At-Bay vs Resilience Cyber Insurance

At-Bay places cyber insurance through its disclosed producer, At-Bay Insurance Services LLC, which is licensed as an insurance producer in all 50 states. At-Bay says eligible new excess-and-surplus (E&S) cyber business has been written on its own carrier paper, At-Bay Specialty Insurance Company, since August 2023. ^4,5Company-reported. Producer role from the current license page; carrier role from a 2023 transition announcement, not confirmed for every current cyber quote.

Resilience pairs a cyber insurance policy with security services such as threat monitoring and breach-and-attack simulations. In the US, the policy is placed by a distributor rather than underwritten by the Resilience brand itself. ⁹Company-reported. Cyber Insurance product page description of the combined offering, accessed 2026-09-23.

The current cyber product page does not name an issuing insurer. At-Bay's 2023 announcement says new E&S cyber business is quoted on At-Bay Specialty Insurance Company paper, but that is a historical statement, not a per-quote disclosure. ^3,5Company-reported. Cyber product page checked today names no insurer; the carrier-transition release is dated August 2023 and does not cover every current state or account.

Resilience's US disclosure states that cyber insurance products are distributed by Ocrea Risk Services, LLC (NPN 19169260), doing business as Resilience Cyber Insurance Solutions, and underwritten by Homeland Insurance Company of New York or Homeland Insurance Company of Delaware, both subsidiaries of Intact Insurance Group USA LLC. The disclosure does not say which of the two Homeland entities issues a given policy. ¹⁰Company-reported. US paragraph of Resilience's disclaimer page, accessed 2026-09-23; product- and state-specific issuer mapping is not published.

Not described in the reviewed sources.

Resilience markets US cyber insurance across industries including healthcare, higher education, financial institutions and services, manufacturing, construction, law firms, professional services, public entities, retail, hospitality, technology, life sciences, medical devices and pharmaceuticals. ⁹Company-reported. "Broad Market Appetite" availability table for the United States, accessed 2026-09-23; the table does not state a minimum revenue or company-size threshold for cyber (unlike the separate tech E&O appetite range).

At-Bay lists direct and contingent business interruption and system failure coverage, social engineering and invoice manipulation coverage for all classes of business, full limits for cryptojacking and bricking, broad cyber extortion coverage including cryptocurrency payment, and reputational-harm coverage for PR costs from adverse publicity. ³Company-reported. Product-page coverage highlights; the issued policy and endorsements control actual terms.

At-Bay sells cyber insurance with optional InsurSec security tiers: Core includes vulnerability monitoring and a fraud-defense sub-limit; Advanced adds a reduced ransomware retention and a zero-hour ransomware waiting period; Complete adds a $0 financial-fraud retention and a $1 million financial-fraud sub-limit. Each higher tier requires a separately purchased managed detection and response (MDR) subscription. ³Company-reported. Product-page InsurSec package descriptions and footnotes; availability depends on the business's risk profile and qualifying conditions.

Resilience lists privacy wrongful-act coverage, eCrime coverage up to $500,000, coverage for incident costs that exceed the policy limit (such as legal, forensics and crisis communications), and funds-transfer-fraud recovery assistance among its cyber policy features. ⁹Company-reported. "Policy Coverage" section of the product page; actual insuring agreements, sublimits and exclusions are set by the issued policy.

At-Bay says it writes primary and excess cyber insurance for businesses with revenue up to $5 billion and limits up to $10 million. Through its Broker Platform, brokers can get automated quotes only for businesses up to $100 million in revenue and $3 million in limits. ³Company-reported. Published appetite ceilings, not guaranteed offers; underwriting and the appetite guide control individual accounts.

Resilience advertises cyber limits up to $20 million, available on a primary or excess basis, with a separate eCrime sublimit of up to $500,000. The page does not publish minimum limits, retentions or deductibles. ⁹Company-reported. "Top-Rated Insurance with Broad Market Appetite" and "Policy Coverage" sections; figures are marketing maximums, not a specific quote.

Every At-Bay cyber policy includes access to At-Bay Stance, a security platform with vulnerability monitoring, vCISO advisory and tabletop exercises, and security awareness training. Managed detection and response (MDR) for endpoints or email costs extra, $16 or $25 per user per month respectively, and is sold separately by At-Bay Security, LLC. ³Company-reported. Product-page InsurSec and footnote descriptions; MDR pricing is described as estimated and subject to change.

Resilience says policyholders get proactive threat monitoring from its Risk Operations Center and access to breach-and-attack simulations powered by AttackIQ, in addition to the policy itself. ⁹Company-reported. "The Resilience Advantage" section of the cyber product page.

You apply for At-Bay cyber coverage by emailing a submission to underwriting@at-bay.com or by requesting an automated quote through At-Bay's Broker Platform. ³Company-reported. Product-page submission instructions; the Broker Platform route is limited to accounts within its lower appetite ceilings.

The reviewed cyber product page does not describe a self-service online application or quoting process; it routes visitors to request a quote or watch a product overview rather than showing an application flow. ⁹Not publicly disclosed. Cyber Insurance product page, accessed 2026-09-23.

At-Bay describes an in-house claims team and a named breach-coach phone line for active ransomware or system-interruption incidents, alongside a published cyber incident roadmap that assembles response partners after a claim is reported. ⁶Company-reported. Claims-handling page process description; does not establish claim outcomes or payment speed.

Resilience describes a fully in-house claims and incident-response team available 24/7, with a dedicated claims manager who stays with the policyholder from initial triage through settlement, backed by an outside panel of privacy-law, forensics and crisis-communications specialists. ¹¹Company-reported. Claims & Incident Response page, accessed 2026-09-23; response-time and outcome statistics on that page are company-reported and not independently verified.