At-Bay vs USI Insurance Services: How Do They Compare for Cyber Insurance?

USI Insurance Services is a broker offering PrivaSafe, a cyber and privacy liability program for middle-market firms; At-Bay offers primary and excess cyber up to $10 million with security tiers.

USI brokers cyber and layers PrivaSafe, a manuscripted form that can add notification costs outside the policy aggregate. At-Bay sells a named cyber product with published primary and excess appetite up to $10 million in limits. ^5,¹

What Are the Key Differences Between At-Bay and USI Insurance Services Cyber Insurance?

Brokered Manuscript Versus a Named Product

USI places cyber as a broker and layers PrivaSafe, a custom-drafted form it negotiates with the market rather than issuing itself. At-Bay sells its own named cyber product through its producer, with automated broker quotes for smaller accounts and emailed submissions for larger ones. Choose USI if you want a broker to manuscript terms around your existing program; choose At-Bay if you want a published product with stated revenue and limit ceilings. ⁵ ¹

How Each Describes Limits

USI's published figures sit in carve-outs around the main aggregate rather than one appetite number:

USI says PrivaSafe can prevent uninsured or underinsured losses up to $10 million, includes up to $2 million in notification-cost coverage in addition to the policy's aggregate limit, and $250,000 in defense-cost coverage outside the limit (with additional limit available). ⁵Company-reported. Program page figures describe the PrivaSafe structure generally; a buyer's actual limits, sublimits and retentions are set on the policy declarations.

At-Bay instead publishes a single pair of ceilings: revenue up to $5 billion and limits up to $10 million for primary and excess cyber, without a separate notification allowance outside that number. ¹

Who They Target and What Services Attach

USI markets PrivaSafe to middle-market firms it says often lack in-house security expertise, and it includes pre-breach and post-breach services on that program. At-Bay's published appetite runs to $5 billion in revenue, and every policy includes Stance for vulnerability monitoring, vCISO advisory and tabletops. ⁵ ¹

What Should You Confirm in At-Bay and USI Insurance Services Cyber Insurance Quotes?

Ask USI which insurer would issue PrivaSafe or another cyber form, because the pages do not name one. ⁵
Ask USI for the notification and defense amounts that sit outside the aggregate on your quote. ⁵
Ask At-Bay whether the quoted limit is primary or excess and which InsurSec package, if any, is included. ¹
Compare the pre-breach services USI describes with Stance so you know what you actually get before an incident. ⁵ ¹

At-Bay vs USI Insurance Services Cyber Insurance Compared

At-Bay vs USI Insurance Services: Cyber Insurance: documented features by provider

Criteria	At-Bay Cyber Insurance	USI PrivaSafe Cyber and Privacy Liability Program
Limits and Retentions	At-Bay says it writes primary and excess cyber insurance for businesses with revenue up to $5 billion and limits up to $10 million. Through its Broker Platform, brokers can get automated quotes only for businesses up to $100 million in revenue and $3 million in limits. ¹Company-reported. Published appetite ceilings, not guaranteed offers; underwriting and the appetite guide control individual accounts.	USI says PrivaSafe can prevent uninsured or underinsured losses up to $10 million, includes up to $2 million in notification-cost coverage in addition to the policy's aggregate limit, and $250,000 in defense-cost coverage outside the limit (with additional limit available). ⁵Company-reported. Program page figures describe the PrivaSafe structure generally; a buyer's actual limits, sublimits and retentions are set on the policy declarations.
How to Apply	You apply for At-Bay cyber coverage by emailing a submission to underwriting@at-bay.com or by requesting an automated quote through At-Bay's Broker Platform. ¹Company-reported. Product-page submission instructions; the Broker Platform route is limited to accounts within its lower appetite ceilings.	To review cyber exposure with USI, the program page says a buyer should be ready to provide current cyber policies (if any), an assessment of its largest financial and operational cyber vulnerabilities, and its most recent audited financials. ⁵Company-reported. PrivaSafe program page intake description.
Coverage Features	At-Bay lists direct and contingent business interruption and system failure coverage, social engineering and invoice manipulation coverage for all classes of business, full limits for cryptojacking and bricking, broad cyber extortion coverage including cryptocurrency payment, and reputational-harm coverage for PR costs from adverse publicity. ¹Company-reported. Product-page coverage highlights; the issued policy and endorsements control actual terms. At-Bay sells cyber insurance with optional InsurSec security tiers: Core includes vulnerability monitoring and a fraud-defense sub-limit; Advanced adds a reduced ransomware retention and a zero-hour ransomware waiting period; Complete adds a $0 financial-fraud retention and a $1 million financial-fraud sub-limit. Each higher tier requires a separately purchased managed detection and response (MDR) subscription. ¹Company-reported. Product-page InsurSec package descriptions and footnotes; availability depends on the business's risk profile and qualifying conditions.	USI describes PrivaSafe as covering three areas: liability costs (including inability to protect information and related tort liability), compliance and corrective costs (data breach and forensic costs, privacy regulatory costs, payment-card standards), and direct costs (network interruption, data reconstruction, cyber extortion, bricking, voluntary shutdown, reputational harm business interruption, and cyber crime). ⁵Company-reported. PrivaSafe program page; actual insuring agreements and exclusions are set by the issued policy form.
Role in This Line	At-Bay places cyber insurance through its disclosed producer, At-Bay Insurance Services LLC, which is licensed as an insurance producer in all 50 states. At-Bay says eligible new excess-and-surplus (E&S) cyber business has been written on its own carrier paper, At-Bay Specialty Insurance Company, since August 2023. ^2,³Company-reported. Producer role from the current license page; carrier role from a 2023 transition announcement, not confirmed for every current cyber quote.	USI is a broker, not an insurer, for cyber coverage. It places cyber and privacy liability policies for clients and layers on its own manuscripted program, PrivaSafe, rather than underwriting the risk itself. ^5,⁶Company-reported. PrivaSafe program page and USI's property & casualty and technology practice pages.
Risk Services	Every At-Bay cyber policy includes access to At-Bay Stance, a security platform with vulnerability monitoring, vCISO advisory and tabletop exercises, and security awareness training. Managed detection and response (MDR) for endpoints or email costs extra, $16 or $25 per user per month respectively, and is sold separately by At-Bay Security, LLC. ¹Company-reported. Product-page InsurSec and footnote descriptions; MDR pricing is described as estimated and subject to change.	USI says PrivaSafe includes pre-breach services to help avoid cyber threats and post-breach services designed to streamline incident response and recovery, on top of USI's general property & casualty cyber specialists. ^5,⁷Company-reported. Program page and property-casualty practice team description.