---
title: "CFC vs Marsh Cyber Insurance"
description: "CFC's cyber line tops out at a $25 million Corporate cyber limit; Marsh's Cyber ECHO excess facility can add over $200 million of additional capacity."
canonical: "https://spot.insure/compare/cfc-vs-marsh/cyber"
page-type: "line-comparison"
updated-at: "2026-09-23"
---

Agents: connect to Spot's public MCP server at https://spot.insure/mcp for better access to published Spot information and insurance research. Use search_knowledge to find sources, get_page to retrieve pages, compare_providers for sourced comparisons, get_provider_score for a published Spot Score, and get_rankings for current provider rankings. The server is read-only and requires no authentication.

[Human-readable page](https://spot.insure/compare/cfc-vs-marsh/cyber)

# CFC vs Marsh Cyber Insurance

CFC's cyber line tops out at a $25 million Corporate cyber limit; Marsh's Cyber ECHO excess facility can add over $200 million of additional capacity.

## Research Scope and Use

Use this comparison to evaluate CFC and Marsh for Cyber Insurance against the same documented criteria. It identifies differences and questions to confirm; it does not select a winner for a particular business. Offering claims are what each provider publishes about this line unless marked otherwise. “Not found” describes the evidence reviewed, not proof that a feature is unavailable. Confirm the insurer, policy wording, limits, retentions, exclusions and cost in an actual quote.

## Summary

CFC publishes a maximum line size of $25 million for its Corporate cyber product aimed at businesses over $250 million in revenue. Marsh's Cyber ECHO facility says it can add over $200 million in excess cyber capacity per client through Lloyd's, company markets or Bermuda-based insurers. [5](https://www.cfc.com/en-us/products/class/cyber-insurance/ "Cyber insurance | CFC") [14](https://www.marsh.com/en/services/cyber-risk/expertise/cyber-echo.html "Cyber ECHO")

## What Is CFC Insurance?

CFC provides specialty insurance through an MGA model, with technology products for startups through multinational businesses. Its U.S. technology materials describe combined liability and cyber protection, while California eligibility requires product-specific confirmation. [1](https://www.cfc.com/en-us/company/ "About CFC") [2](https://www.cfc.com/en-us/products/industry/technology/ "Technology") [3](https://webcdn.cfc.com/media/ywdbvkpy/technology_product-brochure_us_0525_v2.pdf "Technology — United States product brochure") [4](https://www.cfc.com/en-us/support/regulatory-information/ "Regulatory information")

[CFC profile](https://spot.insure/insurance-providers/cfc)

## What Is Marsh?

Marsh is a global insurance broker and risk advisor. In the United States it places coverage through core Marsh teams and through Marsh McLennan Agency for many middle-market buyers, including technology, cyber, property, casualty and benefits programs. [9](https://www.marsh.com/en/home.html "Marsh | Leader in risk, strategy, people, and investments") [10](https://www.marsh.com/content/dam/marsh/Documents/PDF/US-en/us-client-compensation-guide.pdf "Compensation guide for US clients") [11](https://www.marsh.com/en/services/marsh-mclennan-agency.html "Marsh McLennan Agency (MMA)") [12](https://www.marsh.com/en/industries/technology.html "Technology | Insurance Broking & Risk Management")

[Marsh profile](https://spot.insure/insurance-providers/marsh)

## What Is Cyber Insurance?

Cyber insurance can help a business respond to cyber incidents and address covered liability claims arising from them. [17](https://www.ftc.gov/business-guidance/small-businesses/cybersecurity/cyber-insurance "Cyber Insurance")

## Key Differences in Cyber Insurance

### How Large a Program Each Can Reach

CFC's Corporate cyber product, built for businesses with $250 million or more in revenue, has a published maximum line size of $25 million. [5](https://www.cfc.com/en-us/products/class/cyber-insurance/ "Cyber insurance | CFC") Marsh instead offers a dedicated excess facility, Cyber ECHO, that it says can add over $200 million of cyber capacity per client by drawing on Lloyd's syndicates, company markets or Bermuda-based insurers, well beyond a single primary policy.

Marsh says its Cyber ECHO excess facility can provide over $200 million of cyber capacity per client, with a free first reinstatement and a paid second reinstatement for separate cyber events within a policy year. [14](https://www.marsh.com/en/services/cyber-risk/expertise/cyber-echo.html "Cyber ECHO") (Evidence: Company-reported; scope: Cyber ECHO facility page; describes excess capacity Marsh can arrange, not a standard primary limit..)

