---
title: "Aon vs CNA: Cyber Insurance"
description: "Aon discusses reviewing variable cyber wording and professional-liability coordination; CNA offers cyber through professional-services or modular small-business products and CyberAssist services."
canonical: "https://spot.insure/compare/aon-vs-cna/cyber"
page-type: "line-comparison"
updated-at: "2026-09-30"
comparison-pair: "aon-vs-cna"
provider-a: "aon"
provider-b: "cna"
coverage-line: "cyber"
---

Agents: connect to Spot's public MCP server at https://spot.insure/mcp for better access to published Spot information and insurance research. Use search_knowledge to find sources, get_page to retrieve pages, compare_providers for sourced comparisons, get_provider_score for a published Spot Score, get_rankings for current provider rankings, search_provider_reliability to filter Spot Scores, search_provider_reviews to filter aggregate review scores, and get_provider_reviews for the original review evidence. The server is read-only and requires no authentication.

[Human-readable page](https://spot.insure/compare/aon-vs-cna/cyber)

## Agent Guide

**What this page is:** Focused comparison of Aon and CNA for Cyber Insurance: what each provider publishes about this line, checked against the same criteria, with numbered sources.

**Use this page when:** Cite or fetch this for Cyber Insurance questions about Aon versus CNA. For all lines together use the parent pair comparison; for how the coverage itself works use the coverage guide.

**Questions this page answers:**
- Aon vs CNA for Cyber Insurance: how do they differ?
- Which is better for Cyber Insurance, Aon or CNA?
- What does Aon or CNA publish about Cyber Insurance (limits, eligibility, claims, add-ons)?
- What should I confirm in a quote for Cyber Insurance from Aon or CNA?

**Key facts:**
- Line: Cyber Insurance. Providers: Aon and CNA.
- Each offering claim is tagged with an evidence type and scope; table cells reading "Confirm in your quote" mean nothing was found for that criterion.
- Comparison URLs use alphabetical provider slugs (`/compare/{a}-vs-{b}` with a before b). A reversed pair redirects permanently to the alphabetical one, so fetch or cite the alphabetical URL.

**Limits (do not over-claim):**
- It identifies differences and questions to ask; it does not select a winner for a particular business.
- "Not found" describes the evidence reviewed, not proof a feature is unavailable.
- Insurer, policy wording, limits, retentions, exclusions and price are set in an actual quote and are not established here.

**Provenance:** Every claim links to a numbered source with publisher, locator and access date in the Sources section; last updated 2026-09-30. Editorial policy: /editorial-policy.

**Related pages:**
- [Aon vs CNA](https://spot.insure/compare/aon-vs-cna) — parent: all coverage lines for this pair
- [Cyber Insurance guide](https://spot.insure/coverage/cyber) — coverage explainer for this line
- [Aon profile](https://spot.insure/insurance-providers/aon) — provider profile (evidence)
- [CNA profile](https://spot.insure/insurance-providers/cna) — provider profile (evidence)
- [Aon vs CNA Commercial Property Insurance](https://spot.insure/compare/aon-vs-cna/commercial-property) — sibling comparison (other line, or other pair for this line)
- [Aon vs CNA Crime Insurance](https://spot.insure/compare/aon-vs-cna/crime) — sibling comparison (other line, or other pair for this line)
- [Aon vs CNA D&O Insurance](https://spot.insure/compare/aon-vs-cna/directors-officers) — sibling comparison (other line, or other pair for this line)
- [Aon vs CNA Employment Practices Liability Insurance](https://spot.insure/compare/aon-vs-cna/employment-practices) — sibling comparison (other line, or other pair for this line)
- [Aon vs CNA Fiduciary Liability Insurance](https://spot.insure/compare/aon-vs-cna/fiduciary) — sibling comparison (other line, or other pair for this line)
- [Aon vs CNA General Liability Insurance](https://spot.insure/compare/aon-vs-cna/general-liability) — sibling comparison (other line, or other pair for this line)
- [Aon vs CNA Kidnap and Ransom Insurance](https://spot.insure/compare/aon-vs-cna/kidnap-ransom) — sibling comparison (other line, or other pair for this line)
- [Aon vs CNA Management Liability Insurance](https://spot.insure/compare/aon-vs-cna/management-liability) — sibling comparison (other line, or other pair for this line)
- [Aon vs CNA Professional Liability (E&O) Insurance](https://spot.insure/compare/aon-vs-cna/professional-errors-omissions) — sibling comparison (other line, or other pair for this line)
- [Aon vs CNA Workers’ Compensation Insurance](https://spot.insure/compare/aon-vs-cna/workers-compensation) — sibling comparison (other line, or other pair for this line)
- [AIG vs Aon Cyber Insurance](https://spot.insure/compare/aig-vs-aon/cyber) — sibling comparison (other line, or other pair for this line)
- [AIG vs CNA Cyber Insurance](https://spot.insure/compare/aig-vs-cna/cyber) — sibling comparison (other line, or other pair for this line)
- [Alliance Risk vs Aon Cyber Insurance](https://spot.insure/compare/alliance-risk-vs-aon/cyber) — sibling comparison (other line, or other pair for this line)
- [Amelia Risk vs Aon Cyber Insurance](https://spot.insure/compare/amelia-risk-vs-aon/cyber) — sibling comparison (other line, or other pair for this line)
- [Aon vs At-Bay Cyber Insurance](https://spot.insure/compare/aon-vs-at-bay/cyber) — sibling comparison (other line, or other pair for this line)
- [Aon vs The Baldwin Group Cyber Insurance](https://spot.insure/compare/aon-vs-baldwin/cyber) — sibling comparison (other line, or other pair for this line)

