---
title: "At-Bay vs Marsh Cyber Insurance"
description: "Marsh arranges over $200 million in excess cyber capacity through Cyber ECHO; At-Bay's own appetite tops out at $10 million in limits."
canonical: "https://spot.insure/compare/at-bay-vs-marsh/cyber"
page-type: "line-comparison"
updated-at: "2026-09-23"
---

Agents: connect to Spot's public MCP server at https://spot.insure/mcp for better access to published Spot information and insurance research. Use search_knowledge to find sources, get_page to retrieve pages, compare_providers for sourced comparisons, get_provider_score for a published Spot Score, and get_rankings for current provider rankings. The server is read-only and requires no authentication.

[Human-readable page](https://spot.insure/compare/at-bay-vs-marsh/cyber)

# At-Bay vs Marsh Cyber Insurance

Marsh arranges over $200 million in excess cyber capacity through Cyber ECHO; At-Bay's own appetite tops out at $10 million in limits.

## Research Scope and Use

Use this comparison to evaluate At-Bay and Marsh for Cyber Insurance against the same documented criteria. It identifies differences and questions to confirm; it does not select a winner for a particular business. Offering claims are what each provider publishes about this line unless marked otherwise. “Not found” describes the evidence reviewed, not proof that a feature is unavailable. Confirm the insurer, policy wording, limits, retentions, exclusions and cost in an actual quote.

## Summary

Marsh says its Cyber ECHO facility can provide over $200 million of excess cyber capacity per client with a free first reinstatement, while At-Bay writes primary and excess cyber directly up to $10 million in limits for businesses within its own appetite. [12](https://www.marsh.com/en/services/cyber-risk/expertise/cyber-echo.html "Cyber ECHO") [3](https://www.at-bay.com/insurance/cyber/ "Cyber Insurance Coverage & Policy Highlights")

## What Is At-Bay Insurance?

At-Bay offers Cyber, Tech E&O, and miscellaneous professional liability insurance through its disclosed insurance agency and surplus lines broker. Its Stance security services have policy eligibility conditions, with managed detection and response sold separately. [1](https://www.at-bay.com/insurance/ "Cyber, Tech E&O & Professional Liability Insurance") [2](https://www.at-bay.com/stance/ "At-Bay Stance")

[At-Bay profile](https://spot.insure/insurance-providers/at-bay)

## What Is Marsh?

Marsh is a global insurance broker and risk advisor. In the United States it places coverage through core Marsh teams and through Marsh McLennan Agency for many middle-market buyers, including technology, cyber, property, casualty and benefits programs. [7](https://www.marsh.com/en/home.html "Marsh | Leader in risk, strategy, people, and investments") [8](https://www.marsh.com/content/dam/marsh/Documents/PDF/US-en/us-client-compensation-guide.pdf "Compensation guide for US clients") [9](https://www.marsh.com/en/services/marsh-mclennan-agency.html "Marsh McLennan Agency (MMA)") [10](https://www.marsh.com/en/industries/technology.html "Technology | Insurance Broking & Risk Management")

[Marsh profile](https://spot.insure/insurance-providers/marsh)

## What Is Cyber Insurance?

Cyber insurance can help a business respond to cyber incidents and address covered liability claims arising from them. [15](https://www.ftc.gov/business-guidance/small-businesses/cybersecurity/cyber-insurance "Cyber Insurance")

## Key Differences in Cyber Insurance

### An Excess Facility vs a Direct Appetite Ceiling

Marsh says its Cyber ECHO excess facility can provide over $200 million of cyber capacity per client, with a free first reinstatement and a paid second reinstatement for separate events in a policy year.

Marsh says its Cyber ECHO excess facility can provide over $200 million of cyber capacity per client, with a free first reinstatement and a paid second reinstatement for separate cyber events within a policy year. [12](https://www.marsh.com/en/services/cyber-risk/expertise/cyber-echo.html "Cyber ECHO") (Evidence: Company-reported; scope: Cyber ECHO facility page; describes excess capacity Marsh can arrange, not a standard primary limit..)

