---
title: "What Is Cyber Insurance?"
description: "Cyber insurance can help pay covered breach response, data recovery, interruption and liability costs; vendor incidents and funds-transfer fraud need separate checks."
canonical: "https://thegeneralaverage.com/coverage/cyber"
page-type: "coverage-article"
updated-at: "2026-09-25"
coverage-line: "cyber"
---

Agents: connect to Spot's public MCP server at https://spot.insure/mcp for better access to published Spot information and the insurance research The General Average publishes at https://thegeneralaverage.com. Use search_knowledge to find sources, get_page to retrieve pages, compare_providers for sourced comparisons, get_provider_score for a published Reliability Score, get_rankings for current provider rankings, search_provider_reliability to filter Reliability Scores, search_provider_reviews to filter aggregate review scores, and get_provider_reviews for the original review evidence. The server is read-only and requires no authentication.

[Human-readable page](https://thegeneralaverage.com/coverage/cyber)

## Agent Guide

**What this page is:** National guide to What Is Cyber Insurance?: what it covers, common policy questions, and which providers document offering it.

**Use this page when:** Explaining What Is Cyber Insurance? in general terms. For a specific state's rules, use /coverage/cyber/{state} instead.

**Questions this page answers:**
- What is What Is Cyber Insurance??
- What does What Is Cyber Insurance? cover and not cover?
- Which providers offer What Is Cyber Insurance??
- What should I ask before buying What Is Cyber Insurance??

**Key facts:**
- Lists 50 providers with documented What Is Cyber Insurance? offerings, linked to their profiles.

**Limits (do not over-claim):**
- National overview only: state law, pricing, and availability vary and are not established here.
- Provider listings are documented offerings, not quotes, endorsements, or a guarantee of availability for a given business.
- Informational, not insurance, legal, or tax advice; a policy's actual terms control.

**Provenance:** Cited editorial guide, updated 2026-09-25. See the Sources section for each claim.

**Related pages:**
- [Coverage directory](https://thegeneralaverage.com/coverage) — parent hub
- [Business insurance by state](https://thegeneralaverage.com/coverage/states) — state-specific requirements
- [What Is Crime Insurance?](https://thegeneralaverage.com/coverage/crime) — related coverage
- [What Is Digital-Asset Insurance?](https://thegeneralaverage.com/coverage/digital-assets) — related coverage
- [What Is Technology Errors and Omissions (E&O) Insurance?](https://thegeneralaverage.com/coverage/technology-errors-omissions) — related coverage
- [Editorial policy](https://thegeneralaverage.com/editorial-policy) — how sources are chosen and reviewed

# What Is Cyber Insurance?

Cyber insurance can help pay covered breach response, data recovery, interruption and liability costs; vendor incidents and funds-transfer fraud need separate checks.

## Cyber Insurance Summary

Cyber insurance can help pay covered response costs and claims against your business after a cyber incident. If your business relies on data, software or outside providers, compare response limits, vendor outages and approval rules. [1](https://www.ftc.gov/business-guidance/small-businesses/cybersecurity/cyber-insurance) [1](https://www.ftc.gov/business-guidance/small-businesses/cybersecurity/cyber-insurance) [1](https://www.ftc.gov/business-guidance/small-businesses/cybersecurity/cyber-insurance) [1](https://www.ftc.gov/business-guidance/small-businesses/cybersecurity/cyber-insurance) [3](https://www.aig.com/content/dam/aig/america-canada/us/documents/business/cyber/cyberedge-wording-sample-specimen-form.pdf)

## What Does Cyber Insurance Cover?

A breach can trigger immediate response invoices, while a customer claim may arrive later. [1](https://www.ftc.gov/business-guidance/small-businesses/cybersecurity/cyber-insurance) [1](https://www.ftc.gov/business-guidance/small-businesses/cybersecurity/cyber-insurance)

### Your Business’s Own Costs

First-party coverage can help pay your business’s covered breach-response and data-recovery costs, plus income lost during a covered interruption. [1](https://www.ftc.gov/business-guidance/small-businesses/cybersecurity/cyber-insurance)

