Resilience vs THREE by Berkshire Hathaway: How Do They Compare for Cyber Insurance?

Resilience pairs a cyber insurance policy with security services such as threat monitoring and breach-and-attack simulations. In the US, the policy is placed by a distributor rather than underwritten by the Resilience brand itself. ³Company-reported. Cyber Insurance product page description of the combined offering, accessed 2026-09-23.

THREE presents Cyber as a component of its combined Business Owners Policy rather than identifying it as a separate standalone policy on the reviewed product page. ⁸Company-reported. Company-described U.S. package structure. The page does not establish underwriting terms or that every listed category will be included for every applicant.

Resilience's US disclosure states that cyber insurance products are distributed by Ocrea Risk Services, LLC (NPN 19169260), doing business as Resilience Cyber Insurance Solutions, and underwritten by Homeland Insurance Company of New York or Homeland Insurance Company of Delaware, both subsidiaries of Intact Insurance Group USA LLC. The disclosure does not say which of the two Homeland entities issues a given policy. ⁴Company-reported. US paragraph of Resilience's disclaimer page, accessed 2026-09-23; product- and state-specific issuer mapping is not published.

The linked sample policy's declarations identify Berkshire Hathaway Direct Insurance Company as issuer. ⁷Company-reported. This is the issuer named on the public sample only; the sample does not establish the issuing entity for every state-specific quote or buyer's issued policy.

Resilience markets US cyber insurance across industries including healthcare, higher education, financial institutions and services, manufacturing, construction, law firms, professional services, public entities, retail, hospitality, technology, life sciences, medical devices and pharmaceuticals. ³Company-reported. "Broad Market Appetite" availability table for the United States, accessed 2026-09-23; the table does not state a minimum revenue or company-size threshold for cyber (unlike the separate tech E&O appetite range).

The reviewed product page does not state separate eligibility rules for Cyber; the general quote and advisor route is not proof that a particular business qualifies for it. ^8,6Not publicly disclosed. Eligibility and state availability remain unestablished for an individual risk until THREE returns its quote and applicable forms.

Resilience lists privacy wrongful-act coverage, eCrime coverage up to $500,000, coverage for incident costs that exceed the policy limit (such as legal, forensics and crisis communications), and funds-transfer-fraud recovery assistance among its cyber policy features. ³Company-reported. "Policy Coverage" section of the product page; actual insuring agreements, sublimits and exclusions are set by the issued policy.

THREE's Business Owners Policy page lists Cyber Liability among its marketed coverage categories in the combined policy. This describes the product page, not whether the category appears in a particular quote or responds to a loss. ^8,7Company-reported. Official THREE package marketing for Cyber. The sample policy is state-selectable and does not establish that this item is included in every quote or issued policy.

Resilience advertises cyber limits up to $20 million, available on a primary or excess basis, with a separate eCrime sublimit of up to $500,000. The page does not publish minimum limits, retentions or deductibles. ³Company-reported. "Top-Rated Insurance with Broad Market Appetite" and "Policy Coverage" sections; figures are marketing maximums, not a specific quote.

The reviewed public product page does not state a separate limit or deductible for Cyber; THREE says the quote-specific insurance summary lists limits and deductibles. ^8,7Not publicly disclosed. No number is inferred from the sample policy. The quote and issued declarations control the buyer-specific limit and deductible.

Resilience says policyholders get proactive threat monitoring from its Risk Operations Center and access to breach-and-attack simulations powered by AttackIQ, in addition to the policy itself. ³Company-reported. "The Resilience Advantage" section of the cyber product page.

Confirm in your quote.

The reviewed cyber product page does not describe a self-service online application or quoting process; it routes visitors to request a quote or watch a product overview rather than showing an application flow. ³Not publicly disclosed. Cyber Insurance product page, accessed 2026-09-23.

THREE directs small-business prospects to an online quote and says licensed Small Business Advisors can help with the process. ⁶Company-reported. This is the route for the overall THREE product. It does not show whether Cyber will be offered for a particular business or whether a customer can bind that line without an issued policy.

Resilience describes a fully in-house claims and incident-response team available 24/7, with a dedicated claims manager who stays with the policyholder from initial triage through settlement, backed by an outside panel of privacy-law, forensics and crisis-communications specialists. ⁵Company-reported. Claims & Incident Response page, accessed 2026-09-23; response-time and outcome statistics on that page are company-reported and not independently verified.

Confirm in your quote.