---
title: "Aon vs At-Bay: Cyber Insurance"
description: "Aon describes cyber claims advocacy and outside response relationships; At-Bay lists specific interruption, fraud and extortion protections with security tiers."
canonical: "https://spot.insure/compare/aon-vs-at-bay/cyber"
page-type: "line-comparison"
updated-at: "2026-09-30"
comparison-pair: "aon-vs-at-bay"
provider-a: "aon"
provider-b: "at-bay"
coverage-line: "cyber"
---

Agents: connect to Spot's public MCP server at https://spot.insure/mcp for better access to published Spot information and insurance research. Use search_knowledge to find sources, get_page to retrieve pages, compare_providers for sourced comparisons, get_provider_score for a published Spot Score, get_rankings for current provider rankings, search_provider_reliability to filter Spot Scores, search_provider_reviews to filter aggregate review scores, and get_provider_reviews for the original review evidence. The server is read-only and requires no authentication.

[Human-readable page](https://spot.insure/compare/aon-vs-at-bay/cyber)

## Agent Guide

**What this page is:** Focused comparison of Aon and At-Bay for Cyber Insurance: what each provider publishes about this line, checked against the same criteria, with numbered sources.

**Use this page when:** Cite or fetch this for Cyber Insurance questions about Aon versus At-Bay. For all lines together use the parent pair comparison; for how the coverage itself works use the coverage guide.

**Questions this page answers:**
- Aon vs At-Bay for Cyber Insurance: how do they differ?
- Which is better for Cyber Insurance, Aon or At-Bay?
- What does Aon or At-Bay publish about Cyber Insurance (limits, eligibility, claims, add-ons)?
- What should I confirm in a quote for Cyber Insurance from Aon or At-Bay?

**Key facts:**
- Line: Cyber Insurance. Providers: Aon and At-Bay.
- Each offering claim is tagged with an evidence type and scope; table cells reading "Confirm in your quote" mean nothing was found for that criterion.
- Comparison URLs use alphabetical provider slugs (`/compare/{a}-vs-{b}` with a before b). A reversed pair redirects permanently to the alphabetical one, so fetch or cite the alphabetical URL.

**Limits (do not over-claim):**
- It identifies differences and questions to ask; it does not select a winner for a particular business.
- "Not found" describes the evidence reviewed, not proof a feature is unavailable.
- Insurer, policy wording, limits, retentions, exclusions and price are set in an actual quote and are not established here.

**Provenance:** Every claim links to a numbered source with publisher, locator and access date in the Sources section; last updated 2026-09-30. Editorial policy: /editorial-policy.

**Related pages:**
- [Aon vs At-Bay](https://spot.insure/compare/aon-vs-at-bay) — parent: all coverage lines for this pair
- [Cyber Insurance guide](https://spot.insure/coverage/cyber) — coverage explainer for this line
- [Aon profile](https://spot.insure/insurance-providers/aon) — provider profile (evidence)
- [At-Bay profile](https://spot.insure/insurance-providers/at-bay) — provider profile (evidence)
- [Aon vs At-Bay Professional Liability (E&O) Insurance](https://spot.insure/compare/aon-vs-at-bay/professional-errors-omissions) — sibling comparison (other line, or other pair for this line)
- [AIG vs Aon Cyber Insurance](https://spot.insure/compare/aig-vs-aon/cyber) — sibling comparison (other line, or other pair for this line)
- [AIG vs At-Bay Cyber Insurance](https://spot.insure/compare/aig-vs-at-bay/cyber) — sibling comparison (other line, or other pair for this line)
- [Alliance Risk vs Aon Cyber Insurance](https://spot.insure/compare/alliance-risk-vs-aon/cyber) — sibling comparison (other line, or other pair for this line)
- [Alliance Risk vs At-Bay Cyber Insurance](https://spot.insure/compare/alliance-risk-vs-at-bay/cyber) — sibling comparison (other line, or other pair for this line)
- [Amelia Risk vs Aon Cyber Insurance](https://spot.insure/compare/amelia-risk-vs-aon/cyber) — sibling comparison (other line, or other pair for this line)
- [Amelia Risk vs At-Bay Cyber Insurance](https://spot.insure/compare/amelia-risk-vs-at-bay/cyber) — sibling comparison (other line, or other pair for this line)

# Aon vs At-Bay: How Do They Compare for Cyber Insurance?

Aon describes cyber claims advocacy and outside response relationships; At-Bay lists specific interruption, fraud and extortion protections with security tiers.

