Aon vs At-Bay: How Do They Compare for Cyber Insurance?

Aon describes cyber insurance brokerage and risk-advisory services. It is not identified as the risk-bearing insurer, and the global page does not name the carrier for a particular placement. ³Company-reported. Aon’s official global product/capability page. The statement is limited to Aon’s marketing of brokerage or advisory services, not policy issuance.

At-Bay places cyber insurance through its disclosed producer, At-Bay Insurance Services LLC, which is licensed as an insurance producer in all 50 states. At-Bay says eligible new excess-and-surplus (E&S) cyber business has been written on its own carrier paper, At-Bay Specialty Insurance Company, since August 2023. ^7,8Company-reported. Producer role from the current license page; carrier role from a 2023 transition announcement, not confirmed for every current cyber quote.

The reviewed page does not identify the insurer or the legal producing entity for a specific placement. Ask Aon to identify both for the quoted risk. ³Not found in reviewed sources. Aon’s global product/capability page reviewed 2026-09-30; no buyer quote, binder or policy was reviewed. This does not establish that no insurer or producing entity is available.

The current cyber product page does not name an issuing insurer. At-Bay's 2023 announcement says new E&S cyber business is quoted on At-Bay Specialty Insurance Company paper, but that is a historical statement, not a per-quote disclosure. ^6,8Company-reported. Cyber product page checked today names no insurer; the carrier-transition release is dated August 2023 and does not cover every current state or account.

Aon describes cyber services for organizations managing cyber risk. Its global practice page does not publish a complete industry, revenue, security-control or state-by-state eligibility schedule. ³Company-reported. Audience stated by Aon on its global capability page; this does not establish a specific applicant’s eligibility or placement availability by U.S. state.

Confirm in your quote.

Aon describes cyber insurance as one part of cyber risk financing and says it reviews policy offerings because terms and conditions vary. For professional-services firms, it discusses coordinating cyber and professional-liability coverage. This is brokerage guidance and does not establish the terms of any cyber policy. ³Company-reported. Aon’s broker-authored explanation of the insurance line. It does not establish an individual insured’s policy entitlement; the insurer’s form, endorsements and declarations control.

At-Bay lists direct and contingent business interruption and system failure coverage, social engineering and invoice manipulation coverage for all classes of business, full limits for cryptojacking and bricking, broad cyber extortion coverage including cryptocurrency payment, and reputational-harm coverage for PR costs from adverse publicity. ⁶Company-reported. Product-page coverage highlights; the issued policy and endorsements control actual terms.

At-Bay sells cyber insurance with optional InsurSec security tiers: Core includes vulnerability monitoring and a fraud-defense sub-limit; Advanced adds a reduced ransomware retention and a zero-hour ransomware waiting period; Complete adds a $0 financial-fraud retention and a $1 million financial-fraud sub-limit. Each higher tier requires a separately purchased managed detection and response (MDR) subscription. ⁶Company-reported. Product-page InsurSec package descriptions and footnotes; availability depends on the business's risk profile and qualifying conditions.

The reviewed page does not state a standard buyer-specific limit, retention or deductible for this placement. Confirm amounts, sublimits and conditions in the quote and issued policy. ³Not publicly disclosed. Aon’s global product/capability page reviewed 2026-09-30; no buyer quote or policy form was reviewed.

At-Bay says it writes primary and excess cyber insurance for businesses with revenue up to $5 billion and limits up to $10 million. Through its Broker Platform, brokers can get automated quotes only for businesses up to $100 million in revenue and $3 million in limits. ⁶Company-reported. Published appetite ceilings, not guaranteed offers; underwriting and the appetite guide control individual accounts.

Aon describes cyber claims advocacy and preparation and relationships with third-party incident-response providers. The retained official source notes that provider contracts are separate, no performance guarantee is made, and referral remuneration may occur; confirm the providers, scope and compensation applicable to a client. ³Company-reported. Company-reported brokerage and advisory services. Account-specific service terms are not stated.

Every At-Bay cyber policy includes access to At-Bay Stance, a security platform with vulnerability monitoring, vCISO advisory and tabletop exercises, and security awareness training. Managed detection and response (MDR) for endpoints or email costs extra, $16 or $25 per user per month respectively, and is sold separately by At-Bay Security, LLC. ⁶Company-reported. Product-page InsurSec and footnote descriptions; MDR pricing is described as estimated and subject to change.

Confirm in your quote.

You apply for At-Bay cyber coverage by emailing a submission to underwriting@at-bay.com or by requesting an automated quote through At-Bay's Broker Platform. ⁶Company-reported. Product-page submission instructions; the Broker Platform route is limited to accounts within its lower appetite ceilings.

Confirm in your quote.

At-Bay describes an in-house claims team and a named breach-coach phone line for active ransomware or system-interruption incidents, alongside a published cyber incident roadmap that assembles response partners after a claim is reported. ⁹Company-reported. Claims-handling page process description; does not establish claim outcomes or payment speed.