--- title: "At-Bay vs CNA: Cyber Insurance" description: "At-Bay says every cyber policy includes Stance vulnerability monitoring, vCISO advice, tabletop exercises and security awareness training." canonical: "https://spot.insure/compare/at-bay-vs-cna/cyber" page-type: "line-comparison" updated-at: "2026-09-30" comparison-pair: "at-bay-vs-cna" provider-a: "at-bay" provider-b: "cna" coverage-line: "cyber" --- Agents: connect to Spot's public MCP server at https://spot.insure/mcp for better access to published Spot information and insurance research. Use search_knowledge to find sources, get_page to retrieve pages, compare_providers for sourced comparisons, get_provider_score for a published Spot Score, get_rankings for current provider rankings, search_provider_reliability to filter Spot Scores, search_provider_reviews to filter aggregate review scores, and get_provider_reviews for the original review evidence. The server is read-only and requires no authentication. [Human-readable page](https://spot.insure/compare/at-bay-vs-cna/cyber) ## Agent Guide **What this page is:** Focused comparison of At-Bay and CNA for Cyber Insurance: what each provider publishes about this line, checked against the same criteria, with numbered sources. **Use this page when:** Cite or fetch this for Cyber Insurance questions about At-Bay versus CNA. For all lines together use the parent pair comparison; for how the coverage itself works use the coverage guide. **Questions this page answers:** - At-Bay vs CNA for Cyber Insurance: how do they differ? - Which is better for Cyber Insurance, At-Bay or CNA? - What does At-Bay or CNA publish about Cyber Insurance (limits, eligibility, claims, add-ons)? - What should I confirm in a quote for Cyber Insurance from At-Bay or CNA? **Key facts:** - Line: Cyber Insurance. Providers: At-Bay and CNA. - Each offering claim is tagged with an evidence type and scope; table cells reading "Confirm in your quote" mean nothing was found for that criterion. - Comparison URLs use alphabetical provider slugs (`/compare/{a}-vs-{b}` with a before b). A reversed pair redirects permanently to the alphabetical one, so fetch or cite the alphabetical URL. **Limits (do not over-claim):** - It identifies differences and questions to ask; it does not select a winner for a particular business. - "Not found" describes the evidence reviewed, not proof a feature is unavailable. - Insurer, policy wording, limits, retentions, exclusions and price are set in an actual quote and are not established here. **Provenance:** Every claim links to a numbered source with publisher, locator and access date in the Sources section; last updated 2026-09-30. Editorial policy: /editorial-policy. **Related pages:** - [At-Bay vs CNA](https://spot.insure/compare/at-bay-vs-cna) — parent: all coverage lines for this pair - [Cyber Insurance guide](https://spot.insure/coverage/cyber) — coverage explainer for this line - [At-Bay profile](https://spot.insure/insurance-providers/at-bay) — provider profile (evidence) - [CNA profile](https://spot.insure/insurance-providers/cna) — provider profile (evidence) - [At-Bay vs CNA Professional Liability (E&O) Insurance](https://spot.insure/compare/at-bay-vs-cna/professional-errors-omissions) — sibling comparison (other line, or other pair for this line) - [At-Bay vs CNA Tech E&O Insurance](https://spot.insure/compare/at-bay-vs-cna/technology-errors-omissions) — sibling comparison (other line, or other pair for this line) - [AIG vs At-Bay Cyber Insurance](https://spot.insure/compare/aig-vs-at-bay/cyber) — sibling comparison (other line, or other pair for this line) - [AIG vs CNA Cyber Insurance](https://spot.insure/compare/aig-vs-cna/cyber) — sibling comparison (other line, or other pair for this line) - [Alliance Risk vs At-Bay Cyber Insurance](https://spot.insure/compare/alliance-risk-vs-at-bay/cyber) — sibling comparison (other line, or other pair for this line) - [Alliance Risk vs CNA Cyber Insurance](https://spot.insure/compare/alliance-risk-vs-cna/cyber) — sibling