Risklytics vs THREE by Berkshire Hathaway: How Do They Compare for Cyber Insurance?

Risklytics Insurance Services is a licensed insurance producer (NPN 22311838) that places Risklytics Cyber Liability Insurance with outside carriers; it says it does not underwrite policies itself. ¹Company-reported. About page; describes Risklytics' brokerage model generally, restated for this line.

THREE presents Cyber as a component of its combined Business Owners Policy rather than identifying it as a separate standalone policy on the reviewed product page. ⁸Company-reported. Company-described U.S. package structure. The page does not establish underwriting terms or that every listed category will be included for every applicant.

Risklytics does not name the carrier that underwrites Risklytics Cyber Liability Insurance on its site. It says it places business with specialist insurers willing to write robotics, autonomy and AI risk; the issuing carrier appears on the bound policy. ^4,1Company-reported. Lines page and about page; no specific insurer is published for this line.

The linked sample policy's declarations identify Berkshire Hathaway Direct Insurance Company as issuer. ⁷Company-reported. This is the issuer named on the public sample only; the sample does not establish the issuing entity for every state-specific quote or buyer's issued policy.

Risklytics says companies typically need this coverage the first time they hold customer data in production, and that enterprise and government contracts require it once a vendor touches their data. ⁴Company-reported. Lines page.

The reviewed product page does not state separate eligibility rules for Cyber; the general quote and advisor route is not proof that a particular business qualifies for it. ^8,6Not publicly disclosed. Eligibility and state availability remain unestablished for an individual risk until THREE returns its quote and applicable forms.

Risklytics describes Cyber Liability as paying for breach cleanup, legally required notifications, and the claims that follow a hack or data leak, such as a ransomware attack or exfiltrated customer records, and says it does not respond to a model giving bad output with no breach involved. ⁴Company-reported. Lines page; the issued policy and declarations control actual coverage.

THREE's Business Owners Policy page lists Cyber Liability among its marketed coverage categories in the combined policy. This describes the product page, not whether the category appears in a particular quote or responds to a loss. ^8,7Company-reported. Official THREE package marketing for Cyber. The sample policy is state-selectable and does not establish that this item is included in every quote or issued policy.

Risklytics lists a typical ask of $1 million or more in enterprise contracts for this line. ⁴Company-reported. Lines page; actual limits are set on the bound policy.

The reviewed public product page does not state a separate limit or deductible for Cyber; THREE says the quote-specific insurance summary lists limits and deductibles. ^8,7Not publicly disclosed. No number is inferred from the sample policy. The quote and issued declarations control the buyer-specific limit and deductible.

Risklytics calls cyber the easiest line for its clients to get with reasonable security basics in place, and says whether a prompt-injection attack or a model leaking data is covered depends on policy wording it reads before binding. ⁴Company-reported. Lines page.

Confirm in your quote.

You start Risklytics Cyber Liability Insurance through Risklytics' online application. Risklytics says there is no broker fee on top of the premium and a licensed producer stays on the file until the program binds; its commission is paid by the carrier out of the premium either way. ^5,1Company-reported. Pricing page describes the general application and fee process, not a line-specific form.

THREE directs small-business prospects to an online quote and says licensed Small Business Advisors can help with the process. ⁶Company-reported. This is the route for the overall THREE product. It does not show whether Cyber will be offered for a particular business or whether a customer can bind that line without an issued policy.