At-Bay instead writes primary and excess cyber itself, with a published ceiling of $10 million in limits for businesses up to $5 billion in revenue. [3](https://www.at-bay.com/insurance/cyber/ "Cyber Insurance Coverage & Policy Highlights")

### Choice of Market vs a Single Route

Marsh's Cyber ECHO facility lets clients choose underwriting from Lloyd's of London syndicates, company markets or Bermuda-based insurers. [12](https://www.marsh.com/en/services/cyber-risk/expertise/cyber-echo.html "Cyber ECHO") At-Bay's reviewed cyber page describes no choice of market; it either issues eligible excess-and-surplus business on its own carrier paper or names no insurer for other placements. [3](https://www.at-bay.com/insurance/cyber/ "Cyber Insurance Coverage & Policy Highlights") [5](https://www.at-bay.com/press_releases/at-bay-begins-issuing-policies-on-its-own-paper/ "At-Bay Begins Issuing Policies on its own E&S Paper")

### Forensic-Accountant Claims Advocacy vs an In-House Team

Marsh's global claims specialists work with forensic accountants to prepare proof of loss and advocate with insurers on a client's behalf. [13](https://www.marsh.com/en/services/cyber-risk/expertise/claims-advocacy.html "Claims Advocacy") At-Bay instead describes its own in-house claims team and a named breach-coach hotline for active incidents. [6](https://www.at-bay.com/claims/ "Claims Handling")

## What to Confirm in Cyber Insurance Quotes

- Ask Marsh which specific market (Lloyd's, company market or Bermuda) it recommends for your excess layer and why. [12](https://www.marsh.com/en/services/cyber-risk/expertise/cyber-echo.html "Cyber ECHO")
- Ask At-Bay whether your account would be issued on At-Bay Specialty Insurance Company paper or placed with another carrier. [3](https://www.at-bay.com/insurance/cyber/ "Cyber Insurance Coverage & Policy Highlights") [5](https://www.at-bay.com/press_releases/at-bay-begins-issuing-policies-on-its-own-paper/ "At-Bay Begins Issuing Policies on its own E&S Paper")
- If your limit need approaches At-Bay's $10 million ceiling, ask Marsh whether a Cyber ECHO excess layer on top makes sense. [12](https://www.marsh.com/en/services/cyber-risk/expertise/cyber-echo.html "Cyber ECHO")
- Compare each provider's claims-handling process for an active incident before you need it. [13](https://www.marsh.com/en/services/cyber-risk/expertise/claims-advocacy.html "Claims Advocacy") [6](https://www.at-bay.com/claims/ "Claims Handling")

