At-Bay vs Harper Cyber Insurance

At-Bay places cyber insurance through its disclosed producer, At-Bay Insurance Services LLC, which is licensed as an insurance producer in all 50 states. At-Bay says eligible new excess-and-surplus (E&S) cyber business has been written on its own carrier paper, At-Bay Specialty Insurance Company, since August 2023. ^4,5Company-reported. Producer role from the current license page; carrier role from a 2023 transition announcement, not confirmed for every current cyber quote.

For cyber insurance, Harper describes calling the insurance companies that write the coverage for a business and presenting the resulting options to choose from, rather than issuing a cyber policy itself. ¹⁰Company-reported. Homepage 'What we cover' introduction and coverage list, where cyber is one of the enumerated lines.

The current cyber product page does not name an issuing insurer. At-Bay's 2023 announcement says new E&S cyber business is quoted on At-Bay Specialty Insurance Company paper, but that is a historical statement, not a per-quote disclosure. ^3,5Company-reported. Cyber product page checked today names no insurer; the carrier-transition release is dated August 2023 and does not cover every current state or account.

Harper's public pages do not name the insurer or insurers that would underwrite a cyber policy; the homepage shows an unlabeled panel of insurer logos it says it works with, without listing carriers for cyber specifically. ¹⁰Not publicly disclosed. Checked the homepage insurer-logo panel and eCommerce industry page on 2026-09-23.

Not described in the reviewed sources.

Harper positions cyber coverage as relevant to online retailers, dropshipping businesses, marketplace sellers and private-label or direct-to-consumer brands on its eCommerce industry page, while also listing cyber as a general coverage option for any business on the homepage intake. ^9,10Company-reported. eCommerce industry page 'Who this is for' section combined with the homepage's general cyber checkbox; no cyber-specific eligibility criteria (such as revenue thresholds) were found.

At-Bay lists direct and contingent business interruption and system failure coverage, social engineering and invoice manipulation coverage for all classes of business, full limits for cryptojacking and bricking, broad cyber extortion coverage including cryptocurrency payment, and reputational-harm coverage for PR costs from adverse publicity. ³Company-reported. Product-page coverage highlights; the issued policy and endorsements control actual terms.

At-Bay sells cyber insurance with optional InsurSec security tiers: Core includes vulnerability monitoring and a fraud-defense sub-limit; Advanced adds a reduced ransomware retention and a zero-hour ransomware waiting period; Complete adds a $0 financial-fraud retention and a $1 million financial-fraud sub-limit. Each higher tier requires a separately purchased managed detection and response (MDR) subscription. ³Company-reported. Product-page InsurSec package descriptions and footnotes; availability depends on the business's risk profile and qualifying conditions.

Harper's homepage summarizes cyber insurance as coverage for the cleanup if a business's systems or card payments get hacked. ¹⁰Company-reported. Homepage 'What we cover' blurb; the issued policy and declarations would control actual insuring agreements and exclusions.

On its eCommerce industry page, Harper describes cyber protection as covering data breaches, payment fraud, hacking incidents and exposure of customer information, and its FAQ adds that cyber liability coverage may apply to customer notification costs, credit monitoring and certain regulatory expenses. ⁹Company-reported. eCommerce industry page; this description is given in the context of online retailers, dropshippers, marketplace sellers and DTC brands, and may not describe cyber coverage the same way for other industries.

At-Bay says it writes primary and excess cyber insurance for businesses with revenue up to $5 billion and limits up to $10 million. Through its Broker Platform, brokers can get automated quotes only for businesses up to $100 million in revenue and $3 million in limits. ³Company-reported. Published appetite ceilings, not guaranteed offers; underwriting and the appetite guide control individual accounts.

The reviewed pages do not publish cyber policy limits, retentions or a claims-made versus occurrence trigger; the eCommerce page's cost FAQ discusses eCommerce insurance overall rather than cyber coverage alone, so it is not used as a cyber-specific figure here. ^10,9Not publicly disclosed. Checked the homepage and eCommerce industry page on 2026-09-23.

Every At-Bay cyber policy includes access to At-Bay Stance, a security platform with vulnerability monitoring, vCISO advisory and tabletop exercises, and security awareness training. Managed detection and response (MDR) for endpoints or email costs extra, $16 or $25 per user per month respectively, and is sold separately by At-Bay Security, LLC. ³Company-reported. Product-page InsurSec and footnote descriptions; MDR pricing is described as estimated and subject to change.

Not described in the reviewed sources.

You apply for At-Bay cyber coverage by emailing a submission to underwriting@at-bay.com or by requesting an automated quote through At-Bay's Broker Platform. ³Company-reported. Product-page submission instructions; the Broker Platform route is limited to accounts within its lower appetite ceilings.

You can start a cyber quote through Harper's online intake by selecting the 'Hacking, data breaches, card fraud (cyber)' checkbox alongside the business's state, estimated annual revenue and a description of what it does. ¹⁰Company-reported. Homepage quote-intake form.

At-Bay describes an in-house claims team and a named breach-coach phone line for active ransomware or system-interruption incidents, alongside a published cyber incident roadmap that assembles response partners after a claim is reported. ⁶Company-reported. Claims-handling page process description; does not establish claim outcomes or payment speed.

Not described in the reviewed sources.