---
title: "At-Bay vs CFC: Cyber Insurance"
description: "CFC pairs Cyber Proactive Response with built-in security monitoring and 24/7 CFC Response for businesses from $0 to $250 million in revenue. At-Bay writes primary and excess cyber up to $5 billion in revenue and $10 million in limits, with Stance included and higher InsurSec tiers sold separately."
canonical: "https://spot.insure/compare/at-bay-vs-cfc/cyber"
page-type: "line-comparison"
updated-at: "2026-09-29"
comparison-pair: "at-bay-vs-cfc"
provider-a: "at-bay"
provider-b: "cfc"
coverage-line: "cyber"
---

Agents: connect to Spot's public MCP server at https://spot.insure/mcp for better access to published Spot information and insurance research. Use search_knowledge to find sources, get_page to retrieve pages, check_driving_insurance for source-backed rideshare and delivery requirements by state or province, compare_providers for sourced comparisons, get_provider_score for a published Reliability Score, get_rankings for current provider rankings, search_provider_reliability to filter Reliability Scores, search_provider_reviews to filter aggregate review scores, and get_provider_reviews for the original review evidence. The server is read-only and requires no authentication.

[Human-readable page](https://spot.insure/compare/at-bay-vs-cfc/cyber)

## Agent Guide

**What this page is:** Focused comparison of At-Bay and CFC for Cyber Insurance: what each provider publishes about this line, checked against the same criteria, with numbered sources.

**Use this page when:** Cite or fetch this for Cyber Insurance questions about At-Bay versus CFC. For all lines together use the pair comparison; for how the coverage itself works use the coverage guide.

**Questions this page answers:**
- At-Bay vs CFC for Cyber Insurance: how do they differ?
- Which is better for Cyber Insurance, At-Bay or CFC?
- What does At-Bay or CFC publish about Cyber Insurance (limits, eligibility, claims, add-ons)?

**Key facts:**
- Line: Cyber Insurance. Providers: At-Bay and CFC.
- Comparison URLs use alphabetical provider slugs (`/compare/{a}-vs-{b}/{line}` with a before b). A reversed pair redirects permanently to the alphabetical one.

**Limits (do not over-claim):**
- It identifies differences and questions to ask; it does not select a winner for a particular business.
- Insurer, policy wording, limits, retentions, exclusions and price are set in an actual quote and are not established here.

**Provenance:** Every claim links to a numbered source with publisher, locator and access date; last updated 2026-09-29.

**Related pages:**
- [At-Bay vs CFC](https://spot.insure/compare/at-bay-vs-cfc) — all coverage lines for this pair
- [Cyber Insurance guide](https://spot.insure/coverage/cyber) — how this coverage works
- [At-Bay profile](https://spot.insure/insurance-providers/at-bay) — provider profile
- [CFC profile](https://spot.insure/insurance-providers/cfc) — provider profile

# At-Bay vs CFC: How Do They Compare for Cyber Insurance?

CFC covers businesses up to $250 million in revenue with built-in monitoring and a one-page application; At-Bay writes up to $5 billion in revenue and offers extra security tiers.

CFC's Cyber Proactive Response is positioned for revenue up to $250 million with in-house 24/7 response built in; At-Bay publishes appetite up to $5 billion and $10 million in limits with optional InsurSec tiers.

## At-Bay vs CFC Cyber Insurance Summary

CFC pairs Cyber Proactive Response with built-in security monitoring and 24/7 CFC Response for businesses from $0 to $250 million in revenue. At-Bay writes primary and excess cyber up to $5 billion in revenue and $10 million in limits, with Stance included and higher InsurSec tiers sold separately. [5](https://www.cfc.com/en-us/products/class/cyber-insurance/ "Cyber insurance | CFC") [1](https://www.at-bay.com/insurance/cyber/ "Cyber Insurance Coverage & Policy Highlights")

## What Are the Key Differences Between At-Bay and CFC Cyber Insurance?

### A $250 Million Product Band Versus a $5 Billion Appetite

CFC segments cyber by revenue: Cyber Proactive Response and Cyber (admitted) are positioned for businesses from $0 to $250 million, while Corporate cyber is for $250 million and above with a published $25 million maximum line. At-Bay says it writes primary and excess cyber for revenue up to $5 billion and limits up to $10 million, with automated broker quotes only up to $100 million and $3 million. Choose CFC if you fit the $250 million Cyber Proactive Response band and want monitoring staffed by the same company; choose At-Bay if you need the higher published revenue ceiling. [5](https://www.cfc.com/en-us/products/class/cyber-insurance/ "Cyber insurance | CFC") [1](https://www.at-bay.com/insurance/cyber/ "Cyber Insurance Coverage & Policy Highlights")