comparison (other line, or other pair for this line) - [Amelia Risk vs At-Bay Cyber Insurance](https://spot.insure/compare/amelia-risk-vs-at-bay/cyber) — sibling comparison (other line, or other pair for this line) - [Amelia Risk vs CNA Cyber Insurance](https://spot.insure/compare/amelia-risk-vs-cna/cyber) — sibling comparison (other line, or other pair for this line) # At-Bay vs CNA: How Do They Compare for Cyber Insurance? At-Bay says every cyber policy includes Stance vulnerability monitoring, vCISO advice, tabletop exercises and security awareness training. ## How to Use the At-Bay vs CNA Cyber Insurance Comparison Use this comparison to evaluate At-Bay and CNA for Cyber Insurance against the same documented criteria. It identifies differences and questions to confirm; it does not select a winner for a particular business. Offering claims are what each provider publishes about this line unless marked otherwise. “Not found” describes the evidence reviewed, not proof that a feature is unavailable. Confirm the insurer, policy wording, limits, retentions, exclusions and cost in an actual quote. ## At-Bay vs CNA Cyber Insurance Summary At-Bay says every cyber policy includes Stance vulnerability monitoring, vCISO advice, tabletop exercises and security awareness training; CNA describes CyberAssist specialists, tools and services to identify vulnerabilities, strengthen defenses and respond. [3](https://www.at-bay.com/insurance/cyber/ "Cyber Insurance Coverage & Policy Highlights") [10](https://www.cna.com/products/cyber "Cyber Insurance - Cyber Risk Solutions | CNA Insurance") ## What Is At-Bay Insurance? At-Bay targets technology firms with up to $5 billion in revenue and offers cyber limits up to $10 million, plus technology E&O; buyers seeking a standard online business package should compare other carriers. Managed detection and response costs extra. [1](https://www.at-bay.com/insurance/ "Cyber, Tech E&O & Professional Liability Insurance") [2](https://www.at-bay.com/stance/ "At-Bay Stance") [At-Bay profile](https://spot.insure/insurance-providers/at-bay) ## CNA Small Business Insurance: Products, Agents and Service CNA directs small-business buyers to independent agents and describes CNA Connect as a businessowners policy for more than 600 small-business classes. Issuer and availability vary by policy and state, so confirm both in a quote. [7](https://www.cna.com/solutions/small-business "Insurance for Small Businesses") [8](https://www.cna.com/products/cna-connect "CNA Connect Small Businessowners Policy (BOP) | CNA Insurance") [9](https://www.cna.com/cnadisclaimer/generaldisclaimer "General Disclaimer") [CNA profile](https://spot.insure/insurance-providers/cna) ## What Is Cyber Insurance? Cyber insurance can help pay covered response costs and claims against your business after a cyber incident. If your business relies on data, software or outside providers, compare response limits, vendor outages and approval rules. [11](https://www.ftc.gov/business-guidance/small-businesses/cybersecurity/cyber-insurance "Cyber Insurance") [12](https://www.aig.com/content/dam/aig/america-canada/us/documents/business/cyber/cyberedge-wording-sample-specimen-form.pdf "CyberEdge specimen policy") ## What Are the Key Differences Between At-Bay and CNA Cyber Insurance? ### Coverage and Service Structure The named service sets overlap around preparation but are not identical in the records. At-Bay separately prices managed detection and response subscriptions, and its optional InsurSec tiers change fraud and ransomware terms. CNA’s cited offering claims do not publish comparable tiered retentions, fraud sublimits or MDR pricing. A buyer should distinguish included policyholder access from add-on subscriptions and verify services in the quote. [3](https://www.at-bay.com/insurance/cyber/ "Cyber Insurance Coverage & Policy Highlights") [10](https://www.cna.com/products/cyber "Cyber Insurance - Cyber Risk Solutions | CNA