CNA vs 
Gallagher: How Do They Compare for Cyber Insurance?
CNA's Epack 3 targets small and midsize businesses, while Gallagher names customer-data and electronic-payment exposure among the reasons small businesses consider cyber coverage. Their support descriptions also differ: CNA identifies policyholder cyber tools and response vendors; Gallagher describes eRiskHub and a forensic-accountant claims team for larger accounts. 4,10
CNA Small Business Insurance: Products, Agents and Service
CNA directs small-business buyers to independent agents and describes CNA Connect as a businessowners policy for more than 600 small-business classes. Issuer and availability vary by policy and state, so confirm both in a quote. 1,2,3
What Is Gallagher?
Gallagher’s technology specialists serve startups through global enterprises, while its executive-risk team supports IPO and M&A needs; small firms seeking one simple digital quote should compare online agencies. 5,6,7,8,9
What Is Cyber Insurance?
Cyber insurance can help pay covered response costs and claims against your business after a cyber incident. If your business relies on data, software or outside providers, compare response limits, vendor outages and approval rules. 12,13
Key Differences in Cyber Insurance
Stated Small-Business Audience
CNA describes Epack 3 as a cyber package for small and midsize businesses, and offers EPS Plus for professional-services firms. Gallagher's small-business page points to companies handling customer data or taking card and electronic-funds-transfer payments, with retail, healthcare, finance and home repair among its examples. One description starts from company size and product segment; the other names data and payment exposures as the reason to consider the coverage. 4 10
Security Resources and Incident Support
CNA says CyberAssist gives policyholders specialists, tools and services to find vulnerabilities and strengthen defenses, and names breach coaches, forensic firms and notification vendors. Gallagher's group-level cyber practice offers the eRiskHub portal and a dedicated claims team that includes cyber forensic accountants, but its record scopes those services to larger accounts. Ask Gallagher whether that support applies to a small-business placement; compare it with the resources attached to CNA's proposed policy. 4 11
What to Confirm in Cyber Insurance Quotes
- Ask CNA whether Epack 3 or EPS Plus is proposed and how the account fits its stated segment; ask Gallagher which insurer and form would address the documented customer-data or payment exposure. 4 10
- Ask Gallagher whether eRiskHub and the cyber forensic-accountant claims team serve this account size. For both proposals, get the named incident vendors, response-cost treatment and applicable limits in writing. 11 4
CNA and Gallagher Review Scores for 2026
These averages can combine ratings for different products, locations, and customer groups, including approximate BBB grade conversions. Read each review for the sources, scope, and calculation.
CNA Review Score
Review Score
1 rated source
Customer feedback on CNA is mixed and hard to compare. NerdWallet gave it 4.5 out of 5 for manufacturers, while Trustpilot shows about 1.4 out of 5 from 49 mostly self-selected reviews.[1][5]
Read CNA reviewsGallagher Review Score
Review Score
3 rated sources
Gallagher has strong Trustpilot feedback and a favorable historical large-commercial survey result. Neither directly measures today’s US small-business service.[2][4][6]
Read Gallagher reviewsCNA vs Gallagher Cyber Insurance Compared
CNA vs Gallagher: Cyber Insurance: documented features by provider
| Criteria | CNA Cyber Insurance | Gallagher Cyber Liability Insurance |
|---|---|---|
| Role in This Line | Confirm in your quote. | Gallagher Small Business arranges cyber liability coverage with outside carriers for small businesses; Gallagher's group-level practice separately places cyber coverage with its own risk-consulting services for larger accounts. Gallagher does not underwrite either policy. 10,11Company-reported. Small-business cyber product page and the group-level cyber liability page. |
| Issuing Insurer | Confirm in your quote. | Neither the small-business cyber page nor the group-level cyber liability page names the insurer that would issue a given client's policy. 10,11Not publicly disclosed. Checked both pages on 2026-09-23. |
| Who It’s For | CNA offers EPS Plus for professional-services firms and Epack 3, an admitted modular policy designed for small and midsize businesses that combines cyber, media, technology and professional liability. 4Company-reported. Entity: CNA brand; issuing CNA subsidiary may vary by product/state Product: United States commercial insurance Jurisdiction: United States Research source scope: US specialty commercial liability Claim limitation: Company-reported; policy wording, underwriting and jurisdiction-specific availability control. | Gallagher recommends this coverage for small businesses that handle customer data or accept credit card or electronic-funds-transfer payments, and specifically names retail, healthcare, financial services and home-repair businesses as frequent attack targets. 10Company-reported. Small-business cyber product page "Who needs Cyber Liability Insurance" section; actual acceptance depends on underwriting. |