# Aon vs CNA: How Do They Compare for Cyber Insurance?

Aon discusses reviewing variable cyber wording and professional-liability coordination; CNA offers cyber through professional-services or modular small-business products and CyberAssist services.

## Research Scope and Use

Use this comparison to evaluate Aon and CNA for Cyber Insurance against the same documented criteria. It identifies differences and questions to confirm; it does not select a winner for a particular business. Offering claims are what each provider publishes about this line unless marked otherwise. “Not found” describes the evidence reviewed, not proof that a feature is unavailable. Confirm the insurer, policy wording, limits, retentions, exclusions and cost in an actual quote.

## Summary

Aon says cyber terms vary and discusses coordination with professional liability. CNA offers EPS Plus for professional-services firms and Epack 3, an admitted modular product combining cyber with media, technology and professional liability for small and midsize businesses. [3](https://www.aon.com/en/capabilities/cyber-resilience "Cyber Risk") [7](https://www.cna.com/products/cyber "Cyber Insurance - Cyber Risk Solutions | CNA Insurance")

## What Is Aon?

Aon’s U.S. Commercial Risk terms describe brokerage for certain insurance programs, while its Middle Market page describes a dedicated practice for mid-sized organizations across North America. The public materials reviewed do not identify the licensed producer or insurer for a particular placement. Ask which entity will produce each line and which insurer will issue the policy; request jurisdiction details for the proposed placement and ask how compensation and claim notice work for your account. [1](https://www.aon.com/en/about/leadership-and-governance/brokerage-terms-of-service-for-commercial-risk-solutions-us "Commercial Risk Solutions U.S. Brokerage Terms of Service") [2](https://www.aon.com/en/capabilities/middle-market-clients "Middle Market Clients")

[Aon profile](https://spot.insure/insurance-providers/aon)

## CNA Small Business Insurance: Products, Agents and Service

CNA directs small-business buyers to independent agents and describes CNA Connect as a businessowners policy for more than 600 small-business classes. Issuer and availability vary by policy and state, so confirm both in a quote. [4](https://www.cna.com/solutions/small-business "Insurance for Small Businesses") [5](https://www.cna.com/products/cna-connect "CNA Connect Small Businessowners Policy (BOP) | CNA Insurance") [6](https://www.cna.com/cnadisclaimer/generaldisclaimer "General Disclaimer")

[CNA profile](https://spot.insure/insurance-providers/cna)

## What Is Cyber Insurance?

Cyber insurance can help pay covered response costs and claims against your business after a cyber incident. If your business relies on data, software or outside providers, compare response limits, vendor outages and approval rules. [8](https://www.ftc.gov/business-guidance/small-businesses/cybersecurity/cyber-insurance "Cyber Insurance") [9](https://www.aig.com/content/dam/aig/america-canada/us/documents/business/cyber/cyberedge-wording-sample-specimen-form.pdf "CyberEdge specimen policy")