Insurance") ### Eligibility and Quote Questions At-Bay says it writes primary and excess cyber for businesses up to $5 billion in revenue and $10 million in limits, while automated Broker Platform quotes are limited to $100 million revenue and $3 million. CNA’s cyber claim set focuses on EPS Plus and Epack 3 segments without a comparable public ceiling. At-Bay also describes an in-house claims team and breach-coach contact; the CNA record names response vendors, not an equivalent claims workflow. [3](https://www.at-bay.com/insurance/cyber/ "Cyber Insurance Coverage & Policy Highlights") [10](https://www.cna.com/products/cyber "Cyber Insurance - Cyber Risk Solutions | CNA Insurance") ## What Should You Confirm in At-Bay and CNA Cyber Insurance Quotes? - Ask At-Bay which InsurSec tier and MDR subscription are quoted and which carrier applies; ask CNA which form and incident-response vendors are included. [3](https://www.at-bay.com/insurance/cyber/ "Cyber Insurance Coverage & Policy Highlights") [10](https://www.cna.com/products/cyber "Cyber Insurance - Cyber Risk Solutions | CNA Insurance") - Compare ransomware waiting periods, financial-fraud retention, system-failure interruption, limits and claims contacts. [3](https://www.at-bay.com/insurance/cyber/ "Cyber Insurance Coverage & Policy Highlights") [10](https://www.cna.com/products/cyber "Cyber Insurance - Cyber Risk Solutions | CNA Insurance") ## At-Bay vs CNA Cyber Insurance Compared | Criteria | At-Bay Cyber Insurance | CNA Cyber Insurance | | --- | --- | --- | | Role in This Line | At-Bay places cyber insurance through its disclosed producer, At-Bay Insurance Services LLC, which is licensed as an insurance producer in all 50 states. At-Bay says eligible new excess-and-surplus (E&S) cyber business has been written on its own carrier paper, At-Bay Specialty Insurance Company, since August 2023. [4](https://www.at-bay.com/licenses/ "Licenses") [5](https://www.at-bay.com/press_releases/at-bay-begins-issuing-policies-on-its-own-paper/ "At-Bay Begins Issuing Policies on its own E&S Paper") (Evidence: Company-reported; scope: Producer role from the current license page; carrier role from a 2023 transition announcement, not confirmed for every current cyber quote..) | Confirm in your quote. | | Issuing Insurer | The current cyber product page does not name an issuing insurer. At-Bay's 2023 announcement says new E&S cyber business is quoted on At-Bay Specialty Insurance Company paper, but that is a historical statement, not a per-quote disclosure. [3](https://www.at-bay.com/insurance/cyber/ "Cyber Insurance Coverage & Policy Highlights") [5](https://www.at-bay.com/press_releases/at-bay-begins-issuing-policies-on-its-own-paper/ "At-Bay Begins Issuing Policies on its own E&S Paper") (Evidence: Company-reported; scope: Cyber product page checked today names no insurer; the carrier-transition release is dated August 2023 and does not cover every current state or account..) | Confirm in your quote. | | Who It’s For | Confirm in your quote. | CNA offers EPS Plus for professional-services firms and Epack 3, an admitted modular policy designed for small and midsize businesses that combines cyber, media, technology and professional liability. [10](https://www.cna.com/products/cyber "Cyber Insurance - Cyber Risk Solutions | CNA Insurance") (Evidence: Company-reported; scope: Entity: CNA brand; issuing CNA subsidiary may vary by product/state Product: United States commercial insurance Jurisdiction: United States Research source scope: US specialty commercial liability Claim limitation: Company-reported; policy wording, underwriting and jurisdiction-specific availability control..) | | Coverage Features | At-Bay lists direct and contingent business interruption and system failure coverage, social engineering and invoice manipulation coverage for all classes of business, full limits for cryptojacking and bricking, broad cyber extortion coverage including cryptocurrency payment, and reputational-harm coverage for PR costs from adverse publicity. [3](https://www.at-bay.com/insurance/cyber/ "Cyber Insurance Coverage & Policy Highlights") (Evidence: Company-reported; scope: Product-page coverage highlights; the issued policy and endorsements control actual terms..)