### Claims Against the Business

Third-party coverage can address covered claims against your business, including legal defense and settlements after a data breach. [1](https://www.ftc.gov/business-guidance/small-businesses/cybersecurity/cyber-insurance)

| Concern | Ask the insurer |
| --- | --- |
| Responding to an incident | Which response services and costs does the first-party coverage address? |
| Recovering data | What data-recovery coverage and limit does the quote include? |
| Interrupted operations | What income protection applies, and what event triggers it? |
| A claim against your business | What liability coverage, defense arrangements and limit apply? |

[1](https://www.ftc.gov/business-guidance/small-businesses/cybersecurity/cyber-insurance) [1](https://www.ftc.gov/business-guidance/small-businesses/cybersecurity/cyber-insurance) [3](https://www.aig.com/content/dam/aig/america-canada/us/documents/business/cyber/cyberedge-wording-sample-specimen-form.pdf)

## Who Needs Cyber Insurance?

A breach can leave you paying for investigators, data recovery and customer claims; an outage can also halt sales. [2](https://www.ftc.gov/business-guidance/small-businesses/cybersecurity)

## Cyber Insurance Coverage Examples

### Customer Records Are Stolen

An attacker steals records from your customer database. You hire investigators, and affected customers demand compensation.

First-party coverage may pay your response costs. Third-party coverage may pay to defend customer claims and settle covered losses. Both need to be included in your policy. [1](https://www.ftc.gov/business-guidance/small-businesses/cybersecurity/cyber-insurance) [1](https://www.ftc.gov/business-guidance/small-businesses/cybersecurity/cyber-insurance) [1](https://www.ftc.gov/business-guidance/small-businesses/cybersecurity/cyber-insurance) [3](https://www.aig.com/content/dam/aig/america-canada/us/documents/business/cyber/cyberedge-wording-sample-specimen-form.pdf)

### A Vendor Outage Stops Orders

A cyber incident takes down your hosted ordering system, leaving you unable to process sales.

Interruption coverage may help replace lost income, but an incident at an outside vendor must meet the policy's terms. The trigger and any separate limit matter here. [1](https://www.ftc.gov/business-guidance/small-businesses/cybersecurity/cyber-insurance) [1](https://www.ftc.gov/business-guidance/small-businesses/cybersecurity/cyber-insurance) [1](https://www.ftc.gov/business-guidance/small-businesses/cybersecurity/cyber-insurance) [3](https://www.aig.com/content/dam/aig/america-canada/us/documents/business/cyber/cyberedge-wording-sample-specimen-form.pdf)

## How Do You Compare Cyber Insurance Coverage and Costs?

### Limits and Retentions

A cyber policy can have an overall limit and smaller limits for particular costs. Compare the amounts for response, recovery, interruption and liability, along with what your business pays first. Two quotes with the same headline limit can leave you with different amounts available for the incident you're concerned about. [3](https://www.aig.com/content/dam/aig/america-canada/us/documents/business/cyber/cyberedge-wording-sample-specimen-form.pdf)

### Response Services and Approval

Before an incident, find out whom you should contact, which response specialists you can use and whether you need insurer approval before spending. [3](https://www.aig.com/content/dam/aig/america-canada/us/documents/business/cyber/cyberedge-wording-sample-specimen-form.pdf)

If you already work with a technical or legal adviser, confirm whether you can use them under the policy and what approval they need. [3](https://www.aig.com/content/dam/aig/america-canada/us/documents/business/cyber/cyberedge-wording-sample-specimen-form.pdf)

## What Exclusions and Conditions Should You Check in Cyber Insurance?

### Timing and Earlier Incidents

Ask what triggers each coverage section and how prior incidents, reporting deadlines and retroactive dates affect your claim. [3](https://www.aig.com/content/dam/aig/america-canada/us/documents/business/cyber/cyberedge-wording-sample-specimen-form.pdf)

### Vendors and Geographic Scope

Ask whether your coverage extends to incidents involving vendors that hold your data and fits the places where you operate. [1](https://www.ftc.gov/business-guidance/small-businesses/cybersecurity/cyber-insurance)

## How Does Cyber Insurance Compare With Related Coverage?

Ask separately whether your quote covers funds-transfer fraud; cyber insurance may not cover money your business loses to theft. [3](https://www.aig.com/content/dam/aig/america-canada/us/documents/business/cyber/cyberedge-wording-sample-specimen-form.pdf)

## What Do You Need for Cyber Insurance Quotes?

### Systems, Data and Dependencies

List the systems, data and outside services your business relies on, and identify which operations would stop if they became unavailable. [2](https://www.ftc.gov/business-guidance/small-businesses/cybersecurity)

