At-Bay vs Gallagher: How Do They Compare for Cyber Insurance?

Gallagher Small Business arranges cyber for small firms with outside carriers; At-Bay spells out coverage such as social engineering and reputational harm and offers security tiers.

Gallagher recommends cyber for small businesses that handle customer data or take card or electronic-funds payments, naming retail, healthcare, financial services and home-repair. At-Bay includes Stance monitoring and writes primary and excess cyber for revenue up to $5 billion and limits up to $10 million. ^5,¹

What Are the Key Differences Between At-Bay and Gallagher Cyber Insurance?

Payment-Heavy Trades Versus Published Appetite Ceilings

Gallagher Small Business arranges cyber with outside carriers and recommends it for firms that handle customer data or accept credit-card or electronic-funds-transfer payments, specifically naming retail, healthcare, financial services and home-repair. At-Bay describes coverage by features and limit ceilings rather than those trades, writing primary and excess cyber up to $5 billion in revenue and $10 million in limits, with Stance included. Choose Gallagher if you take card payments in those named trades and want a broker; choose At-Bay if you want Stance and those published ceilings. ⁵ ¹

eRiskHub for Larger Accounts Versus Stance on Every Policy

For larger accounts, Gallagher's group-level cyber practice gives clients the Gallagher eRiskHub portal and a dedicated claims team that includes cyber forensic accountants. At-Bay includes Stance on every policy, not only large accounts, and publishes a breach-coach phone line; optional InsurSec tiers require paid MDR. Gallagher does not publish limits; At-Bay does. Neither Gallagher page names the issuing insurer. ⁶ ¹ ⁴

What Should You Confirm in At-Bay and Gallagher Cyber Insurance Quotes?

Ask Gallagher whether you are on the small-business desk or the group practice with eRiskHub. ⁶
Ask At-Bay which appetite band and Stance tier apply. ¹
Get Gallagher's proposed limit in writing; At-Bay's $10 million figure is a published ceiling, not a quote. ⁵ ¹

At-Bay vs Gallagher Cyber Insurance Compared

At-Bay vs Gallagher: Cyber Insurance: documented features by provider

Criteria	At-Bay Cyber Insurance	Gallagher Cyber Liability Insurance
Coverage Features	At-Bay lists direct and contingent business interruption and system failure coverage, social engineering and invoice manipulation coverage for all classes of business, full limits for cryptojacking and bricking, broad cyber extortion coverage including cryptocurrency payment, and reputational-harm coverage for PR costs from adverse publicity. ¹Company-reported. Product-page coverage highlights; the issued policy and endorsements control actual terms. At-Bay sells cyber insurance with optional InsurSec security tiers: Core includes vulnerability monitoring and a fraud-defense sub-limit; Advanced adds a reduced ransomware retention and a zero-hour ransomware waiting period; Complete adds a $0 financial-fraud retention and a $1 million financial-fraud sub-limit. Each higher tier requires a separately purchased managed detection and response (MDR) subscription. ¹Company-reported. Product-page InsurSec package descriptions and footnotes; availability depends on the business's risk profile and qualifying conditions.	Gallagher describes two components of cyber coverage: first-party coverage for when a business's own technology or data is breached, and third-party coverage for when a customer sues the business for failing to prevent a breach. It says the policy can cover customer notification, credit monitoring, legal fees and regulatory fines. ⁵Company-reported. Small-business cyber product page; a coverage description, not a specific policy's insuring agreement or exclusions. Gallagher's small-business team says cyber insurance rates are flat to down due to competitive market forces despite high-profile losses, and flags generative-AI-driven risks such as more convincing phishing, social-engineering and deepfake attacks as an emerging concern. ⁵Company-reported. Small-business cyber product page market-commentary section; a general market view, not a quote for any specific business.
Role in This Line	At-Bay places cyber insurance through its disclosed producer, At-Bay Insurance Services LLC, which is licensed as an insurance producer in all 50 states. At-Bay says eligible new excess-and-surplus (E&S) cyber business has been written on its own carrier paper, At-Bay Specialty Insurance Company, since August 2023. ^2,³Company-reported. Producer role from the current license page; carrier role from a 2023 transition announcement, not confirmed for every current cyber quote.	Gallagher Small Business arranges cyber liability coverage with outside carriers for small businesses; Gallagher's group-level practice separately places cyber coverage with its own risk-consulting services for larger accounts. Gallagher does not underwrite either policy. ^5,⁶Company-reported. Small-business cyber product page and the group-level cyber liability page.
Risk Services	Every At-Bay cyber policy includes access to At-Bay Stance, a security platform with vulnerability monitoring, vCISO advisory and tabletop exercises, and security awareness training. Managed detection and response (MDR) for endpoints or email costs extra, $16 or $25 per user per month respectively, and is sold separately by At-Bay Security, LLC. ¹Company-reported. Product-page InsurSec and footnote descriptions; MDR pricing is described as estimated and subject to change.	For larger accounts, Gallagher's group-level cyber practice gives clients access to the Gallagher eRiskHub risk-management portal and a dedicated claims team that includes cyber forensic accountants; the small-business product page does not describe an equivalent service for that segment. ⁶Company-reported. Group-level cyber liability page; not confirmed as included with the small-business product.

