At-Bay vs Gallagher Cyber Insurance

At-Bay places cyber insurance through its disclosed producer, At-Bay Insurance Services LLC, which is licensed as an insurance producer in all 50 states. At-Bay says eligible new excess-and-surplus (E&S) cyber business has been written on its own carrier paper, At-Bay Specialty Insurance Company, since August 2023. ^4,5Company-reported. Producer role from the current license page; carrier role from a 2023 transition announcement, not confirmed for every current cyber quote.

Gallagher Small Business arranges cyber liability coverage with outside carriers for small businesses; Gallagher's group-level practice separately places cyber coverage with its own risk-consulting services for larger accounts. Gallagher does not underwrite either policy. ^12,13Company-reported. Small-business cyber product page and the group-level cyber liability page.

The current cyber product page does not name an issuing insurer. At-Bay's 2023 announcement says new E&S cyber business is quoted on At-Bay Specialty Insurance Company paper, but that is a historical statement, not a per-quote disclosure. ^3,5Company-reported. Cyber product page checked today names no insurer; the carrier-transition release is dated August 2023 and does not cover every current state or account.

Neither the small-business cyber page nor the group-level cyber liability page names the insurer that would issue a given client's policy. ^12,13Not publicly disclosed. Checked both pages on 2026-09-23.

Not described in the reviewed sources.

Gallagher recommends this coverage for small businesses that handle customer data or accept credit card or electronic-funds-transfer payments, and specifically names retail, healthcare, financial services and home-repair businesses as frequent attack targets. ¹²Company-reported. Small-business cyber product page "Who needs Cyber Liability Insurance" section; actual acceptance depends on underwriting.

At-Bay lists direct and contingent business interruption and system failure coverage, social engineering and invoice manipulation coverage for all classes of business, full limits for cryptojacking and bricking, broad cyber extortion coverage including cryptocurrency payment, and reputational-harm coverage for PR costs from adverse publicity. ³Company-reported. Product-page coverage highlights; the issued policy and endorsements control actual terms.

At-Bay sells cyber insurance with optional InsurSec security tiers: Core includes vulnerability monitoring and a fraud-defense sub-limit; Advanced adds a reduced ransomware retention and a zero-hour ransomware waiting period; Complete adds a $0 financial-fraud retention and a $1 million financial-fraud sub-limit. Each higher tier requires a separately purchased managed detection and response (MDR) subscription. ³Company-reported. Product-page InsurSec package descriptions and footnotes; availability depends on the business's risk profile and qualifying conditions.

Gallagher describes two components of cyber coverage: first-party coverage for when a business's own technology or data is breached, and third-party coverage for when a customer sues the business for failing to prevent a breach. It says the policy can cover customer notification, credit monitoring, legal fees and regulatory fines. ¹²Company-reported. Small-business cyber product page; a coverage description, not a specific policy's insuring agreement or exclusions.

Gallagher's small-business team says cyber insurance rates are flat to down due to competitive market forces despite high-profile losses, and flags generative-AI-driven risks such as more convincing phishing, social-engineering and deepfake attacks as an emerging concern. ¹²Company-reported. Small-business cyber product page market-commentary section; a general market view, not a quote for any specific business.

At-Bay says it writes primary and excess cyber insurance for businesses with revenue up to $5 billion and limits up to $10 million. Through its Broker Platform, brokers can get automated quotes only for businesses up to $100 million in revenue and $3 million in limits. ³Company-reported. Published appetite ceilings, not guaranteed offers; underwriting and the appetite guide control individual accounts.

Neither page publishes specific cyber coverage limits, retentions or premium ranges; the small-business page's $60 million claim example is an illustrative scenario, not a stated policy limit. ^12,13Not publicly disclosed. Checked both pages on 2026-09-23.

Every At-Bay cyber policy includes access to At-Bay Stance, a security platform with vulnerability monitoring, vCISO advisory and tabletop exercises, and security awareness training. Managed detection and response (MDR) for endpoints or email costs extra, $16 or $25 per user per month respectively, and is sold separately by At-Bay Security, LLC. ³Company-reported. Product-page InsurSec and footnote descriptions; MDR pricing is described as estimated and subject to change.

For larger accounts, Gallagher's group-level cyber practice gives clients access to the Gallagher eRiskHub risk-management portal and a dedicated claims team that includes cyber forensic accountants; the small-business product page does not describe an equivalent service for that segment. ¹³Company-reported. Group-level cyber liability page; not confirmed as included with the small-business product.

You apply for At-Bay cyber coverage by emailing a submission to underwriting@at-bay.com or by requesting an automated quote through At-Bay's Broker Platform. ³Company-reported. Product-page submission instructions; the Broker Platform route is limited to accounts within its lower appetite ceilings.

Not described in the reviewed sources.

At-Bay describes an in-house claims team and a named breach-coach phone line for active ransomware or system-interruption incidents, alongside a published cyber incident roadmap that assembles response partners after a claim is reported. ⁶Company-reported. Claims-handling page process description; does not establish claim outcomes or payment speed.

Not described in the reviewed sources.