## Research Scope and Use

Use this comparison to evaluate Aon and At-Bay for Cyber Insurance against the same documented criteria. It identifies differences and questions to confirm; it does not select a winner for a particular business. Offering claims are what each provider publishes about this line unless marked otherwise. “Not found” describes the evidence reviewed, not proof that a feature is unavailable. Confirm the insurer, policy wording, limits, retentions, exclusions and cost in an actual quote.

## Summary

Aon describes cyber claims preparation and advocacy with third-party incident-response providers. At-Bay lists interruption, invoice manipulation, social engineering and cyber extortion protections, with optional security tiers that change fraud and ransomware terms. [3](https://www.aon.com/en/capabilities/cyber-resilience "Cyber Risk") [6](https://www.at-bay.com/insurance/cyber/ "Cyber Insurance Coverage & Policy Highlights")

## What Is Aon?

Aon’s U.S. Commercial Risk terms describe brokerage for certain insurance programs, while its Middle Market page describes a dedicated practice for mid-sized organizations across North America. The public materials reviewed do not identify the licensed producer or insurer for a particular placement. Ask which entity will produce each line and which insurer will issue the policy; request jurisdiction details for the proposed placement and ask how compensation and claim notice work for your account. [1](https://www.aon.com/en/about/leadership-and-governance/brokerage-terms-of-service-for-commercial-risk-solutions-us "Commercial Risk Solutions U.S. Brokerage Terms of Service") [2](https://www.aon.com/en/capabilities/middle-market-clients "Middle Market Clients")

[Aon profile](https://spot.insure/insurance-providers/aon)

## What Is At-Bay Insurance?

At-Bay targets technology firms with up to $5 billion in revenue and offers cyber limits up to $10 million, plus technology E&O; buyers seeking a standard online business package should compare other carriers. Managed detection and response costs extra. [4](https://www.at-bay.com/insurance/ "Cyber, Tech E&O & Professional Liability Insurance") [5](https://www.at-bay.com/stance/ "At-Bay Stance")

[At-Bay profile](https://spot.insure/insurance-providers/at-bay)

## What Is Cyber Insurance?

Cyber insurance can help pay covered response costs and claims against your business after a cyber incident. If your business relies on data, software or outside providers, compare response limits, vendor outages and approval rules. [10](https://www.ftc.gov/business-guidance/small-businesses/cybersecurity/cyber-insurance "Cyber Insurance") [11](https://www.aig.com/content/dam/aig/america-canada/us/documents/business/cyber/cyberedge-wording-sample-specimen-form.pdf "CyberEdge specimen policy")

## Key Differences in Cyber Insurance

### Published coverage and security tiers

Aon describes brokerage review of varying cyber policy terms rather than standard coverage. At-Bay lists direct and contingent business interruption, system failure, social engineering, invoice manipulation, cryptojacking and cyber extortion. Its InsurSec tiers add distinct terms: Advanced reduces ransomware retention and removes a waiting period, while Complete adds a $0 financial-fraud retention and $1 million fraud sublimit. Buyers should compare tier cost and limits with their exposures. [3](https://www.aon.com/en/capabilities/cyber-resilience "Cyber Risk") [6](https://www.at-bay.com/insurance/cyber/ "Cyber Insurance Coverage & Policy Highlights")

### Claims help and quote access

Aon describes claims preparation and advocacy and relationships with response vendors whose contracts are separate. At-Bay describes an in-house claims team, breach-coach phone line and incident roadmap for ransomware or system interruption. At-Bay also offers broker-platform automated quotes within revenue and limit thresholds, while larger submissions can go to underwriting. Confirm the account-specific route and who will coordinate response. [3](https://www.aon.com/en/capabilities/cyber-resilience "Cyber Risk") [9](https://www.at-bay.com/claims/ "Claims Handling")