Criteria

At-Bay Cyber Insurance

Gallagher Cyber Liability Insurance

Coverage Features

At-Bay lists direct and contingent business interruption and system failure coverage, social engineering and invoice manipulation coverage for all classes of business, full limits for cryptojacking and bricking, broad cyber extortion coverage including cryptocurrency payment, and reputational-harm coverage for PR costs from adverse publicity. ¹Company-reported. Product-page coverage highlights; the issued policy and endorsements control actual terms.

At-Bay sells cyber insurance with optional InsurSec security tiers: Core includes vulnerability monitoring and a fraud-defense sub-limit; Advanced adds a reduced ransomware retention and a zero-hour ransomware waiting period; Complete adds a $0 financial-fraud retention and a $1 million financial-fraud sub-limit. Each higher tier requires a separately purchased managed detection and response (MDR) subscription. ¹Company-reported. Product-page InsurSec package descriptions and footnotes; availability depends on the business's risk profile and qualifying conditions.

Gallagher describes two components of cyber coverage: first-party coverage for when a business's own technology or data is breached, and third-party coverage for when a customer sues the business for failing to prevent a breach. It says the policy can cover customer notification, credit monitoring, legal fees and regulatory fines. ⁵Company-reported. Small-business cyber product page; a coverage description, not a specific policy's insuring agreement or exclusions.

Gallagher's small-business team says cyber insurance rates are flat to down due to competitive market forces despite high-profile losses, and flags generative-AI-driven risks such as more convincing phishing, social-engineering and deepfake attacks as an emerging concern. ⁵Company-reported. Small-business cyber product page market-commentary section; a general market view, not a quote for any specific business.

Role in This Line

At-Bay places cyber insurance through its disclosed producer, At-Bay Insurance Services LLC, which is licensed as an insurance producer in all 50 states. At-Bay says eligible new excess-and-surplus (E&S) cyber business has been written on its own carrier paper, At-Bay Specialty Insurance Company, since August 2023. ^2,³Company-reported. Producer role from the current license page; carrier role from a 2023 transition announcement, not confirmed for every current cyber quote.

Gallagher Small Business arranges cyber liability coverage with outside carriers for small businesses; Gallagher's group-level practice separately places cyber coverage with its own risk-consulting services for larger accounts. Gallagher does not underwrite either policy. ^5,⁶Company-reported. Small-business cyber product page and the group-level cyber liability page.

Risk Services

Every At-Bay cyber policy includes access to At-Bay Stance, a security platform with vulnerability monitoring, vCISO advisory and tabletop exercises, and security awareness training. Managed detection and response (MDR) for endpoints or email costs extra, $16 or $25 per user per month respectively, and is sold separately by At-Bay Security, LLC. ¹Company-reported. Product-page InsurSec and footnote descriptions; MDR pricing is described as estimated and subject to change.

For larger accounts, Gallagher's group-level cyber practice gives clients access to the Gallagher eRiskHub risk-management portal and a dedicated claims team that includes cyber forensic accountants; the small-business product page does not describe an equivalent service for that segment. ⁶Company-reported. Group-level cyber liability page; not confirmed as included with the small-business product.