## Key Differences in Cyber Insurance

### Product structure by buyer type

Aon describes cyber brokerage and says it reviews policy offerings because terms vary, including coordinating cyber and professional liability for professional-services firms. CNA offers EPS Plus for professional-services firms and Epack 3, an admitted modular product for small and midsize businesses combining cyber with media, technology and professional liability. Buyers should compare the policy form and decide whether those lines should be placed together or reviewed as separate risks. [3](https://www.aon.com/en/capabilities/cyber-resilience "Cyber Risk") [7](https://www.cna.com/products/cyber "Cyber Insurance - Cyber Risk Solutions | CNA Insurance")

### Security help and breach vendors

Aon describes claims advocacy and relationships with third-party response providers whose contracts are separate. CNA says CyberAssist supplies cybersecurity specialists, tools and services to identify vulnerabilities, strengthen defenses and respond, and names breach coaches, forensic firms and notification vendors. Ask whether these vendors are available under your policy and how response costs fit within limits. [3](https://www.aon.com/en/capabilities/cyber-resilience "Cyber Risk") [7](https://www.cna.com/products/cyber "Cyber Insurance - Cyber Risk Solutions | CNA Insurance")

## What to Confirm in Cyber Insurance Quotes

- Ask CNA whether your firm fits EPS Plus or Epack 3, and whether cyber shares a limit with media, technology or professional liability. [3](https://www.aon.com/en/capabilities/cyber-resilience "Cyber Risk") [7](https://www.cna.com/products/cyber "Cyber Insurance - Cyber Risk Solutions | CNA Insurance")
- Ask Aon to list response-provider contracts; ask CNA which CyberAssist and breach-response services are included and who pays vendor costs. [3](https://www.aon.com/en/capabilities/cyber-resilience "Cyber Risk") [7](https://www.cna.com/products/cyber "Cyber Insurance - Cyber Risk Solutions | CNA Insurance")

