CFC vs Risklytics Cyber Insurance

CFC's flagship cyber product, Cyber Proactive Response, targets businesses with revenues from $0 to $250 million and pairs the policy with built-in security monitoring, incident response and claims handling rather than selling those as add-ons. ⁵Company-reported. Cyber insurance product page's Cyber Proactive Response summary; CFC separately sells Cyber (admitted), Corporate cyber for businesses at $250 million and up, and a Cyber excess policy.

Risklytics Insurance Services is a licensed insurance producer (NPN 22311838) that places Risklytics Cyber Liability Insurance with outside carriers; it says it does not underwrite policies itself. ⁹Company-reported. About page; describes Risklytics' brokerage model generally, restated for this line.

The Cyber Proactive Response application form names only CFC Underwriting Limited, an entity authorized and regulated by the UK Financial Conduct Authority, as the party administering the form. Neither the cyber product page nor the application discloses which specific insurer or Lloyd's syndicate capacity sits behind a US Cyber Proactive Response policy. ^8,4Not publicly disclosed. Application footer and the regulatory information page, both checked on 2026-09-23; CFC also operates Lloyd's Syndicate 1988 and CFC USA Inc.'s admitted and E&S licenses, but no page ties one of these specifically to Cyber Proactive Response.

Risklytics does not name the carrier that underwrites Risklytics Cyber Liability Insurance on its site. It says it places business with specialist insurers willing to write robotics, autonomy and AI risk; the issuing carrier appears on the bound policy. ^12,9Company-reported. Lines page and about page; no specific insurer is published for this line.

CFC segments cyber eligibility by revenue: Cyber Proactive Response and Cyber (admitted) are positioned for businesses with revenues from $0 to $250 million, while Corporate cyber is for businesses at $250 million and above. ⁵Company-reported. Cyber product page product summaries; actual eligibility for a given applicant depends on underwriting.

Risklytics says companies typically need this coverage the first time they hold customer data in production, and that enterprise and government contracts require it once a vendor touches their data. ¹²Company-reported. Lines page.

Cyber Proactive Response includes crime cover, a 12-month indemnity period for business interruption, and data recreation cover, with unlimited claim reinstatements available at either no deductible or a single deductible at most. ⁵Company-reported. Cyber product page Key features list for Cyber Proactive Response.

Risklytics describes Cyber Liability as paying for breach cleanup, legally required notifications, and the claims that follow a hack or data leak, such as a ransomware attack or exfiltrated customer records, and says it does not respond to a model giving bad output with no breach involved. ¹²Company-reported. Lines page; the issued policy and declarations control actual coverage.

For larger businesses, CFC's Corporate cyber product (for revenues of $250 million or more) has a published maximum line size of $25 million; the Cyber Proactive Response and Cyber (admitted) pages for smaller businesses do not publish a maximum dollar limit. ⁵Company-reported. Cyber product page Corporate cyber Key features; limit for any individual policy appears on its declarations.

Risklytics lists a typical ask of $1 million or more in enterprise contracts for this line. ¹²Company-reported. Lines page; actual limits are set on the bound policy.

Every CFC cyber policyholder gets CFC Response, described as an in-house incident-response service available 24/7, plus a free mobile app offering dark web monitoring, phishing simulations and external network deep scanning. ^6,7Company-reported. Response page and cyber brochure; CFC characterizes its incident response team as one of the largest in-house teams in the industry, a claim not independently verified here.

Risklytics calls cyber the easiest line for its clients to get with reasonable security basics in place, and says whether a prompt-injection attack or a model leaking data is covered depends on policy wording it reads before binding. ¹²Company-reported. Lines page.

The US Cyber Proactive Response application is a one-page form asking whether multi-factor authentication is enforced for remote network access and email, whether backups are offline or MFA-secured, and whether the business had a cyber incident in the last three years. ⁸Company-reported. Cyber Proactive Response application form sections on cyber security controls and previous cyber incidents.

You start Risklytics Cyber Liability Insurance through Risklytics' online application. Risklytics says there is no broker fee on top of the premium and a licensed producer stays on the file until the program binds; its commission is paid by the carrier out of the premium either way. ^13,9Company-reported. Pricing page describes the general application and fee process, not a line-specific form.

CFC says its in-house cyber claims team resolves several thousand cyber claims a year and reports a 99.4% cyber claims acceptance rate over a recent 12-month period. ⁷Company-reported. Cyber brochure claims statistics; these are company-reported figures and were not independently audited.

Not described in the reviewed sources.