## What to Confirm in Cyber Insurance Quotes

- Ask At-Bay which InsurSec tier and MDR subscription are quoted, and verify fraud sublimits, ransomware retention and waiting-period terms. [3](https://www.aon.com/en/capabilities/cyber-resilience "Cyber Risk") [6](https://www.at-bay.com/insurance/cyber/ "Cyber Insurance Coverage & Policy Highlights")
- Ask Aon about vendor contracts and compensation; ask At-Bay to confirm insurer, claims contact, revenue eligibility and quote limits. [3](https://www.aon.com/en/capabilities/cyber-resilience "Cyber Risk") [6](https://www.at-bay.com/insurance/cyber/ "Cyber Insurance Coverage & Policy Highlights")

## Offering Details

| Criteria | Aon Cyber brokerage and risk-advisory offering | At-Bay Cyber Insurance |
| --- | --- | --- |
| Role in This Line | Aon describes cyber insurance brokerage and risk-advisory services. It is not identified as the risk-bearing insurer, and the global page does not name the carrier for a particular placement. [3](https://www.aon.com/en/capabilities/cyber-resilience "Cyber Risk") (Evidence: Company-reported; scope: Aon’s official global product/capability page. The statement is limited to Aon’s marketing of brokerage or advisory services, not policy issuance..) | At-Bay places cyber insurance through its disclosed producer, At-Bay Insurance Services LLC, which is licensed as an insurance producer in all 50 states. At-Bay says eligible new excess-and-surplus (E&S) cyber business has been written on its own carrier paper, At-Bay Specialty Insurance Company, since August 2023. [7](https://www.at-bay.com/licenses/ "Licenses") [8](https://www.at-bay.com/press_releases/at-bay-begins-issuing-policies-on-its-own-paper/ "At-Bay Begins Issuing Policies on its own E&S Paper") (Evidence: Company-reported; scope: Producer role from the current license page; carrier role from a 2023 transition announcement, not confirmed for every current cyber quote..) |
| Issuing Insurer | The reviewed page does not identify the insurer or the legal producing entity for a specific placement. Ask Aon to identify both for the quoted risk. [3](https://www.aon.com/en/capabilities/cyber-resilience "Cyber Risk") (Evidence: Not found in reviewed sources; scope: Aon’s global product/capability page reviewed 2026-09-30; no buyer quote, binder or policy was reviewed. This does not establish that no insurer or producing entity is available..) | The current cyber product page does not name an issuing insurer. At-Bay's 2023 announcement says new E&S cyber business is quoted on At-Bay Specialty Insurance Company paper, but that is a historical statement, not a per-quote disclosure. [6](https://www.at-bay.com/insurance/cyber/ "Cyber Insurance Coverage & Policy Highlights") [8](https://www.at-bay.com/press_releases/at-bay-begins-issuing-policies-on-its-own-paper/ "At-Bay Begins Issuing Policies on its own E&S Paper") (Evidence: Company-reported; scope: Cyber product page checked today names no insurer; the carrier-transition release is dated August 2023 and does not cover every current state or account..) |
| Who It’s For | Aon describes cyber services for organizations managing cyber risk. Its global practice page does not publish a complete industry, revenue, security-control or state-by-state eligibility schedule. [3](https://www.aon.com/en/capabilities/cyber-resilience "Cyber Risk") (Evidence: Company-reported; scope: Audience stated by Aon on its global capability page; this does not establish a specific applicant’s eligibility or placement availability by U.S. state..) | Confirm in your quote. |
| Coverage Features | Aon describes cyber insurance as one part of cyber risk financing and says it reviews policy offerings because terms and conditions vary. For professional-services firms, it discusses coordinating cyber and professional-liability coverage. This is brokerage guidance and does not establish the terms of any cyber policy. [3](https://www.aon.com/en/capabilities/cyber-resilience "Cyber Risk") (Evidence: Company-reported; scope: Aon’s broker-authored explanation of the insurance line. It does not establish an individual insured’s policy entitlement; the insurer’s form, endorsements and declarations control..) | At-Bay lists direct and contingent business interruption and system failure coverage, social engineering and invoice manipulation coverage for all classes of business, full limits for cryptojacking and bricking, broad cyber extortion coverage including cryptocurrency payment, and reputational-harm coverage for PR costs from adverse publicity. [6](https://www.at-bay.com/insurance/cyber/ "Cyber Insurance Coverage & Policy Highlights") (Evidence: Company-reported; scope: Product-page coverage highlights; the issued policy and endorsements control actual terms..)<br><br>At-Bay sells cyber insurance with optional InsurSec security tiers: Core includes vulnerability monitoring and a fraud-defense sub-limit; Advanced adds a reduced ransomware retention and a zero-hour ransomware waiting period; Complete adds a $0 financial-fraud retention and a $1 million financial-fraud sub-limit. Each higher tier requires a separately purchased managed detection and response (MDR) subscription. [6](https://www.at-bay.com/insurance/cyber/ "Cyber Insurance Coverage & Policy Highlights") (Evidence: Company-reported; scope: Product-page InsurSec package descriptions and footnotes; availability depends on the business's risk profile and qualifying conditions..) |
| Limits and Retentions | The reviewed page does not state a standard buyer-specific limit, retention or deductible for this placement. Confirm amounts, sublimits and conditions in the quote and issued policy. [3](https://www.aon.com/en/capabilities/cyber-resilience "Cyber Risk") (Evidence: Not publicly disclosed; scope: Aon’s global product/capability page reviewed 2026-09-30; no buyer quote or policy form was reviewed..) | At-Bay says it writes primary and excess cyber insurance for businesses with revenue up to $5 billion and limits up to $10 million. Through its Broker Platform, brokers can get automated quotes only for businesses up to $100 million in revenue and $3 million in limits. [6](https://www.at-bay.com/insurance/cyber/ "Cyber Insurance Coverage & Policy Highlights") (Evidence: Company-reported; scope: Published appetite ceilings, not guaranteed offers; underwriting and the appetite guide control individual accounts..) |
| Risk Services | Aon describes cyber claims advocacy and preparation and relationships with third-party incident-response providers. The retained official source notes that provider contracts are separate, no performance guarantee is made, and referral remuneration may occur; confirm the providers, scope and compensation applicable to a client. [3](https://www.aon.com/en/capabilities/cyber-resilience "Cyber Risk") (Evidence: Company-reported; scope: Company-reported brokerage and advisory services. Account-specific service terms are not stated..) | Every At-Bay cyber policy includes access to At-Bay Stance, a security platform with vulnerability monitoring, vCISO advisory and tabletop exercises, and security awareness training. Managed detection and response (MDR) for endpoints or email costs extra, $16 or $25 per user per month respectively, and is sold separately by At-Bay Security, LLC. [6](https://www.at-bay.com/insurance/cyber/ "Cyber Insurance Coverage & Policy Highlights") (Evidence: Company-reported; scope: Product-page InsurSec and footnote descriptions; MDR pricing is described as estimated and subject to change..) |
| How to Apply | Confirm in your quote. | You apply for At-Bay cyber coverage by emailing a submission to underwriting@at-bay.com or by requesting an automated quote through At-Bay's Broker Platform. [6](https://www.at-bay.com/insurance/cyber/ "Cyber Insurance Coverage & Policy Highlights") (Evidence: Company-reported; scope: Product-page submission instructions; the Broker Platform route is limited to accounts within its lower appetite ceilings..) |
| Claims Support | Confirm in your quote. | At-Bay describes an in-house claims team and a named breach-coach phone line for active ransomware or system-interruption incidents, alongside a published cyber incident roadmap that assembles response partners after a claim is reported. [9](https://www.at-bay.com/claims/ "Claims Handling") (Evidence: Company-reported; scope: Claims-handling page process description; does not establish claim outcomes or payment speed..) |

