an illustrative scenario, not a stated policy limit. ^14,15Not publicly disclosed. Checked both pages on 2026-09-23.

The reviewed cyber page does not describe security-monitoring, incident-response, or other risk-control services for cyber policyholders beyond the coverage description itself. ⁴Not found in reviewed sources. Cyber product page as read on 23 September 2026; does not establish that no such services exist, only that this page doesn't describe them.

For larger accounts, Gallagher's group-level cyber practice gives clients access to the Gallagher eRiskHub risk-management portal and a dedicated claims team that includes cyber forensic accountants; the small-business product page does not describe an equivalent service for that segment. ¹⁵Company-reported. Group-level cyber liability page; not confirmed as included with the small-business product.

The reviewed cyber page does not describe a breach-response process or claims-handling steps specific to cyber incidents. ⁴Not found in reviewed sources. Cyber product page as read on 23 September 2026; Amelia's general claims-advocacy description on other pages is not cyber-specific.

Not described in the reviewed sources.