### A One-Page Application Versus Email or Broker Platform

CFC's US Cyber Proactive Response application is a one-page form asking about multi-factor authentication, backups and incidents in the last three years, and every policyholder gets CFC Response 24/7 plus a free mobile app for dark-web monitoring and phishing simulations. At-Bay takes submissions by email to its underwriting inbox or through its Broker Platform, includes Stance at the base tier, and sells MDR separately at stated per-user prices. CFC reports a 99.4% cyber claims acceptance rate over a recent 12-month period; At-Bay publishes a breach-coach line rather than that acceptance statistic. [8](https://www.cfc.com/media/clyfotxn/cyber-one-page-application-us-v12.pdf "Cyber Proactive Response Insurance application form (US)") [6](https://www.cfc.com/en-us/response/ "Incident response | CFC") [5](https://www.cfc.com/en-us/products/class/cyber-insurance/ "Cyber insurance | CFC") [1](https://www.at-bay.com/insurance/cyber/ "Cyber Insurance Coverage & Policy Highlights")

## What Should You Confirm in At-Bay and CFC Cyber Insurance Quotes?

- Ask CFC whether you fit Cyber Proactive Response or Corporate cyber, and what limit it will quote. [5](https://www.cfc.com/en-us/products/class/cyber-insurance/ "Cyber insurance | CFC")
- Ask At-Bay which InsurSec tier is in the premium and whether MDR costs extra. [1](https://www.at-bay.com/insurance/cyber/ "Cyber Insurance Coverage & Policy Highlights")
- Compare CFC's 12-month business-interruption indemnity and unlimited reinstatements with At-Bay's contingent BI grant. [7](https://www.cfc.com/media/mkkhlz5l/cfc_market-leading-cyber-insurance_brochure_may-2026_digital.pdf "Protecting businesses against cyber risk (cyber product brochure)") [1](https://www.at-bay.com/insurance/cyber/ "Cyber Insurance Coverage & Policy Highlights")