At-Bay sells cyber insurance with optional InsurSec security tiers: Core includes vulnerability monitoring and a fraud-defense sub-limit; Advanced adds a reduced ransomware retention and a zero-hour ransomware waiting period; Complete adds a $0 financial-fraud retention and a $1 million financial-fraud sub-limit. Each higher tier requires a separately purchased managed detection and response (MDR) subscription. [3](https://www.at-bay.com/insurance/cyber/ "Cyber Insurance Coverage & Policy Highlights") (Evidence: Company-reported; scope: Product-page InsurSec package descriptions and footnotes; availability depends on the business's risk profile and qualifying conditions..) | Confirm in your quote. | | Limits and Retentions | At-Bay says it writes primary and excess cyber insurance for businesses with revenue up to $5 billion and limits up to $10 million. Through its Broker Platform, brokers can get automated quotes only for businesses up to $100 million in revenue and $3 million in limits. [3](https://www.at-bay.com/insurance/cyber/ "Cyber Insurance Coverage & Policy Highlights") (Evidence: Company-reported; scope: Published appetite ceilings, not guaranteed offers; underwriting and the appetite guide control individual accounts..) | Confirm in your quote. | | Risk Services | Every At-Bay cyber policy includes access to At-Bay Stance, a security platform with vulnerability monitoring, vCISO advisory and tabletop exercises, and security awareness training. Managed detection and response (MDR) for endpoints or email costs extra, $16 or $25 per user per month respectively, and is sold separately by At-Bay Security, LLC. [3](https://www.at-bay.com/insurance/cyber/ "Cyber Insurance Coverage & Policy Highlights") (Evidence: Company-reported; scope: Product-page InsurSec and footnote descriptions; MDR pricing is described as estimated and subject to change..) | CNA CyberAssist gives policyholders cybersecurity specialists, tools and services to identify vulnerabilities, strengthen defenses and respond. [10](https://www.cna.com/products/cyber "Cyber Insurance - Cyber Risk Solutions | CNA Insurance") (Evidence: Company-reported; scope: Entity: CNA brand; issuing CNA subsidiary may vary by product/state Product: United States commercial insurance Jurisdiction: United States Research source scope: US specialty commercial liability Claim limitation: Company-reported; policy wording, underwriting and jurisdiction-specific availability control..)

CNA identifies breach coaches, forensic firms and notification/call-center vendors for incident response. [10](https://www.cna.com/products/cyber "Cyber Insurance - Cyber Risk Solutions | CNA Insurance") (Evidence: Company-reported; scope: Entity: CNA brand; issuing CNA subsidiary may vary by product/state Product: United States commercial insurance Jurisdiction: United States Research source scope: US specialty commercial liability Claim limitation: Company-reported; policy wording, underwriting and jurisdiction-specific availability control..) | | How to Apply | You apply for At-Bay cyber coverage by emailing a submission to underwriting@at-bay.com or by requesting an automated quote through At-Bay's Broker Platform. [3](https://www.at-bay.com/insurance/cyber/ "Cyber Insurance Coverage & Policy Highlights") (Evidence: Company-reported; scope: Product-page submission instructions; the Broker Platform route is limited to accounts within its lower appetite ceilings..) | Confirm in your quote. | | Claims Support | At-Bay describes an in-house claims team and a named breach-coach phone line for active ransomware or system-interruption incidents, alongside a published cyber incident roadmap that assembles response partners after a claim is