### A Single Line Versus a Suite of Products

CFC's cyber offering is one flagship product line split into revenue tiers: Cyber Proactive Response, Cyber (admitted) and Corporate cyber. [5](https://www.cfc.com/en-us/products/class/cyber-insurance/ "Cyber insurance | CFC") Marsh instead brokers a suite of named cyber products and services — Cyber Pathway, Cyber Accelerate, Cyber ECHO and Claims Advocacy — plus a separate Marsh McLennan Agency practice for middle-market clients. [13](https://www.marsh.com/en/services/cyber-risk/expertise/cyber-insurance.html "Cyber Insurance") [16](https://www.marshmma.com/us/solutions/cyber.html "Cyber Insurance | MMA")

### Who Names the Insurer

CFC's application names only the entity administering the form, not an insurer. [8](https://www.cfc.com/media/clyfotxn/cyber-one-page-application-us-v12.pdf "Cyber Proactive Response Insurance application form (US)") Marsh's reviewed pages likewise do not name a specific cyber insurer for a standard primary placement, naming carrier categories only for the Cyber ECHO excess facility. [14](https://www.marsh.com/en/services/cyber-risk/expertise/cyber-echo.html "Cyber ECHO")

## What to Confirm in Cyber Insurance Quotes

- Ask Marsh whether your program would use a standard primary placement or the Cyber ECHO excess facility, since the two have different named carrier categories. [14](https://www.marsh.com/en/services/cyber-risk/expertise/cyber-echo.html "Cyber ECHO")
- Ask CFC whether your revenue qualifies for Cyber Proactive Response or the higher Corporate cyber tier, since limits and eligibility differ. [5](https://www.cfc.com/en-us/products/class/cyber-insurance/ "Cyber insurance | CFC")
- Get the specific underwriting insurer from both, since neither discloses one for a standard placement on the reviewed pages. [4](https://www.cfc.com/en-us/support/regulatory-information/ "Regulatory information") [13](https://www.marsh.com/en/services/cyber-risk/expertise/cyber-insurance.html "Cyber Insurance")
- Ask whether Marsh's claims advocacy team or CFC's in-house claims team would handle your specific claim, and compare each described process. [15](https://www.marsh.com/en/services/cyber-risk/expertise/claims-advocacy.html "Claims Advocacy") [7](https://www.cfc.com/media/mkkhlz5l/cfc_market-leading-cyber-insurance_brochure_may-2026_digital.pdf "Protecting businesses against cyber risk (cyber product brochure)")