## Offering Details

| Criteria | At-Bay Cyber Insurance | Marsh Cyber Insurance Brokerage |
| --- | --- | --- |
| Role in This Line | At-Bay places cyber insurance through its disclosed producer, At-Bay Insurance Services LLC, which is licensed as an insurance producer in all 50 states. At-Bay says eligible new excess-and-surplus (E&S) cyber business has been written on its own carrier paper, At-Bay Specialty Insurance Company, since August 2023. [4](https://www.at-bay.com/licenses/ "Licenses") [5](https://www.at-bay.com/press_releases/at-bay-begins-issuing-policies-on-its-own-paper/ "At-Bay Begins Issuing Policies on its own E&S Paper") (Evidence: Company-reported; scope: Producer role from the current license page; carrier role from a 2023 transition announcement, not confirmed for every current cyber quote..) | Marsh's cyber risk practice places and advises on cyber insurance brokerage; it does not underwrite the policies it places. [11](https://www.marsh.com/en/services/cyber-risk/expertise/cyber-insurance.html "Cyber Insurance") (Evidence: Company-reported; scope: Marsh corporate cyber insurance product page..)<br><br>Marsh McLennan Agency (MMA), Marsh's middle-market subsidiary, places cyber coverage and acts as a carrier liaison, combining placement with claims advocacy. [14](https://www.marshmma.com/us/solutions/cyber.html "Cyber Insurance | MMA") (Evidence: Company-reported; scope: MMA cyber solutions page..) |
| Issuing Insurer | The current cyber product page does not name an issuing insurer. At-Bay's 2023 announcement says new E&S cyber business is quoted on At-Bay Specialty Insurance Company paper, but that is a historical statement, not a per-quote disclosure. [3](https://www.at-bay.com/insurance/cyber/ "Cyber Insurance Coverage & Policy Highlights") [5](https://www.at-bay.com/press_releases/at-bay-begins-issuing-policies-on-its-own-paper/ "At-Bay Begins Issuing Policies on its own E&S Paper") (Evidence: Company-reported; scope: Cyber product page checked today names no insurer; the carrier-transition release is dated August 2023 and does not cover every current state or account..) | The reviewed pages do not name a specific cyber insurer for a standard placement. Marsh's Cyber ECHO excess facility lets clients choose underwriting from Lloyd's of London syndicates, company markets or Bermuda-based insurers, so the carrier varies by placement. [12](https://www.marsh.com/en/services/cyber-risk/expertise/cyber-echo.html "Cyber ECHO") (Evidence: Not publicly disclosed; scope: Cyber ECHO facility page, which covers excess layers rather than every primary policy Marsh places..) |
| Who It’s For | Not described in the reviewed sources. | MMA says any company can benefit from cyber coverage, but prioritizes organizations that store significant customer data, run large customer databases or hold valuable digital assets. [14](https://www.marshmma.com/us/solutions/cyber.html "Cyber Insurance | MMA") (Evidence: Company-reported; scope: MMA cyber solutions FAQ; MMA describes its own client base as middle-market organizations generally..) |
| Coverage Features | At-Bay lists direct and contingent business interruption and system failure coverage, social engineering and invoice manipulation coverage for all classes of business, full limits for cryptojacking and bricking, broad cyber extortion coverage including cryptocurrency payment, and reputational-harm coverage for PR costs from adverse publicity. [3](https://www.at-bay.com/insurance/cyber/ "Cyber Insurance Coverage & Policy Highlights") (Evidence: Company-reported; scope: Product-page coverage highlights; the issued policy and endorsements control actual terms..)<br><br>At-Bay sells cyber insurance with optional InsurSec security tiers: Core includes vulnerability monitoring and a fraud-defense sub-limit; Advanced adds a reduced ransomware retention and a zero-hour ransomware waiting period; Complete adds a $0 financial-fraud retention and a $1 million financial-fraud sub-limit. Each higher tier requires a separately purchased managed detection and response (MDR) subscription. [3](https://www.at-bay.com/insurance/cyber/ "Cyber Insurance Coverage & Policy Highlights") (Evidence: Company-reported; scope: Product-page InsurSec package descriptions and footnotes; availability depends on the business's risk profile and qualifying conditions..) | MMA lists incident investigation and response costs, network interruption/extra expense, extortion and ransomware payments, data restoration, and security and privacy liability as core cyber coverages, with media liability, privacy regulatory defense and reputation-based income loss available as additional coverages. [14](https://www.marshmma.com/us/solutions/cyber.html "Cyber Insurance | MMA") (Evidence: Company-reported; scope: MMA cyber solutions page; actual policy wording and insurer vary by placement..) |
| Limits and Retentions | At-Bay says it writes primary and excess cyber insurance for businesses with revenue up to $5 billion and limits up to $10 million. Through its Broker Platform, brokers can get automated quotes only for businesses up to $100 million in revenue and $3 million in limits. [3](https://www.at-bay.com/insurance/cyber/ "Cyber Insurance Coverage & Policy Highlights") (Evidence: Company-reported; scope: Published appetite ceilings, not guaranteed offers; underwriting and the appetite guide control individual accounts..) | Marsh says its Cyber ECHO excess facility can provide over $200 million of cyber capacity per client, with a free first reinstatement and a paid second reinstatement for separate cyber events within a policy year. [12](https://www.marsh.com/en/services/cyber-risk/expertise/cyber-echo.html "Cyber ECHO") (Evidence: Company-reported; scope: Cyber ECHO facility page; describes excess capacity Marsh can arrange, not a standard primary limit..) |
| Risk Services | Every At-Bay cyber policy includes access to At-Bay Stance, a security platform with vulnerability monitoring, vCISO advisory and tabletop exercises, and security awareness training. Managed detection and response (MDR) for endpoints or email costs extra, $16 or $25 per user per month respectively, and is sold separately by At-Bay Security, LLC. [3](https://www.at-bay.com/insurance/cyber/ "Cyber Insurance Coverage & Policy Highlights") (Evidence: Company-reported; scope: Product-page InsurSec and footnote descriptions; MDR pricing is described as estimated and subject to change..) | Not described in the reviewed sources. |
| How to Apply | You apply for At-Bay cyber coverage by emailing a submission to underwriting@at-bay.com or by requesting an automated quote through At-Bay's Broker Platform. [3](https://www.at-bay.com/insurance/cyber/ "Cyber Insurance Coverage & Policy Highlights") (Evidence: Company-reported; scope: Product-page submission instructions; the Broker Platform route is limited to accounts within its lower appetite ceilings..) | You engage a named Marsh or MMA cyber specialist to design a placement; the reviewed pages describe advisor-led placement and risk analytics rather than an online self-serve quote. [11](https://www.marsh.com/en/services/cyber-risk/expertise/cyber-insurance.html "Cyber Insurance") [14](https://www.marshmma.com/us/solutions/cyber.html "Cyber Insurance | MMA") (Evidence: Company-reported; scope: Marsh and MMA cyber pages, which list dedicated cyber brokerage and placement leaders..) |
| Claims Support | At-Bay describes an in-house claims team and a named breach-coach phone line for active ransomware or system-interruption incidents, alongside a published cyber incident roadmap that assembles response partners after a claim is reported. [6](https://www.at-bay.com/claims/ "Claims Handling") (Evidence: Company-reported; scope: Claims-handling page process description; does not establish claim outcomes or payment speed..) | Marsh's global claims and incident-management specialists review cyber claims, support litigation management and work with forensic accountants to prepare proof of loss, advocating with insurers on the client's behalf. [13](https://www.marsh.com/en/services/cyber-risk/expertise/claims-advocacy.html "Claims Advocacy") (Evidence: Company-reported; scope: Claims Advocacy expertise page; recovery outcomes described as company-reported and not independently verified..) |