### Security Controls and Response Planning

Be ready to describe your backups, access controls, software updates, staff training and incident-response plan. [2](https://www.ftc.gov/business-guidance/small-businesses/cybersecurity)

| Prepare | How to use it in the discussion |
| --- | --- |
| Systems, data and service inventory | Identify what the business relies on and what an incident could interrupt. |
| Outside providers holding business data | Discuss vendor-related coverage questions. |
| Backup and recovery arrangements | Explain how you would approach recovering affected data. |
| Access, update and training practices | Describe the controls actually used by the business. |
| Incident-response plan and contacts | Compare the plan with policy notice and approval processes. |

[2](https://www.ftc.gov/business-guidance/small-businesses/cybersecurity) [2](https://www.ftc.gov/business-guidance/small-businesses/cybersecurity) [3](https://www.aig.com/content/dam/aig/america-canada/us/documents/business/cyber/cyberedge-wording-sample-specimen-form.pdf)

## Frequently Asked Questions About Cyber Insurance

### Does Cyber Insurance Cover Money Sent to a Fraudster?

Not automatically. Funds-transfer fraud and social engineering need explicit attention in the cyber and crime terms. [3](https://www.aig.com/content/dam/aig/america-canada/us/documents/business/cyber/cyberedge-wording-sample-specimen-form.pdf)

### Can I Choose My Own Incident-Response Firm?

The policy may restrict your choice or require approval before you spend money. Confirm the response contacts and any preferred firm's eligibility before an incident. [3](https://www.aig.com/content/dam/aig/america-canada/us/documents/business/cyber/cyberedge-wording-sample-specimen-form.pdf)

### What Is the Difference Between First-Party and Third-Party Cyber Insurance?

First-party protection addresses your business's covered costs, such as breach response, data recovery and lost income. Third-party protection addresses covered claims against the business, including defense and settlements arising from a breach. [1](https://www.ftc.gov/business-guidance/small-businesses/cybersecurity/cyber-insurance) [1](https://www.ftc.gov/business-guidance/small-businesses/cybersecurity/cyber-insurance)

### Can Cyber Insurance Cover a Breach at a Vendor?

It can, but check whether the policy extends to incidents involving vendors that hold your data. Also confirm that its geographic scope fits where your business and its providers operate. [1](https://www.ftc.gov/business-guidance/small-businesses/cybersecurity/cyber-insurance)

## What Coverage Is Related to Cyber Insurance?

- [What Is Crime Insurance?](https://thegeneralaverage.com/coverage/crime) — Crime insurance can help reimburse specified business losses from theft and fraud, including employee theft and forgery. Compare those protections separately and ask whether a payment sent after an impersonation scam is covered.
- [What Is Digital-Asset Insurance?](https://thegeneralaverage.com/coverage/digital-assets) — Digital-asset coverage may address custody, theft and business-liability risks, but a custodian’s policy may protect the custodian rather than you. If you hold or safeguard assets, verify the insured entity, wallets, key-loss protection and valuation.
- [What Is Technology Errors and Omissions (E&O) Insurance?](https://thegeneralaverage.com/coverage/technology-errors-omissions) — Technology errors and omissions coverage can help pay when a customer claims your software, hosting, installation or technology advice caused financial loss. If you provide tech products or services, check each activity; cyber incidents and unrelated professional work need separate review.

## Which Insurance Providers Offer Cyber Insurance?

### [AIG](https://thegeneralaverage.com/insurance-providers/aig)

AIG CyberEdge family (CyberEdge, CyberEdge Plus and CyberEdge PC kept distinct)

### [Alliance Risk](https://thegeneralaverage.com/insurance-providers/alliance-risk)

Alliance Risk arranges cyber liability insurance.

### [Amelia Risk](https://thegeneralaverage.com/insurance-providers/amelia-risk)

Amelia Risk arranges cyber insurance.

### [Aon](https://thegeneralaverage.com/insurance-providers/aon)

Aon describes cyber insurance and related brokerage, analytics and claims support; confirm the producing entity, insurer, jurisdiction and policy terms for a U.S. placement.

### [At-Bay](https://thegeneralaverage.com/insurance-providers/at-bay)

At-Bay offers primary and excess cyber insurance for businesses with revenue up to $5 billion.