reported. [6](https://www.at-bay.com/claims/ "Claims Handling") (Evidence: Company-reported; scope: Claims-handling page process description; does not establish claim outcomes or payment speed..) | Confirm in your quote. | ## Related Pages for At-Bay vs CNA Cyber Insurance - [At-Bay vs CNA](https://spot.insure/compare/at-bay-vs-cna): all coverage lines, business roles, service and claims. - [What Is Cyber Insurance?](https://spot.insure/coverage/cyber): Cyber insurance can help pay covered breach response, data recovery, interruption and liability costs; vendor incidents and funds-transfer fraud need separate checks. - [At-Bay vs CNA Professional Liability (E&O) Insurance](https://spot.insure/compare/at-bay-vs-cna/professional-errors-omissions) - [At-Bay vs CNA Tech E&O Insurance](https://spot.insure/compare/at-bay-vs-cna/technology-errors-omissions) - [AIG vs At-Bay Cyber Insurance](https://spot.insure/compare/aig-vs-at-bay/cyber) - [AIG vs CNA Cyber Insurance](https://spot.insure/compare/aig-vs-cna/cyber) - [Alliance Risk vs At-Bay Cyber Insurance](https://spot.insure/compare/alliance-risk-vs-at-bay/cyber) - [Alliance Risk vs CNA Cyber Insurance](https://spot.insure/compare/alliance-risk-vs-cna/cyber) - [Amelia Risk vs At-Bay Cyber Insurance](https://spot.insure/compare/amelia-risk-vs-at-bay/cyber) - [Amelia Risk vs CNA Cyber Insurance](https://spot.insure/compare/amelia-risk-vs-cna/cyber) ## Sources for At-Bay vs CNA Cyber Insurance ### Sources About At-Bay 1. [Cyber, Tech E&O & Professional Liability Insurance](https://www.at-bay.com/insurance/). At-Bay; Product cards and agency disclosure. Accessed 2026-09-16. 2. [At-Bay Stance](https://www.at-bay.com/stance/). At-Bay; Real Protection Against Real Threats; Endpoint, Email, MXDR; footnotes 1 and 3–6. Accessed 2026-09-16. 3. [Cyber Insurance Coverage & Policy Highlights](https://www.at-bay.com/insurance/cyber/). At-Bay; Cyber Coverage Highlights; Primary & Excess Appetite; InsurSec Packages (Core, Advanced, Complete); footnotes 1–7. Accessed 2026-09-23. 4. [Licenses](https://www.at-bay.com/licenses/). At-Bay; At-Bay Insurance Services LLC producer introduction and 50-state P&C/surplus-lines license table. Accessed 2026-09-23. 5. [At-Bay Begins Issuing Policies on its own E&S Paper](https://www.at-bay.com/press_releases/at-bay-begins-issuing-policies-on-its-own-paper/). At-Bay; August 9, 2023 release: "At-Bay ... has begun issuing Cyber and Tech E&O policies under its Delaware-based Excess and Surplus (E&S) carrier, At-Bay Specialty Insurance Company"; "All E&S Cyber and Tech E&O new business in eligible states and territories is now being quoted on At-Bay Specialty Insurance Company paper, as of August 7, 2023". Accessed 2026-09-23. 6. [Claims Handling](https://www.at-bay.com/claims/). At-Bay; At-Bay Cyber Incident Roadmap; Call an At-Bay Breach Coach; The At-Bay Claims Team. Accessed 2026-09-23. ### Sources About CNA 7. [Insurance for Small Businesses](https://www.cna.com/solutions/small-business). CNA; Insurance for Small Businesses, lines 38-50 and 65-67 (CNA Central and agent route); lines 79-106 (product and stated appetite lists); page footer line 132 (CNA registered service mark).. Accessed 2026-09-28. 8. [CNA Connect Small Businessowners Policy (BOP) | CNA Insurance](https://www.cna.com/products/cna-connect). CNA; CNA Connect; coverages, product range, services. Accessed 2026-09-28. 9. [General Disclaimer](https://www.cna.com/cnadisclaimer/generaldisclaimer). CNA; General Disclaimer paragraphs 1 and 5 (HTML lines 24 and 28): CNA describes Continental Casualty Company and its relevant affiliates; references to CNA may include one or more CCC affiliates; each particular policy/product/service is the responsibility only of the specific CNA company that issues or supplies it. Footer line 57 identifies CNA Financial Corporation as trademark registrant. Re-read 2026-09-29.. Accessed 2026-09-29. 