At-Bay vs Embroker Cyber Insurance

At-Bay places cyber insurance through its disclosed producer, At-Bay Insurance Services LLC, which is licensed as an insurance producer in all 50 states. At-Bay says eligible new excess-and-surplus (E&S) cyber business has been written on its own carrier paper, At-Bay Specialty Insurance Company, since August 2023. ^4,5Company-reported. Producer role from the current license page; carrier role from a 2023 transition announcement, not confirmed for every current cyber quote.

Embroker sells a standalone cyber liability policy and separately notes lawyers professional liability buyers should also review its cyber page, describing cyber as covering both first-party and third-party losses. ¹⁰Company-reported. Product-page description; not a statement about the issuing insurer for this line.

The current cyber product page does not name an issuing insurer. At-Bay's 2023 announcement says new E&S cyber business is quoted on At-Bay Specialty Insurance Company paper, but that is a historical statement, not a per-quote disclosure. ^3,5Company-reported. Cyber product page checked today names no insurer; the carrier-transition release is dated August 2023 and does not cover every current state or account.

Not described in the reviewed sources.

Not described in the reviewed sources.

Embroker markets cyber coverage to startups and tech companies, financial institutions, professional services firms, small and medium-sized businesses, healthcare providers and law firms, citing data-handling and digital-system exposure as the common thread. ¹⁰Company-reported. Product-page 'Who is cyber insurance coverage for?' section; not a guarantee of eligibility for a particular business.

At-Bay lists direct and contingent business interruption and system failure coverage, social engineering and invoice manipulation coverage for all classes of business, full limits for cryptojacking and bricking, broad cyber extortion coverage including cryptocurrency payment, and reputational-harm coverage for PR costs from adverse publicity. ³Company-reported. Product-page coverage highlights; the issued policy and endorsements control actual terms.

At-Bay sells cyber insurance with optional InsurSec security tiers: Core includes vulnerability monitoring and a fraud-defense sub-limit; Advanced adds a reduced ransomware retention and a zero-hour ransomware waiting period; Complete adds a $0 financial-fraud retention and a $1 million financial-fraud sub-limit. Each higher tier requires a separately purchased managed detection and response (MDR) subscription. ³Company-reported. Product-page InsurSec package descriptions and footnotes; availability depends on the business's risk profile and qualifying conditions.

Embroker lists network security liability, privacy liability, data loss and recovery, business interruption, computer fraud and social-engineering losses, and cyber extortion including ransom payments among what the policy addresses. ¹⁰Company-reported. Product-page 'What does cyber insurance cover?' section; the issued policy and declarations control.

Embroker says a breach response can include notification costs, credit monitoring for affected individuals, civil damages, computer forensics investigation, and coverage for reputational-damage costs such as PR management. ¹⁰Company-reported. Product-page breach-response cost list.

Embroker warns that errors and omissions insurance is not cyber insurance and cannot substitute for it, even if the E&O policy has a technology error rider. ¹⁰Company-reported. Product-page 'Important Note'; distinguishes cyber from Embroker's separate tech E&O/cyber bundled product.

Embroker separates first-party coverage (the policyholder's own incident-response, data-recovery and business-interruption costs) from third-party coverage (legal defense, settlements, regulatory fines and damages to affected parties). ¹⁰Company-reported. Product-page 'First-party coverage vs. third-party coverage' section.

At-Bay says it writes primary and excess cyber insurance for businesses with revenue up to $5 billion and limits up to $10 million. Through its Broker Platform, brokers can get automated quotes only for businesses up to $100 million in revenue and $3 million in limits. ³Company-reported. Published appetite ceilings, not guaranteed offers; underwriting and the appetite guide control individual accounts.

The reviewed cyber product page does not publish specific limit or deductible amounts; a page section titled 'Does cyber insurance have a deductible?' is listed in the index but returns no disclosed figures. ¹⁰Not publicly disclosed. Product page as read on 2026-09-23.

Every At-Bay cyber policy includes access to At-Bay Stance, a security platform with vulnerability monitoring, vCISO advisory and tabletop exercises, and security awareness training. Managed detection and response (MDR) for endpoints or email costs extra, $16 or $25 per user per month respectively, and is sold separately by At-Bay Security, LLC. ³Company-reported. Product-page InsurSec and footnote descriptions; MDR pricing is described as estimated and subject to change.

Not described in the reviewed sources.

You apply for At-Bay cyber coverage by emailing a submission to underwriting@at-bay.com or by requesting an automated quote through At-Bay's Broker Platform. ³Company-reported. Product-page submission instructions; the Broker Platform route is limited to accounts within its lower appetite ceilings.

Embroker offers a free online risk-profile tool and says applicants can request a cyber insurance quote in under 10 minutes by describing their business. ¹⁰Company-reported. Product-page calls to action; no quote was requested during this research.

At-Bay describes an in-house claims team and a named breach-coach phone line for active ransomware or system-interruption incidents, alongside a published cyber incident roadmap that assembles response partners after a claim is reported. ⁶Company-reported. Claims-handling page process description; does not establish claim outcomes or payment speed.

Not described in the reviewed sources.