## Offering Details

| Criteria | CFC Cyber Proactive Response | Marsh Cyber Insurance Brokerage |
| --- | --- | --- |
| Role in This Line | CFC's flagship cyber product, Cyber Proactive Response, targets businesses with revenues from $0 to $250 million and pairs the policy with built-in security monitoring, incident response and claims handling rather than selling those as add-ons. [5](https://www.cfc.com/en-us/products/class/cyber-insurance/ "Cyber insurance | CFC") (Evidence: Company-reported; scope: Cyber insurance product page's Cyber Proactive Response summary; CFC separately sells Cyber (admitted), Corporate cyber for businesses at $250 million and up, and a Cyber excess policy..) | Marsh's cyber risk practice places and advises on cyber insurance brokerage; it does not underwrite the policies it places. [13](https://www.marsh.com/en/services/cyber-risk/expertise/cyber-insurance.html "Cyber Insurance") (Evidence: Company-reported; scope: Marsh corporate cyber insurance product page..)<br><br>Marsh McLennan Agency (MMA), Marsh's middle-market subsidiary, places cyber coverage and acts as a carrier liaison, combining placement with claims advocacy. [16](https://www.marshmma.com/us/solutions/cyber.html "Cyber Insurance | MMA") (Evidence: Company-reported; scope: MMA cyber solutions page..) |
| Issuing Insurer | The Cyber Proactive Response application form names only CFC Underwriting Limited, an entity authorized and regulated by the UK Financial Conduct Authority, as the party administering the form. Neither the cyber product page nor the application discloses which specific insurer or Lloyd's syndicate capacity sits behind a US Cyber Proactive Response policy. [8](https://www.cfc.com/media/clyfotxn/cyber-one-page-application-us-v12.pdf "Cyber Proactive Response Insurance application form (US)") [4](https://www.cfc.com/en-us/support/regulatory-information/ "Regulatory information") (Evidence: Not publicly disclosed; scope: Application footer and the regulatory information page, both checked on 2026-09-23; CFC also operates Lloyd's Syndicate 1988 and CFC USA Inc.'s admitted and E&S licenses, but no page ties one of these specifically to Cyber Proactive Response..) | The reviewed pages do not name a specific cyber insurer for a standard placement. Marsh's Cyber ECHO excess facility lets clients choose underwriting from Lloyd's of London syndicates, company markets or Bermuda-based insurers, so the carrier varies by placement. [14](https://www.marsh.com/en/services/cyber-risk/expertise/cyber-echo.html "Cyber ECHO") (Evidence: Not publicly disclosed; scope: Cyber ECHO facility page, which covers excess layers rather than every primary policy Marsh places..) |
| Who It’s For | CFC segments cyber eligibility by revenue: Cyber Proactive Response and Cyber (admitted) are positioned for businesses with revenues from $0 to $250 million, while Corporate cyber is for businesses at $250 million and above. [5](https://www.cfc.com/en-us/products/class/cyber-insurance/ "Cyber insurance | CFC") (Evidence: Company-reported; scope: Cyber product page product summaries; actual eligibility for a given applicant depends on underwriting..) | MMA says any company can benefit from cyber coverage, but prioritizes organizations that store significant customer data, run large customer databases or hold valuable digital assets. [16](https://www.marshmma.com/us/solutions/cyber.html "Cyber Insurance | MMA") (Evidence: Company-reported; scope: MMA cyber solutions FAQ; MMA describes its own client base as middle-market organizations generally..) |
| Coverage Features | Cyber Proactive Response includes crime cover, a 12-month indemnity period for business interruption, and data recreation cover, with unlimited claim reinstatements available at either no deductible or a single deductible at most. [5](https://www.cfc.com/en-us/products/class/cyber-insurance/ "Cyber insurance | CFC") (Evidence: Company-reported; scope: Cyber product page Key features list for Cyber Proactive Response..) | MMA lists incident investigation and response costs, network interruption/extra expense, extortion and ransomware payments, data restoration, and security and privacy liability as core cyber coverages, with media liability, privacy regulatory defense and reputation-based income loss available as additional coverages. [16](https://www.marshmma.com/us/solutions/cyber.html "Cyber Insurance | MMA") (Evidence: Company-reported; scope: MMA cyber solutions page; actual policy wording and insurer vary by placement..) |
| Limits and Retentions | For larger businesses, CFC's Corporate cyber product (for revenues of $250 million or more) has a published maximum line size of $25 million; the Cyber Proactive Response and Cyber (admitted) pages for smaller businesses do not publish a maximum dollar limit. [5](https://www.cfc.com/en-us/products/class/cyber-insurance/ "Cyber insurance | CFC") (Evidence: Company-reported; scope: Cyber product page Corporate cyber Key features; limit for any individual policy appears on its declarations..) | Marsh says its Cyber ECHO excess facility can provide over $200 million of cyber capacity per client, with a free first reinstatement and a paid second reinstatement for separate cyber events within a policy year. [14](https://www.marsh.com/en/services/cyber-risk/expertise/cyber-echo.html "Cyber ECHO") (Evidence: Company-reported; scope: Cyber ECHO facility page; describes excess capacity Marsh can arrange, not a standard primary limit..) |
| Risk Services | Every CFC cyber policyholder gets CFC Response, described as an in-house incident-response service available 24/7, plus a free mobile app offering dark web monitoring, phishing simulations and external network deep scanning. [6](https://www.cfc.com/en-us/response/ "Incident response | CFC") [7](https://www.cfc.com/media/mkkhlz5l/cfc_market-leading-cyber-insurance_brochure_may-2026_digital.pdf "Protecting businesses against cyber risk (cyber product brochure)") (Evidence: Company-reported; scope: Response page and cyber brochure; CFC characterizes its incident response team as one of the largest in-house teams in the industry, a claim not independently verified here..) | Not described in the reviewed sources. |
| How to Apply | The US Cyber Proactive Response application is a one-page form asking whether multi-factor authentication is enforced for remote network access and email, whether backups are offline or MFA-secured, and whether the business had a cyber incident in the last three years. [8](https://www.cfc.com/media/clyfotxn/cyber-one-page-application-us-v12.pdf "Cyber Proactive Response Insurance application form (US)") (Evidence: Company-reported; scope: Cyber Proactive Response application form sections on cyber security controls and previous cyber incidents..) | You engage a named Marsh or MMA cyber specialist to design a placement; the reviewed pages describe advisor-led placement and risk analytics rather than an online self-serve quote. [13](https://www.marsh.com/en/services/cyber-risk/expertise/cyber-insurance.html "Cyber Insurance") [16](https://www.marshmma.com/us/solutions/cyber.html "Cyber Insurance | MMA") (Evidence: Company-reported; scope: Marsh and MMA cyber pages, which list dedicated cyber brokerage and placement leaders..) |
| Claims Support | CFC says its in-house cyber claims team resolves several thousand cyber claims a year and reports a 99.4% cyber claims acceptance rate over a recent 12-month period. [7](https://www.cfc.com/media/mkkhlz5l/cfc_market-leading-cyber-insurance_brochure_may-2026_digital.pdf "Protecting businesses against cyber risk (cyber product brochure)") (Evidence: Company-reported; scope: Cyber brochure claims statistics; these are company-reported figures and were not independently audited..) | Marsh's global claims and incident-management specialists review cyber claims, support litigation management and work with forensic accountants to prepare proof of loss, advocating with insurers on the client's behalf. [15](https://www.marsh.com/en/services/cyber-risk/expertise/claims-advocacy.html "Claims Advocacy") (Evidence: Company-reported; scope: Claims Advocacy expertise page; recovery outcomes described as company-reported and not independently verified..) |