| Coverage Features | Confirm in your quote. | Gallagher describes two components of cyber coverage: first-party coverage for when a business's own technology or data is breached, and third-party coverage for when a customer sues the business for failing to prevent a breach. It says the policy can cover customer notification, credit monitoring, legal fees and regulatory fines. 10Company-reported. Small-business cyber product page; a coverage description, not a specific policy's insuring agreement or exclusions. Gallagher's small-business team says cyber insurance rates are flat to down due to competitive market forces despite high-profile losses, and flags generative-AI-driven risks such as more convincing phishing, social-engineering and deepfake attacks as an emerging concern. 10Company-reported. Small-business cyber product page market-commentary section; a general market view, not a quote for any specific business. |
| Limits and Retentions | Confirm in your quote. | Neither page publishes specific cyber coverage limits, retentions or premium ranges; the small-business page's $60 million claim example is an illustrative scenario, not a stated policy limit. 10,11Not publicly disclosed. Checked both pages on 2026-09-23. |
| Risk Services | CNA CyberAssist gives policyholders cybersecurity specialists, tools and services to identify vulnerabilities, strengthen defenses and respond. 4Company-reported. Entity: CNA brand; issuing CNA subsidiary may vary by product/state Product: United States commercial insurance Jurisdiction: United States Research source scope: US specialty commercial liability Claim limitation: Company-reported; policy wording, underwriting and jurisdiction-specific availability control. CNA identifies breach coaches, forensic firms and notification/call-center vendors for incident response. 4Company-reported. Entity: CNA brand; issuing CNA subsidiary may vary by product/state Product: United States commercial insurance Jurisdiction: United States Research source scope: US specialty commercial liability Claim limitation: Company-reported; policy wording, underwriting and jurisdiction-specific availability control. | For larger accounts, Gallagher's group-level cyber practice gives clients access to the Gallagher eRiskHub risk-management portal and a dedicated claims team that includes cyber forensic accountants; the small-business product page does not describe an equivalent service for that segment. 11Company-reported. Group-level cyber liability page; not confirmed as included with the small-business product. |
Related Pages for CNA vs Gallagher Cyber Insurance
Cyber Insurance Pages for CNA and Gallagher
Other Coverage Lines Compared for CNA vs Gallagher
Other Cyber Insurance Provider Comparisons
Sources for CNA vs Gallagher Cyber Insurance
Sources About CNA
- Insurance for Small Businesses. CNA; Insurance for Small Businesses, lines 38-50 and 65-67 (CNA Central and agent route); lines 79-106 (product and stated appetite lists); page footer line 132 (CNA registered service mark). Accessed 2026-09-28.
- CNA Connect Small Businessowners Policy (BOP) | CNA Insurance. CNA; CNA Connect; coverages, product range, services. Accessed 2026-09-28.
- General Disclaimer. CNA; General Disclaimer paragraphs 1 and 5 (HTML lines 24 and 28): CNA describes Continental Casualty Company and its relevant affiliates; references to CNA may include one or more CCC affiliates; each particular policy/product/service is the responsibility only of the specific CNA company that issues or supplies it. Footer line 57 identifies CNA Financial Corporation as trademark registrant. Re-read 2026-09-29. Accessed 2026-09-29.
- Cyber Insurance - Cyber Risk Solutions | CNA Insurance. CNA; Cyber, Media, Technology & Professional Liability; product sections. Accessed 2026-09-28.
Sources About Gallagher
- Technology Insurance. Gallagher; Introduction; Solutions and coverages for the technology industry: Technology errors and omissions including cyber, Intellectual property insurance, Product liability, Employee benefits; Data-driven insights; global network. Accessed 2026-09-16.
- Insurance for Technology & IT Businesses. Gallagher Small Business; Protection for IT Professionals & Their Technology-Based Businesses; recommended coverage menu, including Surety Bond Programs; Connect With An Advisor. Accessed 2026-09-16.
- Executive and Financial Risk Insurance. Gallagher; Opening (insurance broking and placement); three key services; Directors and Officers; IPO and direct listings; Employment Practices; Fiduciary; Employee Dishonesty (Crime) and Fidelity Bond; Kidnap, Ransom and Extortion; M&A Transactional Insurance. Accessed 2026-09-16.
- Legal Information. Gallagher Small Business; Producer identification immediately above Quick Links. Accessed 2026-09-16.
- Woodruff Sawyer Is Now Gallagher. Gallagher; Opening; Executive and Financial Risk consulting; Continued access to client portals; contact form. Accessed 2026-09-16.
- Cyber Liability Insurance: What is it? Who Needs It? Gallagher Small Business; What is Cyber Insurance?; Do you need cyber liability insurance?; Types of Cyber Liability Insurance (first-party and third-party); Who needs Cyber Liability Insurance; Cyber market trends; Consider this Cyber Liability Insurance claim example. Accessed 2026-09-23.
- Cyber Liability Insurance. Gallagher; Protect your business from cyber threats; We help you prevent, mitigate, manage and recover from a cybersecurity incident: Cyber exposure preparation, Insurance process preparation, Prevention and ongoing cyber risk management, Claims advocacy; Gallagher eRiskHub; dedicated claims team with cyber forensic accountants. Accessed 2026-09-23.
Sources for the Cyber Insurance Guide
- Cyber Insurance. Federal Trade Commission; Opening; First-Party and Third-Party Coverage; First-Party Coverage; Third-Party Coverage; What Should Your Cyber Insurance Policy Cover. Accessed 2026-09-16.
- CyberEdge specimen policy. AIG; General Terms §§4–6, PDF pp.3–6; Security and Privacy §1 p.11, §2(l)/(p) p.14, §3 pp.15–18, exclusions p.18; Event Management §1 and §2(h), PDF pp.19–20. Accessed 2026-09-16.