## Full Comparison

- [Aon vs At-Bay](https://spot.insure/compare/aon-vs-at-bay): all coverage lines, business roles, service and claims.
- [What Is Cyber Insurance?](https://spot.insure/coverage/cyber): Cyber insurance can help pay covered breach response, data recovery, interruption and liability costs; vendor incidents and funds-transfer fraud need separate checks.
- [Aon vs At-Bay Professional Liability (E&O) Insurance](https://spot.insure/compare/aon-vs-at-bay/professional-errors-omissions)
- [AIG vs Aon Cyber Insurance](https://spot.insure/compare/aig-vs-aon/cyber)
- [AIG vs At-Bay Cyber Insurance](https://spot.insure/compare/aig-vs-at-bay/cyber)
- [Alliance Risk vs Aon Cyber Insurance](https://spot.insure/compare/alliance-risk-vs-aon/cyber)
- [Alliance Risk vs At-Bay Cyber Insurance](https://spot.insure/compare/alliance-risk-vs-at-bay/cyber)
- [Amelia Risk vs Aon Cyber Insurance](https://spot.insure/compare/amelia-risk-vs-aon/cyber)
- [Amelia Risk vs At-Bay Cyber Insurance](https://spot.insure/compare/amelia-risk-vs-at-bay/cyber)