## Offering Details

| Criteria | Aon Cyber brokerage and risk-advisory offering | CNA Cyber Insurance |
| --- | --- | --- |
| Role in This Line | Aon describes cyber insurance brokerage and risk-advisory services. It is not identified as the risk-bearing insurer, and the global page does not name the carrier for a particular placement. [3](https://www.aon.com/en/capabilities/cyber-resilience "Cyber Risk") (Evidence: Company-reported; scope: Aon’s official global product/capability page. The statement is limited to Aon’s marketing of brokerage or advisory services, not policy issuance..) | Confirm in your quote. |
| Issuing Insurer | The reviewed page does not identify the insurer or the legal producing entity for a specific placement. Ask Aon to identify both for the quoted risk. [3](https://www.aon.com/en/capabilities/cyber-resilience "Cyber Risk") (Evidence: Not found in reviewed sources; scope: Aon’s global product/capability page reviewed 2026-09-30; no buyer quote, binder or policy was reviewed. This does not establish that no insurer or producing entity is available..) | Confirm in your quote. |
| Who It’s For | Aon describes cyber services for organizations managing cyber risk. Its global practice page does not publish a complete industry, revenue, security-control or state-by-state eligibility schedule. [3](https://www.aon.com/en/capabilities/cyber-resilience "Cyber Risk") (Evidence: Company-reported; scope: Audience stated by Aon on its global capability page; this does not establish a specific applicant’s eligibility or placement availability by U.S. state..) | CNA offers EPS Plus for professional-services firms and Epack 3, an admitted modular policy designed for small and midsize businesses that combines cyber, media, technology and professional liability. [7](https://www.cna.com/products/cyber "Cyber Insurance - Cyber Risk Solutions | CNA Insurance") (Evidence: Company-reported; scope: Entity: CNA brand; issuing CNA subsidiary may vary by product/state Product: United States commercial insurance Jurisdiction: United States Research source scope: US specialty commercial liability Claim limitation: Company-reported; policy wording, underwriting and jurisdiction-specific availability control..) |
| Coverage Features | Aon describes cyber insurance as one part of cyber risk financing and says it reviews policy offerings because terms and conditions vary. For professional-services firms, it discusses coordinating cyber and professional-liability coverage. This is brokerage guidance and does not establish the terms of any cyber policy. [3](https://www.aon.com/en/capabilities/cyber-resilience "Cyber Risk") (Evidence: Company-reported; scope: Aon’s broker-authored explanation of the insurance line. It does not establish an individual insured’s policy entitlement; the insurer’s form, endorsements and declarations control..) | Confirm in your quote. |
| Limits and Retentions | The reviewed page does not state a standard buyer-specific limit, retention or deductible for this placement. Confirm amounts, sublimits and conditions in the quote and issued policy. [3](https://www.aon.com/en/capabilities/cyber-resilience "Cyber Risk") (Evidence: Not publicly disclosed; scope: Aon’s global product/capability page reviewed 2026-09-30; no buyer quote or policy form was reviewed..) | Confirm in your quote. |
| Risk Services | Aon describes cyber claims advocacy and preparation and relationships with third-party incident-response providers. The retained official source notes that provider contracts are separate, no performance guarantee is made, and referral remuneration may occur; confirm the providers, scope and compensation applicable to a client. [3](https://www.aon.com/en/capabilities/cyber-resilience "Cyber Risk") (Evidence: Company-reported; scope: Company-reported brokerage and advisory services. Account-specific service terms are not stated..) | CNA CyberAssist gives policyholders cybersecurity specialists, tools and services to identify vulnerabilities, strengthen defenses and respond. [7](https://www.cna.com/products/cyber "Cyber Insurance - Cyber Risk Solutions | CNA Insurance") (Evidence: Company-reported; scope: Entity: CNA brand; issuing CNA subsidiary may vary by product/state Product: United States commercial insurance Jurisdiction: United States Research source scope: US specialty commercial liability Claim limitation: Company-reported; policy wording, underwriting and jurisdiction-specific availability control..)<br><br>CNA identifies breach coaches, forensic firms and notification/call-center vendors for incident response. [7](https://www.cna.com/products/cyber "Cyber Insurance - Cyber Risk Solutions | CNA Insurance") (Evidence: Company-reported; scope: Entity: CNA brand; issuing CNA subsidiary may vary by product/state Product: United States commercial insurance Jurisdiction: United States Research source scope: US specialty commercial liability Claim limitation: Company-reported; policy wording, underwriting and jurisdiction-specific availability control..) |

## Full Comparison

- [Aon vs CNA](https://spot.insure/compare/aon-vs-cna): all coverage lines, business roles, service and claims.
- [What Is Cyber Insurance?](https://spot.insure/coverage/cyber): Cyber insurance can help pay covered breach response, data recovery, interruption and liability costs; vendor incidents and funds-transfer fraud need separate checks.
- [Aon vs CNA Commercial Property Insurance](https://spot.insure/compare/aon-vs-cna/commercial-property)
- [Aon vs CNA Crime Insurance](https://spot.insure/compare/aon-vs-cna/crime)
- [Aon vs CNA D&O Insurance](https://spot.insure/compare/aon-vs-cna/directors-officers)
- [Aon vs CNA Employment Practices Liability Insurance](https://spot.insure/compare/aon-vs-cna/employment-practices)
- [Aon vs CNA Fiduciary Liability Insurance](https://spot.insure/compare/aon-vs-cna/fiduciary)
- [Aon vs CNA General Liability Insurance](https://spot.insure/compare/aon-vs-cna/general-liability)
- [Aon vs CNA Kidnap and Ransom Insurance](https://spot.insure/compare/aon-vs-cna/kidnap-ransom)
- [Aon vs CNA Management Liability Insurance](https://spot.insure/compare/aon-vs-cna/management-liability)
- [Aon vs CNA Professional Liability (E&O) Insurance](https://spot.insure/compare/aon-vs-cna/professional-errors-omissions)
- [Aon vs CNA Workers’ Compensation Insurance](https://spot.insure/compare/aon-vs-cna/workers-compensation)
- [AIG vs Aon Cyber Insurance](https://spot.insure/compare/aig-vs-aon/cyber)
- [AIG vs CNA Cyber Insurance](https://spot.insure/compare/aig-vs-cna/cyber)
- [Alliance Risk vs Aon Cyber Insurance](https://spot.insure/compare/alliance-risk-vs-aon/cyber)
- [Amelia Risk vs Aon Cyber Insurance](https://spot.insure/compare/amelia-risk-vs-aon/cyber)
- [Aon vs At-Bay Cyber Insurance](https://spot.insure/compare/aon-vs-at-bay/cyber)
- [Aon vs The Baldwin Group Cyber Insurance](https://spot.insure/compare/aon-vs-baldwin/cyber)