### [Beazley](https://thegeneralaverage.com/insurance-providers/beazley)

Beazley offers cyber insurance for small and midsized businesses.

### [Berkshire Hathaway Specialty Insurance](https://thegeneralaverage.com/insurance-providers/berkshire-hathaway-specialty-insurance)

BHSI markets a U.S. Network Security & Privacy product with third-party breach, response-expense and network-interruption features; its Professional First overview also describes stand-alone Cyber and blended E&O/Cyber forms. Product form, eligibility, terms and issuer depend on the risk and policy.

### [biBerk](https://thegeneralaverage.com/insurance-providers/biberk)



### [CFC](https://thegeneralaverage.com/insurance-providers/cfc)

CFC offers cyber insurance, including primary and excess products.

### [Chubb](https://thegeneralaverage.com/insurance-providers/chubb)

Chubb offers cyber insurance.

### [CNA](https://thegeneralaverage.com/insurance-providers/cna)



### [Coalition](https://thegeneralaverage.com/insurance-providers/coalition)

Coalition offers cyber insurance.

### [Corgi](https://thegeneralaverage.com/insurance-providers/corgi)

Corgi lists cyber insurance among its business insurance offerings.

### [Coverdash](https://thegeneralaverage.com/insurance-providers/coverdash)

Coverdash lists cyber insurance in its coverage catalog.

### [Cowbell](https://thegeneralaverage.com/insurance-providers/cowbell)

Cowbell offers standalone and excess cyber products through its insurance-agency business.

### [Embroker](https://thegeneralaverage.com/insurance-providers/embroker)

Embroker lists cyber insurance with a quote route.

### [Founder Shield](https://thegeneralaverage.com/insurance-providers/foundershield)

Founder Shield lists cyber liability among its core offerings.

### [Foxquilt](https://thegeneralaverage.com/insurance-providers/foxquilt)

Cyber product page; policy terms and limits not established.

### [Gallagher](https://thegeneralaverage.com/insurance-providers/gallagher)

Gallagher arranges cyber insurance.

### [Harper](https://thegeneralaverage.com/insurance-providers/harper)

Harper lists cyber insurance and describes approaching insurers for customers.

### [Heffernan Insurance Brokers](https://thegeneralaverage.com/insurance-providers/heffernan)

Heffernan arranges cyber insurance.

### [Hiscox](https://thegeneralaverage.com/insurance-providers/hiscox)

Hiscox offers cyber insurance for small businesses.

### [HUB International](https://thegeneralaverage.com/insurance-providers/hub-international)

HUB International arranges cyber insurance.

### [Insureon](https://thegeneralaverage.com/insurance-providers/insureon)

Insureon markets Cyber Insurance; description does not establish insurer, policy terms, or individual availability.

### [Kinro](https://thegeneralaverage.com/insurance-providers/kinro)

Kinro lists cyber liability and compares business details with carrier appetite.

### [Liberty Mutual](https://thegeneralaverage.com/insurance-providers/liberty-mutual)

A group brand spanning personal and commercial insurance businesses; its business unit pages describe small-commercial cover for small businesses and commercial, specialty, surety, and reinsurance solutions for mid-size and large businesses.

### [Lockton](https://thegeneralaverage.com/insurance-providers/lockton)

Lockton arranges cyber insurance.

### [Markel Insurance](https://thegeneralaverage.com/insurance-providers/markel)

Markel Cyber 360

### [Marsh](https://thegeneralaverage.com/insurance-providers/marsh)

Marsh arranges cyber insurance.

### [Marsh McLennan Agency](https://thegeneralaverage.com/insurance-providers/marsh-mclennan-agency)

Business insurance and employee health and benefits, with retirement, wealth, and private-client services also listed for the United States and Canada.

### [Mylo](https://thegeneralaverage.com/insurance-providers/mylo)

Mylo invites cyber insurance quote requests and compares policies from multiple insurers.

### [Nationwide](https://thegeneralaverage.com/insurance-providers/nationwide)

Nationwide markets cyber liability and data-breach insurance to business customers; quote and policy terms determine eligibility and coverage.

### [Newfront](https://thegeneralaverage.com/insurance-providers/newfront)

Newfront places cyber insurance, negotiates policy wording and provides claims consultation.

### [Pie Insurance](https://thegeneralaverage.com/insurance-providers/pie-insurance)

Pie provides access to cyber insurance quotes from carrier partners.