## Full Comparison

- [At-Bay vs Marsh](https://spot.insure/compare/at-bay-vs-marsh): all coverage lines, business roles, service and claims.
- [What Is Cyber Insurance?](https://spot.insure/coverage/cyber): Cyber insurance can help pay your response costs and covered claims against your business after a cyber incident.
- [At-Bay vs Marsh Professional Liability (E&O) Insurance](https://spot.insure/compare/at-bay-vs-marsh/professional-errors-omissions)
- [At-Bay vs Marsh Tech E&O Insurance](https://spot.insure/compare/at-bay-vs-marsh/technology-errors-omissions)
- [Alliance Risk vs At-Bay Cyber Insurance](https://spot.insure/compare/alliance-risk-vs-at-bay/cyber)
- [Alliance Risk vs Marsh Cyber Insurance](https://spot.insure/compare/alliance-risk-vs-marsh/cyber)
- [Amelia Risk vs At-Bay Cyber Insurance](https://spot.insure/compare/amelia-risk-vs-at-bay/cyber)
- [Amelia Risk vs Marsh Cyber Insurance](https://spot.insure/compare/amelia-risk-vs-marsh/cyber)
- [At-Bay vs Beazley Cyber Insurance](https://spot.insure/compare/at-bay-vs-beazley/cyber)
- [At-Bay vs CFC Cyber Insurance](https://spot.insure/compare/at-bay-vs-cfc/cyber)

## Sources

### At-Bay

1. [Cyber, Tech E&O & Professional Liability Insurance](https://www.at-bay.com/insurance/). At-Bay; Product cards and agency disclosure. Accessed 2026-09-16.
2. [At-Bay Stance](https://www.at-bay.com/stance/). At-Bay; Real Protection Against Real Threats; Endpoint, Email, MXDR; footnotes 1 and 3–6. Accessed 2026-09-16.
3. [Cyber Insurance Coverage & Policy Highlights](https://www.at-bay.com/insurance/cyber/). At-Bay; Cyber Coverage Highlights; Primary & Excess Appetite; InsurSec Packages (Core, Advanced, Complete); footnotes 1–7. Accessed 2026-09-23.
4. [Licenses](https://www.at-bay.com/licenses/). At-Bay; At-Bay Insurance Services LLC producer introduction and 50-state P&C/surplus-lines license table. Accessed 2026-09-23.
5. [At-Bay Begins Issuing Policies on its own E&S Paper](https://www.at-bay.com/press_releases/at-bay-begins-issuing-policies-on-its-own-paper/). At-Bay; August 9, 2023 release: "At-Bay ... has begun issuing Cyber and Tech E&O policies under its Delaware-based Excess and Surplus (E&S) carrier, At-Bay Specialty Insurance Company"; "All E&S Cyber and Tech E&O new business in eligible states and territories is now being quoted on At-Bay Specialty Insurance Company paper, as of August 7, 2023". Accessed 2026-09-23.
6. [Claims Handling](https://www.at-bay.com/claims/). At-Bay; At-Bay Cyber Incident Roadmap; Call an At-Bay Breach Coach; The At-Bay Claims Team. Accessed 2026-09-23.