## Sources

### Aon

1. [Commercial Risk Solutions U.S. Brokerage Terms of Service](https://www.aon.com/en/about/leadership-and-governance/brokerage-terms-of-service-for-commercial-risk-solutions-us). Aon; Lines 120–127: certain-program broker-of-record scope, consultation, application assistance, client signature and bind instruction, and account administration; lines 140–147: variable and contingent compensation, potential placement incentive, and client request route; lines 206–213: no price guarantee and surplus-lines limitations; lines 229–231: client insurer-notice duty unless separately agreed.. Accessed 2026-09-29.
2. [Middle Market Clients](https://www.aon.com/en/capabilities/middle-market-clients). Aon; Lines 125–132: mid-sized organizations and middle-market framing; lines 165–173: dedicated practice and North America statement; lines 188–224: Commercial Risk capabilities. No numeric company-size cutoff or U.S.-only eligibility rule is stated on the reviewed page.. Accessed 2026-09-29.
3. [Cyber Risk](https://www.aon.com/en/capabilities/cyber-resilience). Aon; Global cyber risk financing/insurance overview and brokerage practice; claims preparation and advocacy, incident response providers and referral remuneration disclosures, lines 194–230 as retained in Aon’s official source record; Professional Services Practice cyber cross-reference, lines 151–156.. Accessed 2026-09-30.

### CNA

4. [Insurance for Small Businesses](https://www.cna.com/solutions/small-business). CNA; Insurance for Small Businesses, lines 38-50 and 65-67 (CNA Central and agent route); lines 79-106 (product and stated appetite lists); page footer line 132 (CNA registered service mark).. Accessed 2026-09-28.
5. [CNA Connect Small Businessowners Policy (BOP) | CNA Insurance](https://www.cna.com/products/cna-connect). CNA; CNA Connect; coverages, product range, services. Accessed 2026-09-28.
6. [General Disclaimer](https://www.cna.com/cnadisclaimer/generaldisclaimer). CNA; General Disclaimer paragraphs 1 and 5 (HTML lines 24 and 28): CNA describes Continental Casualty Company and its relevant affiliates; references to CNA may include one or more CCC affiliates; each particular policy/product/service is the responsibility only of the specific CNA company that issues or supplies it. Footer line 57 identifies CNA Financial Corporation as trademark registrant. Re-read 2026-09-29.. Accessed 2026-09-29.
7. [Cyber Insurance - Cyber Risk Solutions | CNA Insurance](https://www.cna.com/products/cyber). CNA; Cyber, Media, Technology & Professional Liability; product sections. Accessed 2026-09-28.

### Cyber Insurance Guide

8. [Cyber Insurance](https://www.ftc.gov/business-guidance/small-businesses/cybersecurity/cyber-insurance). Federal Trade Commission; Opening; First-Party and Third-Party Coverage; First-Party Coverage; Third-Party Coverage; What Should Your Cyber Insurance Policy Cover. Accessed 2026-09-16.
9. [CyberEdge specimen policy](https://www.aig.com/content/dam/aig/america-canada/us/documents/business/cyber/cyberedge-wording-sample-specimen-form.pdf). AIG; General Terms §§4–6, PDF pp.3–6; Security and Privacy §1 p.11, §2(l)/(p) p.14, §3 pp.15–18, exclusions p.18; Event Management §1 and §2(h), PDF pp.19–20. Accessed 2026-09-16.

Updated 2026-09-30. Spot, a product of Tools for Enlightenment, publishes this research and works in the commercial insurance market. The comparison applies the same criteria to both providers. [Editorial policy](https://spot.insure/editorial-policy). To suggest a correction, [contact Spot](https://spot.insure/contact) with the page URL and supporting source.

## Aon Reviews

Review Score: 6.1 / 10 from 3 rated sources, equally weighted.

Public ratings for Aon are low: Trustpilot shows 1.2 out of 5 from 782 reviews, and BBB shows 1.6 from five. Aon is a global firm, so those pages mostly reflect other parts of the business, not large U.S. commercial accounts.

