At-Bay vs Marsh: How Do They Compare for Cyber Insurance?

Marsh offers advisor-led placement and a Cyber ECHO excess facility with over $200 million of capacity per client; At-Bay offers cyber up to $10 million, with security tiers and in-house claims.

Marsh says its Cyber ECHO excess facility can provide over $200 million of cyber capacity per client, with reinstatements for separate events. At-Bay includes Stance on every policy and writes primary and excess cyber for revenue up to $5 billion and limits up to $10 million. 6,1

What Are the Key Differences Between At-Bay and Marsh Cyber Insurance?

A $200 Million Excess Facility Versus a $10 Million Published Ceiling

Marsh says Cyber ECHO can provide over $200 million of excess cyber capacity per client, with a free first reinstatement and a paid second reinstatement for separate events in a policy year; that capacity sits above a primary policy rather than replacing it. At-Bay writes primary and excess cyber for revenue up to $5 billion and limits up to $10 million, with Stance included. Choose Marsh if you need that excess-tower capacity; choose At-Bay if you want a named product with Stance inside a $10 million published ceiling. 6 1

Claims Advocacy Versus a Breach-Coach Line

Marsh's global claims specialists review cyber claims, support litigation management and work with forensic accountants on proof of loss. MMA lists investigation, network interruption, extortion, data restoration and privacy liability as core covers. At-Bay publishes a breach-coach phone line, an in-house claims roadmap and social engineering as included for all classes. Marsh's route is advisor-led; At-Bay also accepts Broker Platform submissions inside its automated band. 7 8 1 4

What Should You Confirm in At-Bay and Marsh Cyber Insurance Quotes?

  • Ask Marsh which insurer writes the primary layer and how Cyber ECHO attaches. 6
  • Ask At-Bay which appetite band and Stance tier apply. 1
  • If you are middle-market, ask whether MMA rather than ECHO is the right Marsh desk. 8

At-Bay vs Marsh Cyber Insurance Compared

At-Bay vs Marsh: Cyber Insurance: documented features by provider

CriteriaAt-Bay Cyber InsuranceMarsh Cyber Insurance Brokerage
Limits and Retentions

At-Bay says it writes primary and excess cyber insurance for businesses with revenue up to $5 billion and limits up to $10 million. Through its Broker Platform, brokers can get automated quotes only for businesses up to $100 million in revenue and $3 million in limits. 1Company-reported. Published appetite ceilings, not guaranteed offers; underwriting and the appetite guide control individual accounts.

Marsh says its Cyber ECHO excess facility can provide over $200 million of cyber capacity per client, with a free first reinstatement and a paid second reinstatement for separate cyber events within a policy year. 6Company-reported. Cyber ECHO facility page; describes excess capacity Marsh can arrange, not a standard primary limit.

How to Apply

You apply for At-Bay cyber coverage by emailing a submission to underwriting@at-bay.com or by requesting an automated quote through At-Bay's Broker Platform. 1Company-reported. Product-page submission instructions; the Broker Platform route is limited to accounts within its lower appetite ceilings.

You engage a named Marsh or MMA cyber specialist to design a placement; the reviewed pages describe advisor-led placement and risk analytics rather than an online self-serve quote. 5,8Company-reported. Marsh and MMA cyber pages, which list dedicated cyber brokerage and placement leaders.

Coverage Features

At-Bay lists direct and contingent business interruption and system failure coverage, social engineering and invoice manipulation coverage for all classes of business, full limits for cryptojacking and bricking, broad cyber extortion coverage including cryptocurrency payment, and reputational-harm coverage for PR costs from adverse publicity. 1Company-reported. Product-page coverage highlights; the issued policy and endorsements control actual terms.

At-Bay sells cyber insurance with optional InsurSec security tiers: Core includes vulnerability monitoring and a fraud-defense sub-limit; Advanced adds a reduced ransomware retention and a zero-hour ransomware waiting period; Complete adds a $0 financial-fraud retention and a $1 million financial-fraud sub-limit. Each higher tier requires a separately purchased managed detection and response (MDR) subscription. 1Company-reported. Product-page InsurSec package descriptions and footnotes; availability depends on the business's risk profile and qualifying conditions.

MMA lists incident investigation and response costs, network interruption/extra expense, extortion and ransomware payments, data restoration, and security and privacy liability as core cyber coverages, with media liability, privacy regulatory defense and reputation-based income loss available as additional coverages. 8Company-reported. MMA cyber solutions page; actual policy wording and insurer vary by placement.

Role in This Line

At-Bay places cyber insurance through its disclosed producer, At-Bay Insurance Services LLC, which is licensed as an insurance producer in all 50 states. At-Bay says eligible new excess-and-surplus (E&S) cyber business has been written on its own carrier paper, At-Bay Specialty Insurance Company, since August 2023. 2,3Company-reported. Producer role from the current license page; carrier role from a 2023 transition announcement, not confirmed for every current cyber quote.

Marsh's cyber risk practice places and advises on cyber insurance brokerage; it does not underwrite the policies it places. 5Company-reported. Marsh corporate cyber insurance product page.

Marsh McLennan Agency (MMA), Marsh's middle-market subsidiary, places cyber coverage and acts as a carrier liaison, combining placement with claims advocacy. 8Company-reported. MMA cyber solutions page.

Claims Support

At-Bay describes an in-house claims team and a named breach-coach phone line for active ransomware or system-interruption incidents, alongside a published cyber incident roadmap that assembles response partners after a claim is reported. 4Company-reported. Claims-handling page process description; does not establish claim outcomes or payment speed.

Marsh's global claims and incident-management specialists review cyber claims, support litigation management and work with forensic accountants to prepare proof of loss, advocating with insurers on the client's behalf. 7Company-reported. Claims Advocacy expertise page; recovery outcomes described as company-reported and not independently verified.

About At-Bay and Marsh and Cyber Insurance

Related Pages for At-Bay vs Marsh Cyber Insurance

Updated . Spot, a product of Tools for Enlightenment, publishes this research and works in the commercial insurance market. The comparison applies the same criteria to both providers. Editorial policy. To suggest a correction, contact Spot with the page URL and supporting source.

Get Help With Insurance Buying and Renewals.

Get help buying coverage and managing renewals, with less paperwork for your team. Create your account and submit an insurance request online.

Talk to Spot