### Marsh

7. [Marsh | Leader in risk, strategy, people, and investments](https://www.marsh.com/en/home.html). Marsh; Hero and capability tiles; FAQ: What does Marsh do?; industries served; Is Marsh the same as Marsh McLennan? January 2026 brand change. Accessed 2026-09-16.
8. [Compensation guide for US clients](https://www.marsh.com/content/dam/marsh/Documents/PDF/US-en/us-client-compensation-guide.pdf). Marsh; US broking segments; broker role; retail commissions, client fees, wholesale, insurer consulting, contingent and supplemental commissions; Marsh LLC and Marsh USA LLC; page 3: broker role and Marsh & McLennan Agency segment; page 7: copyright © 2024 Marsh LLC. Accessed 2026-09-16.
9. [Marsh McLennan Agency (MMA)](https://www.marsh.com/en/services/marsh-mclennan-agency.html). Marsh; Middle-market US organizations; wholly-owned subsidiary; business insurance, employee health and benefits, retirement, private client. Accessed 2026-09-16.
10. [Technology | Insurance Broking & Risk Management](https://www.marsh.com/en/industries/technology.html). Marsh; Opening Technology Practice description; practice links including data center insurance, fintech and Stratus; Talk to us. Accessed 2026-09-16.
11. [Cyber Insurance](https://www.marsh.com/en/services/cyber-risk/expertise/cyber-insurance.html). Marsh; Opening brokerage positioning; products list including Cyber Pathway, Cyber Accelerate, Claims Advocacy, CyberPort, Cyber ECHO; Rachel Lavender, US and Canada Cyber Brokerage Leader. Accessed 2026-09-23.
12. [Cyber ECHO](https://www.marsh.com/en/services/cyber-risk/expertise/cyber-echo.html). Marsh; New for 2026: over $200 million capacity; free first reinstatement and paid second reinstatement; one underwriting lead and two claims leads per panel; Lloyd's, company markets or Bermuda-based insurers. Accessed 2026-09-23.
13. [Claims Advocacy](https://www.marsh.com/en/services/cyber-risk/expertise/claims-advocacy.html). Marsh; Global claims specialists negotiating cyber coverage issues; proof of loss with forensic accountants. Accessed 2026-09-23.
14. [Cyber Insurance | MMA](https://www.marshmma.com/us/solutions/cyber.html). Marsh McLennan Agency; Benefits of Cyber: understand, mitigate, respond, recover; Cyber Coverage list (incident investigation and response, network interruption, extortion/ransomware, data restoration, security and privacy liability, additional coverages); FAQ: Who needs cyber insurance coverage?. Accessed 2026-09-23.

### Cyber Insurance Guide

15. [Cyber Insurance](https://www.ftc.gov/business-guidance/small-businesses/cybersecurity/cyber-insurance). Federal Trade Commission; Opening; First-Party and Third-Party Coverage; First-Party Coverage; Third-Party Coverage; What Should Your Cyber Insurance Policy Cover. Accessed 2026-09-16.

Updated 2026-09-23. Spot, a product of Tools for Enlightenment, publishes this research and works in the commercial insurance market. The comparison applies the same criteria to both providers. [Editorial policy](https://spot.insure/editorial-policy). To suggest a correction, [contact Spot](https://spot.insure/contact) with the page URL and supporting source.

## Agent and Developer Resources

- [Markdown page](https://spot.insure/compare/at-bay-vs-marsh/cyber.md)
- [Developer resources](https://spot.insure/developers)
- [Public MCP server](https://spot.insure/mcp)
- [MCP server manifest](https://spot.insure/server.json)
- [OpenAPI description](https://spot.insure/openapi.json)
- [Public page index](https://spot.insure/llms.txt)