### [Relm Insurance](https://thegeneralaverage.com/insurance-providers/relm)

Relm lists cyber insurance for placement through brokers.

### [Resilience](https://thegeneralaverage.com/insurance-providers/resilience)

Resilience markets cyber insurance on a primary or excess basis.

### [RiskCube](https://thegeneralaverage.com/insurance-providers/riskcube)

RiskCube arranges cyber insurance for startups.

### [Risklytics](https://thegeneralaverage.com/insurance-providers/risklytics)

Risklytics arranges cyber insurance for robotics, hardware and AI businesses.

### [Simply Business](https://thegeneralaverage.com/insurance-providers/simply-business)

Add-on for select buyers purchasing another business policy; phone quote route.

### [StartupInsurance.ai](https://thegeneralaverage.com/insurance-providers/startupinsurance)

StartupInsurance.ai arranges cyber insurance for startups.

### [TechInsurance](https://thegeneralaverage.com/insurance-providers/techinsurance)

TechInsurance arranges cyber insurance for small businesses.

### [The Baldwin Group](https://thegeneralaverage.com/insurance-providers/baldwin)

Listed for named commercial sectors; Baldwin separately describes cyber risk guidance and market/partner access.

### [The Hartford](https://thegeneralaverage.com/insurance-providers/the-hartford)

The Hartford offers cyber insurance and data-breach coverage.

### [THREE by Berkshire Hathaway](https://thegeneralaverage.com/insurance-providers/three)

Marketed within THREE’s combined commercial policy; the quote and issued form determine the protection.

### [Travelers](https://thegeneralaverage.com/insurance-providers/travelers)

Travelers offers cyber insurance through CyberRisk Tech for technology and life-sciences companies.

### [USI Insurance Services](https://thegeneralaverage.com/insurance-providers/usi)

USI arranges cyber insurance.

### [Vouch](https://thegeneralaverage.com/insurance-providers/vouch)

Vouch lists cyber liability in its technology-company programs.

### [WithCoverage](https://thegeneralaverage.com/insurance-providers/withcoverage)

WithCoverage reviews cyber exposures in technology-company insurance programs and offers broker-transition support.

### [WTW](https://thegeneralaverage.com/insurance-providers/wtw)

WTW describes cyber protection within its Digital Infrastructure Protector data-center solution, and its 2024 annual report describes cyber insurance solutions as a global group capability. Neither source establishes current standalone U.S. terms or eligibility.

### [Zurich U.S.](https://thegeneralaverage.com/insurance-providers/zurich)

Zurich markets cyber insurance for businesses; cover and policy form depend on the selected product.

## Sources for Cyber Insurance

1. [Cyber Insurance](https://www.ftc.gov/business-guidance/small-businesses/cybersecurity/cyber-insurance). Federal Trade Commission; Opening; First-Party and Third-Party Coverage; First-Party Coverage; Third-Party Coverage; What Should Your Cyber Insurance Policy Cover. Accessed 2026-09-16.
2. [Cybersecurity for Small Business](https://www.ftc.gov/business-guidance/small-businesses/cybersecurity). Federal Trade Commission; NIST framework: Identify, Protect and Respond; Cybersecurity Basics. Accessed 2026-09-16.
3. [CyberEdge specimen policy](https://www.aig.com/content/dam/aig/america-canada/us/documents/business/cyber/cyberedge-wording-sample-specimen-form.pdf). AIG; General Terms §§4–6, PDF pp.3–6; Security and Privacy §1 p.11, §2(l)/(p) p.14, §3 pp.15–18, exclusions p.18; Event Management §1 and §2(h), PDF pp.19–20. Accessed 2026-09-16.

Updated 2026-09-25. Spot, a product of Tools for Enlightenment, publishes this research and works in the commercial insurance market. [Editorial policy](https://thegeneralaverage.com/editorial-policy). To suggest a correction, [email The General Average](mailto:thegeneralaverage@spot.insure) with the page URL and supporting source.

## Agent and Developer Resources

- [Markdown page](https://thegeneralaverage.com/coverage/cyber.md)
- [Developer resources](https://spot.insure/developers)
- [Public MCP server](https://spot.insure/mcp)
- [MCP server manifest](https://spot.insure/server.json)
- [OpenAPI description](https://spot.insure/openapi.json)
- [Public page index](https://thegeneralaverage.com/llms.txt)