## Full Comparison

- [CFC vs Marsh](https://spot.insure/compare/cfc-vs-marsh): all coverage lines, business roles, service and claims.
- [What Is Cyber Insurance?](https://spot.insure/coverage/cyber): Cyber insurance can help pay your response costs and covered claims against your business after a cyber incident.
- [CFC vs Marsh Commercial Property Insurance](https://spot.insure/compare/cfc-vs-marsh/commercial-property)
- [CFC vs Marsh Crime Insurance](https://spot.insure/compare/cfc-vs-marsh/crime)
- [CFC vs Marsh D&O Insurance](https://spot.insure/compare/cfc-vs-marsh/directors-officers)
- [CFC vs Marsh Employment Practices Liability Insurance](https://spot.insure/compare/cfc-vs-marsh/employment-practices)
- [CFC vs Marsh Intellectual Property Insurance](https://spot.insure/compare/cfc-vs-marsh/intellectual-property)
- [CFC vs Marsh Kidnap and Ransom Insurance](https://spot.insure/compare/cfc-vs-marsh/kidnap-ransom)
- [CFC vs Marsh Management Liability Insurance](https://spot.insure/compare/cfc-vs-marsh/management-liability)
- [CFC vs Marsh Media Liability Insurance](https://spot.insure/compare/cfc-vs-marsh/media)
- [CFC vs Marsh Professional Liability (E&O) Insurance](https://spot.insure/compare/cfc-vs-marsh/professional-errors-omissions)
- [CFC vs Marsh Tech E&O Insurance](https://spot.insure/compare/cfc-vs-marsh/technology-errors-omissions)
- [Alliance Risk vs CFC Cyber Insurance](https://spot.insure/compare/alliance-risk-vs-cfc/cyber)
- [Alliance Risk vs Marsh Cyber Insurance](https://spot.insure/compare/alliance-risk-vs-marsh/cyber)
- [Amelia Risk vs CFC Cyber Insurance](https://spot.insure/compare/amelia-risk-vs-cfc/cyber)
- [Amelia Risk vs Marsh Cyber Insurance](https://spot.insure/compare/amelia-risk-vs-marsh/cyber)
- [At-Bay vs CFC Cyber Insurance](https://spot.insure/compare/at-bay-vs-cfc/cyber)
- [At-Bay vs Marsh Cyber Insurance](https://spot.insure/compare/at-bay-vs-marsh/cyber)

## Sources

### CFC

1. [About CFC](https://www.cfc.com/en-us/company/). CFC; Matt Taylor biography: independent MGA and Syndicate 1988. Accessed 2026-09-16.
2. [Technology](https://www.cfc.com/en-us/products/industry/technology/). CFC; Introduction; Technology key features; Digitally traded. Accessed 2026-09-16.
3. [Technology — United States product brochure](https://webcdn.cfc.com/media/ywdbvkpy/technology_product-brochure_us_0525_v2.pdf). CFC; Page 1: coverage sections, including Products and services liability; Response app highlights; Limits and deductibles. Accessed 2026-09-16.
4. [Regulatory information](https://www.cfc.com/en-us/support/regulatory-information/). CFC; CFC Underwriting Limited; CFC Lloyd's Syndicate 1988; CFC USA Inc.. Accessed 2026-09-23.
5. [Cyber insurance | CFC](https://www.cfc.com/en-us/products/class/cyber-insurance/). CFC; Cyber Proactive Response, Cyber (admitted), Corporate cyber, Cyber excess product summaries and Key features; FAQs: How is a cyber insurance policy structured?. Accessed 2026-09-23.
6. [Incident response | CFC](https://www.cfc.com/en-us/response/). CFC; Proactive protection; Immediate response; Real-time support. Accessed 2026-09-23.
7. [Protecting businesses against cyber risk (cyber product brochure)](https://www.cfc.com/media/mkkhlz5l/cfc_market-leading-cyber-insurance_brochure_may-2026_digital.pdf). CFC; Market-leading cover highlights: separate limit for incident response costs, unlimited reinstatements with nil deductible, full business interruption cover; Award-winning cyber claims team stats. Accessed 2026-09-23.
8. [Cyber Proactive Response Insurance application form (US)](https://www.cfc.com/media/clyfotxn/cyber-one-page-application-us-v12.pdf). CFC; Basic company details; Cyber security controls; Previous cyber incidents; footer entity line. Accessed 2026-09-23.