## Sources

### Aon

1. [Commercial Risk Solutions U.S. Brokerage Terms of Service](https://www.aon.com/en/about/leadership-and-governance/brokerage-terms-of-service-for-commercial-risk-solutions-us). Aon; Lines 120–127: certain-program broker-of-record scope, consultation, application assistance, client signature and bind instruction, and account administration; lines 140–147: variable and contingent compensation, potential placement incentive, and client request route; lines 206–213: no price guarantee and surplus-lines limitations; lines 229–231: client insurer-notice duty unless separately agreed.. Accessed 2026-09-29.
2. [Middle Market Clients](https://www.aon.com/en/capabilities/middle-market-clients). Aon; Lines 125–132: mid-sized organizations and middle-market framing; lines 165–173: dedicated practice and North America statement; lines 188–224: Commercial Risk capabilities. No numeric company-size cutoff or U.S.-only eligibility rule is stated on the reviewed page.. Accessed 2026-09-29.
3. [Cyber Risk](https://www.aon.com/en/capabilities/cyber-resilience). Aon; Global cyber risk financing/insurance overview and brokerage practice; claims preparation and advocacy, incident response providers and referral remuneration disclosures, lines 194–230 as retained in Aon’s official source record; Professional Services Practice cyber cross-reference, lines 151–156.. Accessed 2026-09-30.

### At-Bay

4. [Cyber, Tech E&O & Professional Liability Insurance](https://www.at-bay.com/insurance/). At-Bay; Product cards and agency disclosure. Accessed 2026-09-16.
5. [At-Bay Stance](https://www.at-bay.com/stance/). At-Bay; Real Protection Against Real Threats; Endpoint, Email, MXDR; footnotes 1 and 3–6. Accessed 2026-09-16.
6. [Cyber Insurance Coverage & Policy Highlights](https://www.at-bay.com/insurance/cyber/). At-Bay; Cyber Coverage Highlights; Primary & Excess Appetite; InsurSec Packages (Core, Advanced, Complete); footnotes 1–7. Accessed 2026-09-23.
7. [Licenses](https://www.at-bay.com/licenses/). At-Bay; At-Bay Insurance Services LLC producer introduction and 50-state P&C/surplus-lines license table. Accessed 2026-09-23.
8. [At-Bay Begins Issuing Policies on its own E&S Paper](https://www.at-bay.com/press_releases/at-bay-begins-issuing-policies-on-its-own-paper/). At-Bay; August 9, 2023 release: "At-Bay ... has begun issuing Cyber and Tech E&O policies under its Delaware-based Excess and Surplus (E&S) carrier, At-Bay Specialty Insurance Company"; "All E&S Cyber and Tech E&O new business in eligible states and territories is now being quoted on At-Bay Specialty Insurance Company paper, as of August 7, 2023". Accessed 2026-09-23.
9. [Claims Handling](https://www.at-bay.com/claims/). At-Bay; At-Bay Cyber Incident Roadmap; Call an At-Bay Breach Coach; The At-Bay Claims Team. Accessed 2026-09-23.

### Cyber Insurance Guide

10. [Cyber Insurance](https://www.ftc.gov/business-guidance/small-businesses/cybersecurity/cyber-insurance). Federal Trade Commission; Opening; First-Party and Third-Party Coverage; First-Party Coverage; Third-Party Coverage; What Should Your Cyber Insurance Policy Cover. Accessed 2026-09-16.
11. [CyberEdge specimen policy](https://www.aig.com/content/dam/aig/america-canada/us/documents/business/cyber/cyberedge-wording-sample-specimen-form.pdf). AIG; General Terms §§4–6, PDF pp.3–6; Security and Privacy §1 p.11, §2(l)/(p) p.14, §3 pp.15–18, exclusions p.18; Event Management §1 and §2(h), PDF pp.19–20. Accessed 2026-09-16.

