Cyber Insurance

The latest line of defense against rising cyber attacks

Overview

Cyber insurance provides additional defense against rising cyber threats

Cyber insurance is a specialty insurance product that protects organizations from liabilities arising from cybersecurity incidents. General liability insurance policies provide very limited coverage for such events, giving rise to specialized products to cover both first- and third-party liabilities arising from cyber incidents.

AI and machine learning are helping insurers better assess and quantify risk across an ever-evolving threat landscape. These tools assist in pricing and underwriting while helping insurers continuously monitor client systems (and by extension, their portfolio risk) and obtain insights to improve security posture.

Data breaches and ransomware extortions can potentially cost a company millions, making cyber insurance an attractive investment at just a fraction of the cost. Such policies are particularly helpful for smaller businesses, which often lack adequate resources for strong cyber defense, as an attack can threaten their existence in most cases. While not a complete replacement for standalone cybersecurity solutions, the insurance policy and its bundled value-additions help companies by cushioning the financial impact, helping with incident response, and improving their overall security health.

Industry Updates

View all updatesicon
Market Sizing

The US Cyber Insurance market could reach USD 10.4 billion–14.0 billion by 2028

Conservative case

USD 0.0 Bn

Base case

USD 0.0 Bn

Expansion case

USD 0.0 Bn

Market Mapping


The cyber insurance industry features companies that provide cyber insurance (either as a pure play startup or as part of a wider commercial offering) as well as companies that offer risk assessment, rating, and modelling services. Most disruptors in this space are pure play insurance providers—a segment that also accounts for the highest funding, with companies such as Coalition and At-Bay being among the highest funded. 

Companies in the commercial insurance segment mainly offer commercial property and casualty insurance policies and have introduced cyber insurance to complement their existing product portfolio. Most incumbents, being larger commercial insurers (such as Allianz, AIG, AXA), fall under this segment.

Both pure play players and commercial insurers follow a hybrid model, where cyber insurance policies are bundled with value-added services such as technologies and human experts to help policyholders manage cyber risks and post-incident response.

Companies that offer risk assessment, rating, and cyber risk modelling solutions, help cyber insurance brokers and underwriters to assess and quantify risks of both potential and existing clients. These services help with underwriting and ongoing portfolio management decisions. Incumbents in these segments have entered this industry mainly through acquisitions.

The Disruptors


Nearly 70% of the disruptors we have identified in the cyber insurance industry were established over the last five years. Almost half of all disruptors were pure play providers of cyber insurance policies. Companies in this segment account for the lion’s share of the total funding that came into the industry, with over USD 813 million in funds raised by September 2021. 

Coalition is the highest-funded and most valuable startup across the insurance provider segments, raising USD 315 million by September 2021 with a USD 1.75 billion valuation. Pure-play insurer At-Bay and risk ratings startup Security Scorecard are the other key unicorns, having fetched valuations of USD 1.35 billion (July 2021) and USD 1 billion (March 2021), respectively. Security Scorecard is also the highest funded company in the risk assessment and ratings segment, with BitSight leading the pack of risk modeling startups.

Funding History

Competitive Analysis


Filter by a segment or companies of your choice
expand
 
Loading...
Loading...
Loading...
Loading...
Product Overview
-
Loading...
Loading...
Loading...
Loading...
-
Loading...
Loading...
Loading...
Loading...
-
Loading...
Loading...
Loading...
Loading...
-
Loading...
Loading...
Loading...
Loading...
-
Loading...
Loading...
Loading...
Loading...
Product Metrics
-
Loading...
Loading...
Loading...
Loading...
-
Loading...
Loading...
Loading...
Loading...
-
Loading...
Loading...
Loading...
Loading...
-
Loading...
Loading...
Loading...
Loading...
-
Loading...
Loading...
Loading...
Loading...
Company profile
-
Loading...
Loading...
Loading...
Loading...
-
Loading...
Loading...
Loading...
Loading...
-
Loading...
Loading...
Loading...
Loading...
-
Loading...
Loading...
Loading...
Loading...
-
Loading...
Loading...
Loading...
Loading...

Incumbents


Established insurers enhance cyber insurance capacity and technologies through partnerships

The incumbents in the cyber insurance industry mostly consist of large, established commercial insurers who offer cyber insurance to complement their existing commercial insurance products. Similar to disruptors, the incumbents also follow a preventative approach to cyber insurance by bundling value-added services such as tools to identify threats and manage risks, along with access to cybersecurity professionals to assist in response strategies.

Incumbents such as Aon and Brown & Brown have acquired smaller commercial insurtech startups to absorb technologies and accelerate their entry into the cyber insurance market. Additionally, partnerships have also been prevalent, with the most common partnerships being with 1) other insurers— to share capacity and best practices (Liberty Mutual and AIG), 2) technology companies— to offer insurance as a combined offering (Allianz and Apple, Munich Re and Google), and 3) cybersecurity providers— to provide bundled solutions (Allianz and Check Point Software).

Incumbents in the risk-related segments of risk rating, assessment, and modeling have entered the industry through acquisitions, in a bid to launch cyber risk services, on top of their existing product offerings.

In House Development
M&A
Partnership
Investment
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...

Notable Investors


?
Funding data are powered by Crunchbase
arrow
menuarrow
close

Contact us

Gain access to all industry hubs, market maps, research tools, and more
Get a demo

Overview

Cyber insurance is becoming an important tool in the corporate incident response arsenal

Cyber insurance is a specialty insurance product that protects organizations from liabilities arising from cybersecurity incidents. General liability insurance policies for enterprises provide little to no coverage for cybersecurity events, giving rise to specialized insurance products to cover these liabilities.

Policies cover first- and third-party damages, usually under an agency model

A cyber insurance policy typically provides coverage against first- and third-party liabilities. First-party liabilities are those incurred by the company that carries the insurance policy, while third-party liabilities refer to claims made by external parties because of cybersecurity incidents.

Liabilities covered under a typical cyber insurance policy

Most startups that offer cyber insurance operate under an agency model, where they issue policies that are underwritten by a larger insurer/reinsurer, although several prominent players in the space have recently started writing their own insurance policies and adopting a full-stack insurer model, usually through the acquisition of a fully admitted carrier. Some cyber insurance providers also offer coverage for technological errors and omissions (E&O)—a special policy that protects companies (mainly in tech) against legal liabilities arising from errors in the products they sell.

Cyber insurance is not a substitute, but part of a wider cyber defense strategy

Click here to learn more
Get a demo

By using this site, you agree to allow SPEEDA Edge and our partners to use cookies for analytics and personalization. Visit our privacy policy for more information about our data collection practices.