10. [Cyber Insurance - Cyber Risk Solutions | CNA Insurance](https://www.cna.com/products/cyber). CNA; Cyber, Media, Technology & Professional Liability; product sections. Accessed 2026-09-28. ### Sources for the Cyber Insurance Guide 11. [Cyber Insurance](https://www.ftc.gov/business-guidance/small-businesses/cybersecurity/cyber-insurance). Federal Trade Commission; Opening; First-Party and Third-Party Coverage; First-Party Coverage; Third-Party Coverage; What Should Your Cyber Insurance Policy Cover. Accessed 2026-09-16. 12. [CyberEdge specimen policy](https://www.aig.com/content/dam/aig/america-canada/us/documents/business/cyber/cyberedge-wording-sample-specimen-form.pdf). AIG; General Terms §§4–6, PDF pp.3–6; Security and Privacy §1 p.11, §2(l)/(p) p.14, §3 pp.15–18, exclusions p.18; Event Management §1 and §2(h), PDF pp.19–20. Accessed 2026-09-16. Updated 2026-09-30. Spot, a product of Tools for Enlightenment, publishes this research and works in the commercial insurance market. The comparison applies the same criteria to both providers. [Editorial policy](https://spot.insure/editorial-policy). To suggest a correction, [contact Spot](https://spot.insure/contact) with the page URL and supporting source. ## At-Bay Review Scores for 2026 Review Score: 9.5 / 10 from 2 rated sources, equally weighted. At-Bay’s public review evidence is thin: one old G2 review and a BBB complaint record. It is not enough to judge day-to-day service or claims handling. - BBB: BBB rating A (A+ to F). At-Bay identity; US commercial insurance review/satisfaction evidence sought on BBB. Period: accessed 2026-09-25. Checked 2026-09-25. [At-Bay | BBB Business Profile](https://www.bbb.org/us/ca/mountain-view/profile/insurance-companies/at-bay-1216-1000025767) - G2: G2 star rating 4.5 (5 stars); 1 reviews. At-Bay company/product feedback; G2 seller profile identifies its offering as cybersecurity insurance and lists San Francisco headquarters. Not an insurance-policy claims or commercial-buyer satisfaction study. Period: review dated 2020-09-21. Checked 2026-09-25. [At-Bay seller profile and reviews](https://www.g2.com/es/sellers/at-bay) Reviewed 2026-09-25. [Read the sourced review](https://spot.insure/insurance-providers/at-bay/reviews). ## CNA Review Scores for 2026 Review Score: 9.0 / 10 from 1 rated source, equally weighted. Customer feedback on CNA is mixed and hard to compare. NerdWallet gave it 4.5 out of 5 for manufacturers, while Trustpilot shows about 1.4 out of 5 from 49 mostly self-selected reviews. - NerdWallet: NerdWallet editorial rating for manufacturers 4.5/5 (Editorial rating). NerdWallet editorial assessment of CNA for U.S. manufacturers, not consumer average. Period: Published 2026-03-26. Checked 2026-09-29. [Best Insurance for Manufacturers in 2026](https://www.nerdwallet.com/business/insurance/learn/manufacturers) - Trustpilot: Displayed Trustpilot TrustScore 1.4/5 page text; 1.5/5 badge (TrustScore out of 5); 49 reviews. CNA.com profile, mixed business and consumer/LTC reports; self-selected, not representative commercial P&C sample. Period: 14 reviews in prior 12 months; 2026-09-29. Checked 2026-09-29. [CNA customer reviews](https://www.trustpilot.com/review/www.cna.com) - BBB: BBB customer-review average 1/5 (BBB star rating); 6 reviews. Long Term Care Insurance profile covering headquarters/corporate locations; not commercial P&C; six self-selected reviews. Period: Displayed 2026-09-29. Checked 2026-09-29. [CNA Financial Corporation customer reviews](https://www.bbb.org/us/il/chicago/profile/long-term-care-insurance/cna-financial-corporation-0683-90032439/customer-reviews) Reviewed 2026-09-29. [Read the sourced review](https://spot.insure/insurance-providers/cna/reviews). ## Agent and Developer Resources - [Markdown page](https://spot.insure/compare/at-bay-vs-cna/cyber.md) - [Developer resources](https://spot.insure/developers) - [Public MCP server](https://spot.insure/mcp) - [MCP server manifest](https://spot.insure/server.json) - [OpenAPI description](https://spot.insure/openapi.json) - [Public page index](https://spot.insure/llms.txt)