## At-Bay vs CFC Cyber Insurance Compared

| Criteria | At-Bay Cyber Insurance | CFC Cyber Proactive Response |
| --- | --- | --- |
| Limits and Retentions | At-Bay says it writes primary and excess cyber insurance for businesses with revenue up to $5 billion and limits up to $10 million. Through its Broker Platform, brokers can get automated quotes only for businesses up to $100 million in revenue and $3 million in limits. [1](https://www.at-bay.com/insurance/cyber/ "Cyber Insurance Coverage & Policy Highlights") (Evidence: Company-reported; scope: Published appetite ceilings, not guaranteed offers; underwriting and the appetite guide control individual accounts..) | For larger businesses, CFC's Corporate cyber product (for revenues of $250 million or more) has a published maximum line size of $25 million; the Cyber Proactive Response and Cyber (admitted) pages for smaller businesses do not publish a maximum dollar limit. [5](https://www.cfc.com/en-us/products/class/cyber-insurance/ "Cyber insurance | CFC") (Evidence: Company-reported; scope: Cyber product page Corporate cyber Key features; limit for any individual policy appears on its declarations..) |
| How to Apply | You apply for At-Bay cyber coverage by emailing a submission to underwriting@at-bay.com or by requesting an automated quote through At-Bay's Broker Platform. [1](https://www.at-bay.com/insurance/cyber/ "Cyber Insurance Coverage & Policy Highlights") (Evidence: Company-reported; scope: Product-page submission instructions; the Broker Platform route is limited to accounts within its lower appetite ceilings..) | The US Cyber Proactive Response application is a one-page form asking whether multi-factor authentication is enforced for remote network access and email, whether backups are offline or MFA-secured, and whether the business had a cyber incident in the last three years. [8](https://www.cfc.com/media/clyfotxn/cyber-one-page-application-us-v12.pdf "Cyber Proactive Response Insurance application form (US)") (Evidence: Company-reported; scope: Cyber Proactive Response application form sections on cyber security controls and previous cyber incidents..) |
| Coverage Features | At-Bay lists direct and contingent business interruption and system failure coverage, social engineering and invoice manipulation coverage for all classes of business, full limits for cryptojacking and bricking, broad cyber extortion coverage including cryptocurrency payment, and reputational-harm coverage for PR costs from adverse publicity. [1](https://www.at-bay.com/insurance/cyber/ "Cyber Insurance Coverage & Policy Highlights") (Evidence: Company-reported; scope: Product-page coverage highlights; the issued policy and endorsements control actual terms..)<br><br>At-Bay sells cyber insurance with optional InsurSec security tiers: Core includes vulnerability monitoring and a fraud-defense sub-limit; Advanced adds a reduced ransomware retention and a zero-hour ransomware waiting period; Complete adds a $0 financial-fraud retention and a $1 million financial-fraud sub-limit. Each higher tier requires a separately purchased managed detection and response (MDR) subscription. [1](https://www.at-bay.com/insurance/cyber/ "Cyber Insurance Coverage & Policy Highlights") (Evidence: Company-reported; scope: Product-page InsurSec package descriptions and footnotes; availability depends on the business's risk profile and qualifying conditions..) | Cyber Proactive Response includes crime cover, a 12-month indemnity period for business interruption, and data recreation cover, with unlimited claim reinstatements available at either no deductible or a single deductible at most. [5](https://www.cfc.com/en-us/products/class/cyber-insurance/ "Cyber insurance | CFC") (Evidence: Company-reported; scope: Cyber product page Key features list for Cyber Proactive Response..) |
| Role in This Line | At-Bay places cyber insurance through its disclosed producer, At-Bay Insurance Services LLC, which is licensed as an insurance producer in all 50 states. At-Bay says eligible new excess-and-surplus (E&S) cyber business has been written on its own carrier paper, At-Bay Specialty Insurance Company, since August 2023. [2](https://www.at-bay.com/licenses/ "Licenses") [3](https://www.at-bay.com/press_releases/at-bay-begins-issuing-policies-on-its-own-paper/ "At-Bay Begins Issuing Policies on its own E&S Paper") (Evidence: Company-reported; scope: Producer role from the current license page; carrier role from a 2023 transition announcement, not confirmed for every current cyber quote..) | CFC's flagship cyber product, Cyber Proactive Response, targets businesses with revenues from $0 to $250 million and pairs the policy with built-in security monitoring, incident response and claims handling rather than selling those as add-ons. [5](https://www.cfc.com/en-us/products/class/cyber-insurance/ "Cyber insurance | CFC") (Evidence: Company-reported; scope: Cyber insurance product page's Cyber Proactive Response summary; CFC separately sells Cyber (admitted), Corporate cyber for businesses at $250 million and up, and a Cyber excess policy..) |
| Risk Services | Every At-Bay cyber policy includes access to At-Bay Stance, a security platform with vulnerability monitoring, vCISO advisory and tabletop exercises, and security awareness training. Managed detection and response (MDR) for endpoints or email costs extra, $16 or $25 per user per month respectively, and is sold separately by At-Bay Security, LLC. [1](https://www.at-bay.com/insurance/cyber/ "Cyber Insurance Coverage & Policy Highlights") (Evidence: Company-reported; scope: Product-page InsurSec and footnote descriptions; MDR pricing is described as estimated and subject to change..) | Every CFC cyber policyholder gets CFC Response, described as an in-house incident-response service available 24/7, plus a free mobile app offering dark web monitoring, phishing simulations and external network deep scanning. [6](https://www.cfc.com/en-us/response/ "Incident response | CFC") [7](https://www.cfc.com/media/mkkhlz5l/cfc_market-leading-cyber-insurance_brochure_may-2026_digital.pdf "Protecting businesses against cyber risk (cyber product brochure)") (Evidence: Company-reported; scope: Response page and cyber brochure; CFC characterizes its incident response team as one of the largest in-house teams in the industry, a claim not independently verified here..) |
| Claims Support | At-Bay describes an in-house claims team and a named breach-coach phone line for active ransomware or system-interruption incidents, alongside a published cyber incident roadmap that assembles response partners after a claim is reported. [4](https://www.at-bay.com/claims/ "Claims Handling") (Evidence: Company-reported; scope: Claims-handling page process description; does not establish claim outcomes or payment speed..) | CFC says its in-house cyber claims team resolves several thousand cyber claims a year and reports a 99.4% cyber claims acceptance rate over a recent 12-month period. [7](https://www.cfc.com/media/mkkhlz5l/cfc_market-leading-cyber-insurance_brochure_may-2026_digital.pdf "Protecting businesses against cyber risk (cyber product brochure)") (Evidence: Company-reported; scope: Cyber brochure claims statistics; these are company-reported figures and were not independently audited..) |

