CFC vs Harper Cyber Insurance

CFC's flagship cyber product, Cyber Proactive Response, targets businesses with revenues from $0 to $250 million and pairs the policy with built-in security monitoring, incident response and claims handling rather than selling those as add-ons. ⁵Company-reported. Cyber insurance product page's Cyber Proactive Response summary; CFC separately sells Cyber (admitted), Corporate cyber for businesses at $250 million and up, and a Cyber excess policy.

For cyber insurance, Harper describes calling the insurance companies that write the coverage for a business and presenting the resulting options to choose from, rather than issuing a cyber policy itself. ¹²Company-reported. Homepage 'What we cover' introduction and coverage list, where cyber is one of the enumerated lines.

The Cyber Proactive Response application form names only CFC Underwriting Limited, an entity authorized and regulated by the UK Financial Conduct Authority, as the party administering the form. Neither the cyber product page nor the application discloses which specific insurer or Lloyd's syndicate capacity sits behind a US Cyber Proactive Response policy. ^8,4Not publicly disclosed. Application footer and the regulatory information page, both checked on 2026-09-23; CFC also operates Lloyd's Syndicate 1988 and CFC USA Inc.'s admitted and E&S licenses, but no page ties one of these specifically to Cyber Proactive Response.

Harper's public pages do not name the insurer or insurers that would underwrite a cyber policy; the homepage shows an unlabeled panel of insurer logos it says it works with, without listing carriers for cyber specifically. ¹²Not publicly disclosed. Checked the homepage insurer-logo panel and eCommerce industry page on 2026-09-23.

CFC segments cyber eligibility by revenue: Cyber Proactive Response and Cyber (admitted) are positioned for businesses with revenues from $0 to $250 million, while Corporate cyber is for businesses at $250 million and above. ⁵Company-reported. Cyber product page product summaries; actual eligibility for a given applicant depends on underwriting.

Harper positions cyber coverage as relevant to online retailers, dropshipping businesses, marketplace sellers and private-label or direct-to-consumer brands on its eCommerce industry page, while also listing cyber as a general coverage option for any business on the homepage intake. ^11,12Company-reported. eCommerce industry page 'Who this is for' section combined with the homepage's general cyber checkbox; no cyber-specific eligibility criteria (such as revenue thresholds) were found.

Cyber Proactive Response includes crime cover, a 12-month indemnity period for business interruption, and data recreation cover, with unlimited claim reinstatements available at either no deductible or a single deductible at most. ⁵Company-reported. Cyber product page Key features list for Cyber Proactive Response.

Harper's homepage summarizes cyber insurance as coverage for the cleanup if a business's systems or card payments get hacked. ¹²Company-reported. Homepage 'What we cover' blurb; the issued policy and declarations would control actual insuring agreements and exclusions.

On its eCommerce industry page, Harper describes cyber protection as covering data breaches, payment fraud, hacking incidents and exposure of customer information, and its FAQ adds that cyber liability coverage may apply to customer notification costs, credit monitoring and certain regulatory expenses. ¹¹Company-reported. eCommerce industry page; this description is given in the context of online retailers, dropshippers, marketplace sellers and DTC brands, and may not describe cyber coverage the same way for other industries.

For larger businesses, CFC's Corporate cyber product (for revenues of $250 million or more) has a published maximum line size of $25 million; the Cyber Proactive Response and Cyber (admitted) pages for smaller businesses do not publish a maximum dollar limit. ⁵Company-reported. Cyber product page Corporate cyber Key features; limit for any individual policy appears on its declarations.

The reviewed pages do not publish cyber policy limits, retentions or a claims-made versus occurrence trigger; the eCommerce page's cost FAQ discusses eCommerce insurance overall rather than cyber coverage alone, so it is not used as a cyber-specific figure here. ^12,11Not publicly disclosed. Checked the homepage and eCommerce industry page on 2026-09-23.

Every CFC cyber policyholder gets CFC Response, described as an in-house incident-response service available 24/7, plus a free mobile app offering dark web monitoring, phishing simulations and external network deep scanning. ^6,7Company-reported. Response page and cyber brochure; CFC characterizes its incident response team as one of the largest in-house teams in the industry, a claim not independently verified here.

Not described in the reviewed sources.

The US Cyber Proactive Response application is a one-page form asking whether multi-factor authentication is enforced for remote network access and email, whether backups are offline or MFA-secured, and whether the business had a cyber incident in the last three years. ⁸Company-reported. Cyber Proactive Response application form sections on cyber security controls and previous cyber incidents.

You can start a cyber quote through Harper's online intake by selecting the 'Hacking, data breaches, card fraud (cyber)' checkbox alongside the business's state, estimated annual revenue and a description of what it does. ¹²Company-reported. Homepage quote-intake form.

CFC says its in-house cyber claims team resolves several thousand cyber claims a year and reports a 99.4% cyber claims acceptance rate over a recent 12-month period. ⁷Company-reported. Cyber brochure claims statistics; these are company-reported figures and were not independently audited.

Not described in the reviewed sources.