### Marsh

9. [Marsh | Leader in risk, strategy, people, and investments](https://www.marsh.com/en/home.html). Marsh; Hero and capability tiles; FAQ: What does Marsh do?; industries served; Is Marsh the same as Marsh McLennan? January 2026 brand change. Accessed 2026-09-16.
10. [Compensation guide for US clients](https://www.marsh.com/content/dam/marsh/Documents/PDF/US-en/us-client-compensation-guide.pdf). Marsh; US broking segments; broker role; retail commissions, client fees, wholesale, insurer consulting, contingent and supplemental commissions; Marsh LLC and Marsh USA LLC; page 3: broker role and Marsh & McLennan Agency segment; page 7: copyright © 2024 Marsh LLC. Accessed 2026-09-16.
11. [Marsh McLennan Agency (MMA)](https://www.marsh.com/en/services/marsh-mclennan-agency.html). Marsh; Middle-market US organizations; wholly-owned subsidiary; business insurance, employee health and benefits, retirement, private client. Accessed 2026-09-16.
12. [Technology | Insurance Broking & Risk Management](https://www.marsh.com/en/industries/technology.html). Marsh; Opening Technology Practice description; practice links including data center insurance, fintech and Stratus; Talk to us. Accessed 2026-09-16.
13. [Cyber Insurance](https://www.marsh.com/en/services/cyber-risk/expertise/cyber-insurance.html). Marsh; Opening brokerage positioning; products list including Cyber Pathway, Cyber Accelerate, Claims Advocacy, CyberPort, Cyber ECHO; Rachel Lavender, US and Canada Cyber Brokerage Leader. Accessed 2026-09-23.
14. [Cyber ECHO](https://www.marsh.com/en/services/cyber-risk/expertise/cyber-echo.html). Marsh; New for 2026: over $200 million capacity; free first reinstatement and paid second reinstatement; one underwriting lead and two claims leads per panel; Lloyd's, company markets or Bermuda-based insurers. Accessed 2026-09-23.
15. [Claims Advocacy](https://www.marsh.com/en/services/cyber-risk/expertise/claims-advocacy.html). Marsh; Global claims specialists negotiating cyber coverage issues; proof of loss with forensic accountants. Accessed 2026-09-23.
16. [Cyber Insurance | MMA](https://www.marshmma.com/us/solutions/cyber.html). Marsh McLennan Agency; Benefits of Cyber: understand, mitigate, respond, recover; Cyber Coverage list (incident investigation and response, network interruption, extortion/ransomware, data restoration, security and privacy liability, additional coverages); FAQ: Who needs cyber insurance coverage?. Accessed 2026-09-23.

### Cyber Insurance Guide

17. [Cyber Insurance](https://www.ftc.gov/business-guidance/small-businesses/cybersecurity/cyber-insurance). Federal Trade Commission; Opening; First-Party and Third-Party Coverage; First-Party Coverage; Third-Party Coverage; What Should Your Cyber Insurance Policy Cover. Accessed 2026-09-16.

Updated 2026-09-23. Spot, a product of Tools for Enlightenment, publishes this research and works in the commercial insurance market. The comparison applies the same criteria to both providers. [Editorial policy](https://spot.insure/editorial-policy). To suggest a correction, [contact Spot](https://spot.insure/contact) with the page URL and supporting source.

## Agent and Developer Resources

- [Markdown page](https://spot.insure/compare/cfc-vs-marsh/cyber.md)
- [Developer resources](https://spot.insure/developers)
- [Public MCP server](https://spot.insure/mcp)
- [MCP server manifest](https://spot.insure/server.json)
- [OpenAPI description](https://spot.insure/openapi.json)
- [Public page index](https://spot.insure/llms.txt)