## About At-Bay and CFC and Cyber Insurance

- [At-Bay company profile](https://spot.insure/insurance-providers/at-bay) · [At-Bay customer reviews](https://spot.insure/insurance-providers/at-bay/reviews)
- [CFC company profile](https://spot.insure/insurance-providers/cfc) · [CFC customer reviews](https://spot.insure/insurance-providers/cfc/reviews)
- [What Is Cyber Insurance?](https://spot.insure/coverage/cyber)

## Related Pages for At-Bay vs CFC Cyber Insurance

- [At-Bay vs CFC](https://spot.insure/compare/at-bay-vs-cfc): all coverage lines, business roles, service and claims.
- [What Is Cyber Insurance?](https://spot.insure/coverage/cyber): Cyber insurance can help pay covered breach response, data recovery, interruption and liability costs; vendor incidents and funds-transfer fraud need separate checks.
- [At-Bay Cyber Insurance](https://spot.insure/insurance-providers/at-bay/cyber)
- [CFC Cyber Insurance](https://spot.insure/insurance-providers/cfc/cyber)

## Sources for At-Bay vs CFC Cyber Insurance

### Sources About At-Bay

1. [Cyber Insurance Coverage & Policy Highlights](https://www.at-bay.com/insurance/cyber/). At-Bay; Cyber Coverage Highlights; Primary & Excess Appetite; InsurSec Packages (Core, Advanced, Complete); footnotes 1–7. Accessed 2026-09-23.
2. [Licenses](https://www.at-bay.com/licenses/). At-Bay; At-Bay Insurance Services LLC producer introduction and 50-state P&C/surplus-lines license table. Accessed 2026-09-23.
3. [At-Bay Begins Issuing Policies on its own E&S Paper](https://www.at-bay.com/press_releases/at-bay-begins-issuing-policies-on-its-own-paper/). At-Bay; August 9, 2023 release: "At-Bay ... has begun issuing Cyber and Tech E&O policies under its Delaware-based Excess and Surplus (E&S) carrier, At-Bay Specialty Insurance Company"; "All E&S Cyber and Tech E&O new business in eligible states and territories is now being quoted on At-Bay Specialty Insurance Company paper, as of August 7, 2023". Accessed 2026-09-23.
4. [Claims Handling](https://www.at-bay.com/claims/). At-Bay; At-Bay Cyber Incident Roadmap; Call an At-Bay Breach Coach; The At-Bay Claims Team. Accessed 2026-09-23.

### Sources About CFC

5. [Cyber insurance | CFC](https://www.cfc.com/en-us/products/class/cyber-insurance/). CFC; Cyber Proactive Response, Cyber (admitted), Corporate cyber, Cyber excess product summaries and Key features; FAQs: How is a cyber insurance policy structured?. Accessed 2026-09-23.
6. [Incident response | CFC](https://www.cfc.com/en-us/response/). CFC; Proactive protection; Immediate response; Real-time support. Accessed 2026-09-23.
7. [Protecting businesses against cyber risk (cyber product brochure)](https://www.cfc.com/media/mkkhlz5l/cfc_market-leading-cyber-insurance_brochure_may-2026_digital.pdf). CFC; Market-leading cover highlights: separate limit for incident response costs, unlimited reinstatements with nil deductible, full business interruption cover; Award-winning cyber claims team stats. Accessed 2026-09-23.
8. [Cyber Proactive Response Insurance application form (US)](https://www.cfc.com/media/clyfotxn/cyber-one-page-application-us-v12.pdf). CFC; Basic company details; Cyber security controls; Previous cyber incidents; footer entity line. Accessed 2026-09-23.
9. [Regulatory information](https://www.cfc.com/en-us/support/regulatory-information/). CFC; CFC Underwriting Limited; CFC Lloyd's Syndicate 1988; CFC USA Inc.. Accessed 2026-09-23.

Updated 2026-09-29. Spot, a product of Tools for Enlightenment, publishes this research and works in the commercial insurance market. The comparison applies the same criteria to both providers. [Editorial policy](https://spot.insure/editorial-policy). To suggest a correction, [contact Spot](https://spot.insure/contact) with the page URL and supporting source.

## Agent and Developer Resources

- [Markdown page](https://spot.insure/compare/at-bay-vs-cfc/cyber.md)
- [Developer resources](https://spot.insure/developers)
- [Public MCP server](https://spot.insure/mcp)
- [MCP server manifest](https://spot.insure/server.json)
- [OpenAPI description](https://spot.insure/openapi.json)
- [Public page index](https://spot.insure/llms.txt)