Updated 2026-09-30. Spot, a product of Tools for Enlightenment, publishes this research and works in the commercial insurance market. The comparison applies the same criteria to both providers. [Editorial policy](https://spot.insure/editorial-policy). To suggest a correction, [contact Spot](https://spot.insure/contact) with the page URL and supporting source.

## Aon Reviews

Review Score: 6.1 / 10 from 3 rated sources, equally weighted.

Public ratings for Aon are low: Trustpilot shows 1.2 out of 5 from 782 reviews, and BBB shows 1.6 from five. Aon is a global firm, so those pages mostly reflect other parts of the business, not large U.S. commercial accounts.

- J.D. Power: Aon study score 822 (out of 1000). Historical 2017 large-commercial-broker study; U.S. and Canada commercial insurance decision-makers at large organizations. J.D. Power reports 2,506 evaluations across the study, not Aon-specific responses; the Aon respondent count is not stated. Period: 2017 study; ranked 3rd among large commercial brokers; study-wide population 2,506, not Aon review count. Checked 2026-09-29. [Diversity of Offerings Becomes Key Differentiator for Large Commercial Insurers, JD Power Finds](https://www.jdpower.com/business/press-releases/jd-power-2017-large-commercial-insurance-study)
- Trustpilot: TrustScore 1.2 (out of 5); 782 reviews. Global www.aon.com profile merged with other Aon profiles; mixed experiences include pensions, travel, professional indemnity and Australian business quotation service. The two latter complaints are individual unverified allegations, not evidence of U.S. commercial-placement outcomes or insurer fault. Trustpilot says reviews may not be representative because the company has not recently invited reviews. Period: Displayed 2026-09-29; page separately showed 198 reviews in the last 12 months. Checked 2026-09-29. [Aon Reviews](https://www.trustpilot.com/review/www.aon.com)
- BBB: BBB business grade B− (BBB letter grade; stated reason: failure to respond to two filed complaints). BBB of Chicago & Northern Illinois profile for Aon plc; the business grade is BBB’s own measure, not customer stars. Checked 2026-09-29. [Aon plc | BBB Business Profile](https://www.bbb.org/us/il/chicago/profile/insurance-companies/aon-plc-0654-5291)
- BBB: BBB customer review average 1.6 (out of 5); 5 reviews. BBB of Chicago & Northern Illinois customer reviews for Aon plc; some reviews are about employee-benefit and medical-expense issues. Period: checked 2026-09-29. Checked 2026-09-29. [Aon plc | BBB Reviews](https://www.bbb.org/us/il/chicago/profile/insurance-companies/aon-plc-0654-5291/customer-reviews)

Reviewed 2026-09-29. [Read the sourced review](https://spot.insure/insurance-providers/aon/reviews).

## At-Bay Reviews

Review Score: 9.5 / 10 from 2 rated sources, equally weighted.

At-Bay’s public review evidence is thin: one old G2 review and a BBB complaint record. It is not enough to judge day-to-day service or claims handling.

- BBB: BBB rating A (A+ to F). At-Bay identity; US commercial insurance review/satisfaction evidence sought on BBB. Period: accessed 2026-09-25. Checked 2026-09-25. [At-Bay | BBB Business Profile](https://www.bbb.org/us/ca/mountain-view/profile/insurance-companies/at-bay-1216-1000025767)
- G2: G2 star rating 4.5 (5 stars); 1 reviews. At-Bay company/product feedback; G2 seller profile identifies its offering as cybersecurity insurance and lists San Francisco headquarters. Not an insurance-policy claims or commercial-buyer satisfaction study. Period: review dated 2020-09-21. Checked 2026-09-25. [At-Bay seller profile and reviews](https://www.g2.com/es/sellers/at-bay)

Reviewed 2026-09-25. [Read the sourced review](https://spot.insure/insurance-providers/at-bay/reviews).

## Agent and Developer Resources

- [Markdown page](https://spot.insure/compare/aon-vs-at-bay/cyber.md)
- [Developer resources](https://spot.insure/developers)
- [Public MCP server](https://spot.insure/mcp)
- [MCP server manifest](https://spot.insure/server.json)
- [OpenAPI description](https://spot.insure/openapi.json)
- [Public page index](https://spot.insure/llms.txt)