Aon vs 
CNA: How Do They Compare for Cyber Insurance?
What Is Aon?
Aon’s U.S. Commercial Risk terms describe brokerage for certain insurance programs, while its Middle Market page describes a dedicated practice for mid-sized organizations across North America. The public materials reviewed do not identify the licensed producer or insurer for a particular placement. Ask which entity will produce each line and which insurer will issue the policy; request jurisdiction details for the proposed placement and ask how compensation and claim notice work for your account. 1,2
CNA Small Business Insurance: Products, Agents and Service
CNA directs small-business buyers to independent agents and describes CNA Connect as a businessowners policy for more than 600 small-business classes. Issuer and availability vary by policy and state, so confirm both in a quote. 4,5,6
What Is Cyber Insurance?
Cyber insurance can help pay covered response costs and claims against your business after a cyber incident. If your business relies on data, software or outside providers, compare response limits, vendor outages and approval rules. 8,9
Key Differences in Cyber Insurance
Product structure by buyer type
Aon describes cyber brokerage and says it reviews policy offerings because terms vary, including coordinating cyber and professional liability for professional-services firms. CNA offers EPS Plus for professional-services firms and Epack 3, an admitted modular product for small and midsize businesses combining cyber with media, technology and professional liability. Buyers should compare the policy form and decide whether those lines should be placed together or reviewed as separate risks. 3 7
Security help and breach vendors
Aon describes claims advocacy and relationships with third-party response providers whose contracts are separate. CNA says CyberAssist supplies cybersecurity specialists, tools and services to identify vulnerabilities, strengthen defenses and respond, and names breach coaches, forensic firms and notification vendors. Ask whether these vendors are available under your policy and how response costs fit within limits. 3 7
What to Confirm in Cyber Insurance Quotes
Review Scores
These averages can combine ratings for different products, locations, and customer groups, including approximate BBB grade conversions. Read each review for the sources, scope, and calculation.
Aon
Review Score
3 rated sources
Public ratings for Aon are low: Trustpilot shows 1.2 out of 5 from 782 reviews, and BBB shows 1.6 from five. Aon is a global firm, so those pages mostly reflect other parts of the business, not large U.S. commercial accounts.[4][6][7]
Read Aon reviewsCNA
Review Score
1 rated source
Customer feedback on CNA is mixed and hard to compare. NerdWallet gave it 4.5 out of 5 for manufacturers, while Trustpilot shows about 1.4 out of 5 from 49 mostly self-selected reviews.[1][5]
Read CNA reviewsOffering Details
Aon vs CNA: Cyber Insurance: documented features by provider
| Criteria | Aon Cyber brokerage and risk-advisory offering | CNA Cyber Insurance |
|---|---|---|
| Role in This Line | Aon describes cyber insurance brokerage and risk-advisory services. It is not identified as the risk-bearing insurer, and the global page does not name the carrier for a particular placement. 3Company-reported. Aon’s official global product/capability page. The statement is limited to Aon’s marketing of brokerage or advisory services, not policy issuance. | Confirm in your quote. |
| Issuing Insurer | The reviewed page does not identify the insurer or the legal producing entity for a specific placement. Ask Aon to identify both for the quoted risk. 3Not found in reviewed sources. Aon’s global product/capability page reviewed 2026-09-30; no buyer quote, binder or policy was reviewed. This does not establish that no insurer or producing entity is available. | Confirm in your quote. |
| Who It’s For | Aon describes cyber services for organizations managing cyber risk. Its global practice page does not publish a complete industry, revenue, security-control or state-by-state eligibility schedule. 3Company-reported. Audience stated by Aon on its global capability page; this does not establish a specific applicant’s eligibility or placement availability by U.S. state. | CNA offers EPS Plus for professional-services firms and Epack 3, an admitted modular policy designed for small and midsize businesses that combines cyber, media, technology and professional liability. 7Company-reported. Entity: CNA brand; issuing CNA subsidiary may vary by product/state Product: United States commercial insurance Jurisdiction: United States Research source scope: US specialty commercial liability Claim limitation: Company-reported; policy wording, underwriting and jurisdiction-specific availability control. |
