Gallagher vs Resilience Cyber Insurance

Gallagher Small Business arranges cyber liability coverage with outside carriers for small businesses; Gallagher's group-level practice separately places cyber coverage with its own risk-consulting services for larger accounts. Gallagher does not underwrite either policy. ^6,7Company-reported. Small-business cyber product page and the group-level cyber liability page.

Resilience pairs a cyber insurance policy with security services such as threat monitoring and breach-and-attack simulations. In the US, the policy is placed by a distributor rather than underwritten by the Resilience brand itself. ¹⁰Company-reported. Cyber Insurance product page description of the combined offering, accessed 2026-09-23.

Neither the small-business cyber page nor the group-level cyber liability page names the insurer that would issue a given client's policy. ^6,7Not publicly disclosed. Checked both pages on 2026-09-23.

Resilience's US disclosure states that cyber insurance products are distributed by Ocrea Risk Services, LLC (NPN 19169260), doing business as Resilience Cyber Insurance Solutions, and underwritten by Homeland Insurance Company of New York or Homeland Insurance Company of Delaware, both subsidiaries of Intact Insurance Group USA LLC. The disclosure does not say which of the two Homeland entities issues a given policy. ¹¹Company-reported. US paragraph of Resilience's disclaimer page, accessed 2026-09-23; product- and state-specific issuer mapping is not published.

Gallagher recommends this coverage for small businesses that handle customer data or accept credit card or electronic-funds-transfer payments, and specifically names retail, healthcare, financial services and home-repair businesses as frequent attack targets. ⁶Company-reported. Small-business cyber product page "Who needs Cyber Liability Insurance" section; actual acceptance depends on underwriting.

Resilience markets US cyber insurance across industries including healthcare, higher education, financial institutions and services, manufacturing, construction, law firms, professional services, public entities, retail, hospitality, technology, life sciences, medical devices and pharmaceuticals. ¹⁰Company-reported. "Broad Market Appetite" availability table for the United States, accessed 2026-09-23; the table does not state a minimum revenue or company-size threshold for cyber (unlike the separate tech E&O appetite range).

Gallagher describes two components of cyber coverage: first-party coverage for when a business's own technology or data is breached, and third-party coverage for when a customer sues the business for failing to prevent a breach. It says the policy can cover customer notification, credit monitoring, legal fees and regulatory fines. ⁶Company-reported. Small-business cyber product page; a coverage description, not a specific policy's insuring agreement or exclusions.

Gallagher's small-business team says cyber insurance rates are flat to down due to competitive market forces despite high-profile losses, and flags generative-AI-driven risks such as more convincing phishing, social-engineering and deepfake attacks as an emerging concern. ⁶Company-reported. Small-business cyber product page market-commentary section; a general market view, not a quote for any specific business.

Resilience lists privacy wrongful-act coverage, eCrime coverage up to $500,000, coverage for incident costs that exceed the policy limit (such as legal, forensics and crisis communications), and funds-transfer-fraud recovery assistance among its cyber policy features. ¹⁰Company-reported. "Policy Coverage" section of the product page; actual insuring agreements, sublimits and exclusions are set by the issued policy.

Neither page publishes specific cyber coverage limits, retentions or premium ranges; the small-business page's $60 million claim example is an illustrative scenario, not a stated policy limit. ^6,7Not publicly disclosed. Checked both pages on 2026-09-23.

Resilience advertises cyber limits up to $20 million, available on a primary or excess basis, with a separate eCrime sublimit of up to $500,000. The page does not publish minimum limits, retentions or deductibles. ¹⁰Company-reported. "Top-Rated Insurance with Broad Market Appetite" and "Policy Coverage" sections; figures are marketing maximums, not a specific quote.

For larger accounts, Gallagher's group-level cyber practice gives clients access to the Gallagher eRiskHub risk-management portal and a dedicated claims team that includes cyber forensic accountants; the small-business product page does not describe an equivalent service for that segment. ⁷Company-reported. Group-level cyber liability page; not confirmed as included with the small-business product.

Resilience says policyholders get proactive threat monitoring from its Risk Operations Center and access to breach-and-attack simulations powered by AttackIQ, in addition to the policy itself. ¹⁰Company-reported. "The Resilience Advantage" section of the cyber product page.

Not described in the reviewed sources.

The reviewed cyber product page does not describe a self-service online application or quoting process; it routes visitors to request a quote or watch a product overview rather than showing an application flow. ¹⁰Not publicly disclosed. Cyber Insurance product page, accessed 2026-09-23.

Not described in the reviewed sources.

Resilience describes a fully in-house claims and incident-response team available 24/7, with a dedicated claims manager who stays with the policyholder from initial triage through settlement, backed by an outside panel of privacy-law, forensics and crisis-communications specialists. ¹²Company-reported. Claims & Incident Response page, accessed 2026-09-23; response-time and outcome statistics on that page are company-reported and not independently verified.