- J.D. Power: Aon study score 822 (out of 1000). Historical 2017 large-commercial-broker study; U.S. and Canada commercial insurance decision-makers at large organizations. J.D. Power reports 2,506 evaluations across the study, not Aon-specific responses; the Aon respondent count is not stated. Period: 2017 study; ranked 3rd among large commercial brokers; study-wide population 2,506, not Aon review count. Checked 2026-09-29. [Diversity of Offerings Becomes Key Differentiator for Large Commercial Insurers, JD Power Finds](https://www.jdpower.com/business/press-releases/jd-power-2017-large-commercial-insurance-study)
- Trustpilot: TrustScore 1.2 (out of 5); 782 reviews. Global www.aon.com profile merged with other Aon profiles; mixed experiences include pensions, travel, professional indemnity and Australian business quotation service. The two latter complaints are individual unverified allegations, not evidence of U.S. commercial-placement outcomes or insurer fault. Trustpilot says reviews may not be representative because the company has not recently invited reviews. Period: Displayed 2026-09-29; page separately showed 198 reviews in the last 12 months. Checked 2026-09-29. [Aon Reviews](https://www.trustpilot.com/review/www.aon.com)
- BBB: BBB business grade B− (BBB letter grade; stated reason: failure to respond to two filed complaints). BBB of Chicago & Northern Illinois profile for Aon plc; the business grade is BBB’s own measure, not customer stars. Checked 2026-09-29. [Aon plc | BBB Business Profile](https://www.bbb.org/us/il/chicago/profile/insurance-companies/aon-plc-0654-5291)
- BBB: BBB customer review average 1.6 (out of 5); 5 reviews. BBB of Chicago & Northern Illinois customer reviews for Aon plc; some reviews are about employee-benefit and medical-expense issues. Period: checked 2026-09-29. Checked 2026-09-29. [Aon plc | BBB Reviews](https://www.bbb.org/us/il/chicago/profile/insurance-companies/aon-plc-0654-5291/customer-reviews)

Reviewed 2026-09-29. [Read the sourced review](https://spot.insure/insurance-providers/aon/reviews).

## CNA Reviews

Review Score: 9.0 / 10 from 1 rated source, equally weighted.

Customer feedback on CNA is mixed and hard to compare. NerdWallet gave it 4.5 out of 5 for manufacturers, while Trustpilot shows about 1.4 out of 5 from 49 mostly self-selected reviews.

- NerdWallet: NerdWallet editorial rating for manufacturers 4.5/5 (Editorial rating). NerdWallet editorial assessment of CNA for U.S. manufacturers, not consumer average. Period: Published 2026-03-26. Checked 2026-09-29. [Best Insurance for Manufacturers in 2026](https://www.nerdwallet.com/business/insurance/learn/manufacturers)
- Trustpilot: Displayed Trustpilot TrustScore 1.4/5 page text; 1.5/5 badge (TrustScore out of 5); 49 reviews. CNA.com profile, mixed business and consumer/LTC reports; self-selected, not representative commercial P&C sample. Period: 14 reviews in prior 12 months; 2026-09-29. Checked 2026-09-29. [CNA customer reviews](https://www.trustpilot.com/review/www.cna.com)
- BBB: BBB customer-review average 1/5 (BBB star rating); 6 reviews. Long Term Care Insurance profile covering headquarters/corporate locations; not commercial P&C; six self-selected reviews. Period: Displayed 2026-09-29. Checked 2026-09-29. [CNA Financial Corporation customer reviews](https://www.bbb.org/us/il/chicago/profile/long-term-care-insurance/cna-financial-corporation-0683-90032439/customer-reviews)

Reviewed 2026-09-29. [Read the sourced review](https://spot.insure/insurance-providers/cna/reviews).

## Agent and Developer Resources

- [Markdown page](https://spot.insure/compare/aon-vs-cna/cyber.md)
- [Developer resources](https://spot.insure/developers)
- [Public MCP server](https://spot.insure/mcp)
- [MCP server manifest](https://spot.insure/server.json)
- [OpenAPI description](https://spot.insure/openapi.json)
- [Public page index](https://spot.insure/llms.txt)