| Coverage Features | Aon describes cyber insurance as one part of cyber risk financing and says it reviews policy offerings because terms and conditions vary. For professional-services firms, it discusses coordinating cyber and professional-liability coverage. This is brokerage guidance and does not establish the terms of any cyber policy. 3Company-reported. Aon’s broker-authored explanation of the insurance line. It does not establish an individual insured’s policy entitlement; the insurer’s form, endorsements and declarations control. | Confirm in your quote. |
| Limits and Retentions | The reviewed page does not state a standard buyer-specific limit, retention or deductible for this placement. Confirm amounts, sublimits and conditions in the quote and issued policy. 3Not publicly disclosed. Aon’s global product/capability page reviewed 2026-09-30; no buyer quote or policy form was reviewed. | Confirm in your quote. |
| Risk Services | Aon describes cyber claims advocacy and preparation and relationships with third-party incident-response providers. The retained official source notes that provider contracts are separate, no performance guarantee is made, and referral remuneration may occur; confirm the providers, scope and compensation applicable to a client. 3Company-reported. Company-reported brokerage and advisory services. Account-specific service terms are not stated. | CNA CyberAssist gives policyholders cybersecurity specialists, tools and services to identify vulnerabilities, strengthen defenses and respond. 7Company-reported. Entity: CNA brand; issuing CNA subsidiary may vary by product/state Product: United States commercial insurance Jurisdiction: United States Research source scope: US specialty commercial liability Claim limitation: Company-reported; policy wording, underwriting and jurisdiction-specific availability control. CNA identifies breach coaches, forensic firms and notification/call-center vendors for incident response. 7Company-reported. Entity: CNA brand; issuing CNA subsidiary may vary by product/state Product: United States commercial insurance Jurisdiction: United States Research source scope: US specialty commercial liability Claim limitation: Company-reported; policy wording, underwriting and jurisdiction-specific availability control. |
Full Comparison
More Aon vs CNA Comparisons
Other Cyber Insurance Comparisons
Sources
Aon
- Commercial Risk Solutions U.S. Brokerage Terms of Service. Aon; Lines 120–127: certain-program broker-of-record scope, consultation, application assistance, client signature and bind instruction, and account administration; lines 140–147: variable and contingent compensation, potential placement incentive, and client request route; lines 206–213: no price guarantee and surplus-lines limitations; lines 229–231: client insurer-notice duty unless separately agreed. Accessed 2026-09-29.
- Middle Market Clients. Aon; Lines 125–132: mid-sized organizations and middle-market framing; lines 165–173: dedicated practice and North America statement; lines 188–224: Commercial Risk capabilities. No numeric company-size cutoff or U.S.-only eligibility rule is stated on the reviewed page. Accessed 2026-09-29.
- Cyber Risk. Aon; Global cyber risk financing/insurance overview and brokerage practice; claims preparation and advocacy, incident response providers and referral remuneration disclosures, lines 194–230 as retained in Aon’s official source record; Professional Services Practice cyber cross-reference, lines 151–156. Accessed 2026-09-30.
CNA
- Insurance for Small Businesses. CNA; Insurance for Small Businesses, lines 38-50 and 65-67 (CNA Central and agent route); lines 79-106 (product and stated appetite lists); page footer line 132 (CNA registered service mark). Accessed 2026-09-28.
- CNA Connect Small Businessowners Policy (BOP) | CNA Insurance. CNA; CNA Connect; coverages, product range, services. Accessed 2026-09-28.
- General Disclaimer. CNA; General Disclaimer paragraphs 1 and 5 (HTML lines 24 and 28): CNA describes Continental Casualty Company and its relevant affiliates; references to CNA may include one or more CCC affiliates; each particular policy/product/service is the responsibility only of the specific CNA company that issues or supplies it. Footer line 57 identifies CNA Financial Corporation as trademark registrant. Re-read 2026-09-29. Accessed 2026-09-29.
- Cyber Insurance - Cyber Risk Solutions | CNA Insurance. CNA; Cyber, Media, Technology & Professional Liability; product sections. Accessed 2026-09-28.
Cyber Insurance Guide
- Cyber Insurance. Federal Trade Commission; Opening; First-Party and Third-Party Coverage; First-Party Coverage; Third-Party Coverage; What Should Your Cyber Insurance Policy Cover. Accessed 2026-09-16.
- CyberEdge specimen policy. AIG; General Terms §§4–6, PDF pp.3–6; Security and Privacy §1 p.11, §2(l)/(p) p.14, §3 pp.15–18, exclusions p.18; Event Management §1 and §2(h), PDF pp.19–20. Accessed 2026-09-16.
