At-Bay vs Hiscox Cyber Insurance

At-Bay places cyber insurance through its disclosed producer, At-Bay Insurance Services LLC, which is licensed as an insurance producer in all 50 states. At-Bay says eligible new excess-and-surplus (E&S) cyber business has been written on its own carrier paper, At-Bay Specialty Insurance Company, since August 2023. ^4,5Company-reported. Producer role from the current license page; carrier role from a 2023 transition announcement, not confirmed for every current cyber quote.

Hiscox Inc. sells cyber insurance directly online as a standalone product for small businesses, separate from its business owner's policy, which also offers an optional cyber add-on. ¹⁰Company-reported. Company-stated standalone small-business cyber product; the BOP cyber add-on is a distinct package option described on a different page.

The current cyber product page does not name an issuing insurer. At-Bay's 2023 announcement says new E&S cyber business is quoted on At-Bay Specialty Insurance Company paper, but that is a historical statement, not a per-quote disclosure. ^3,5Company-reported. Cyber product page checked today names no insurer; the carrier-transition release is dated August 2023 and does not cover every current state or account.

Hiscox's appetite guide and About Hiscox US page name Hiscox Insurance Company Inc. (NAIC 10200) as the underwriter of admitted Hiscox NOW cyber policies. ^12,9Company-reported. Admitted small-business cyber coverage as described in company materials; the exact contracting entity for a particular state or channel should be confirmed on the quote.

Not described in the reviewed sources.

Hiscox markets cyber insurance to small businesses broadly and specifically to IT and technology consultants, describing itself as customizing coverage for the technology sector's data-handling and security exposures. ^10,11Company-reported. Company-stated audience across the standalone cyber page and the IT-insurance page.

At-Bay lists direct and contingent business interruption and system failure coverage, social engineering and invoice manipulation coverage for all classes of business, full limits for cryptojacking and bricking, broad cyber extortion coverage including cryptocurrency payment, and reputational-harm coverage for PR costs from adverse publicity. ³Company-reported. Product-page coverage highlights; the issued policy and endorsements control actual terms.

At-Bay sells cyber insurance with optional InsurSec security tiers: Core includes vulnerability monitoring and a fraud-defense sub-limit; Advanced adds a reduced ransomware retention and a zero-hour ransomware waiting period; Complete adds a $0 financial-fraud retention and a $1 million financial-fraud sub-limit. Each higher tier requires a separately purchased managed detection and response (MDR) subscription. ³Company-reported. Product-page InsurSec package descriptions and footnotes; availability depends on the business's risk profile and qualifying conditions.

Hiscox describes cyber coverage as responding to data breaches, cyberattacks and related losses, and its IT-insurance page shows an illustrative breach-response example describing notification and related costs after a data incident. ^10,11Company-reported. Product-page description; the illustrative example is explicitly a hypothetical scenario, not a specific limit or claim outcome, and actual coverage terms are set by the issued policy.

At-Bay says it writes primary and excess cyber insurance for businesses with revenue up to $5 billion and limits up to $10 million. Through its Broker Platform, brokers can get automated quotes only for businesses up to $100 million in revenue and $3 million in limits. ³Company-reported. Published appetite ceilings, not guaranteed offers; underwriting and the appetite guide control individual accounts.

The cyber product page does not publish standard limit, retention or deductible amounts; figures shown elsewhere on the site are illustrative examples rather than quotes. ¹⁰Not publicly disclosed. Public product page as previously reviewed.

Every At-Bay cyber policy includes access to At-Bay Stance, a security platform with vulnerability monitoring, vCISO advisory and tabletop exercises, and security awareness training. Managed detection and response (MDR) for endpoints or email costs extra, $16 or $25 per user per month respectively, and is sold separately by At-Bay Security, LLC. ³Company-reported. Product-page InsurSec and footnote descriptions; MDR pricing is described as estimated and subject to change.

The reviewed cyber product page does not describe ongoing security-monitoring or risk-prevention services made available to policyholders; it describes post-incident breach-response coverage rather than a monitoring service. ¹⁰Not found in reviewed sources. Standalone cyber product page as previously reviewed.

You apply for At-Bay cyber coverage by emailing a submission to underwriting@at-bay.com or by requesting an automated quote through At-Bay's Broker Platform. ³Company-reported. Product-page submission instructions; the Broker Platform route is limited to accounts within its lower appetite ceilings.

Hiscox says eligible buyers can get a cyber insurance quote online, with a licensed-agent phone line available for questions during the process. ¹⁰Company-reported. Company-described online application; eligibility and binding conditions require confirmation on the actual application.

At-Bay describes an in-house claims team and a named breach-coach phone line for active ransomware or system-interruption incidents, alongside a published cyber incident roadmap that assembles response partners after a claim is reported. ⁶Company-reported. Claims-handling page process description; does not establish claim outcomes or payment speed.

Not described in the reviewed sources.