A single ransomware event can shut down an entire school district for weeks, disrupting instruction for thousands of students and exposing sensitive records that carry strict federal protections. Half of all U.S. school districts experienced a cybersecurity incident in 2025, and ransomware attacks against education rose 23% year-over-year in the first half of that year alone. The financial exposure is not hypothetical: forensic investigation, legal notification under FERPA and state breach statutes, credit monitoring for minors, and system rebuilds routinely push total incident costs into six- and seven-figure territory. For school districts, universities, and charter networks operating on fixed budgets with limited IT staff, a dedicated cyber insurance policy is no longer optional. It is a financial control that determines whether an institution absorbs a breach or collapses under its weight. This guide covers the specific risks educational institutions face, the coverage components that respond to those risks, how policy limits should be structured, and where gaps hide in standard forms.
Why Schools and Districts Need Cyber Insurance Now
Educational institutions hold enormous volumes of personally identifiable information: student records, special education evaluations, disciplinary files, Social Security numbers of minors, payroll data for staff, and donor information for university advancement offices. This data carries high value on criminal markets precisely because minors rarely monitor their own credit. A compromised student record can be exploited for years before anyone notices.
The threat environment has shifted sharply. Attackers now target school systems specifically because they tend to run older infrastructure, rely on understaffed IT departments, and face intense public pressure to restore operations quickly. That pressure translates into a higher likelihood of ransom payment, which makes schools attractive targets. One district shut down entirely shortly after opening for the academic year due to a ransomware attack, leaving families scrambling and administrators facing costs they had no budget line to cover.
The High Cost of Student Record Breaches
Breach costs in education extend well beyond the technical remediation. When student records are compromised, the institution must notify affected families under both FERPA and applicable state breach-notification statutes. For a district with 15,000 students, notification alone, including mailing, call center staffing, and credit monitoring for minors, can exceed $500,000. Forensic investigation to determine the scope of the breach adds another significant layer.
The PowerSchool breach demonstrated how third-party vendor risk compounds exposure across hundreds of districts simultaneously. A single vendor compromise can affect millions of student records, and each district bears its own notification and legal defense obligations. Without a cyber policy that specifically covers regulatory proceedings and breach response, those costs come directly from operating budgets meant for instruction.
FERPA Compliance and Legal Obligations
FERPA imposes specific obligations on any institution receiving federal education funding. When a breach involves education records, the institution must notify the U.S. Department of Education and affected families. Failure to comply can trigger the loss of federal funding, a consequence that dwarfs the cost of the breach itself.
State laws layer additional requirements on top of FERPA. Many states now mandate notification within 30 to 60 days, require specific content in the notification letter, and impose penalties for late disclosure. A district operating across state lines, or a university with students from multiple states, faces a patchwork of deadlines and requirements. This is where a policy form that includes regulatory defense and penalty coverage becomes critical. At Bloc Cyber, we review these provisions at the insuring-agreement level because a generic "regulatory" sublimit often falls short of what multi-state compliance actually demands.
Managing Ransomware and District-Wide Shutdowns
Ransomware attacks against schools rarely affect a single workstation. Attackers typically move laterally through the network before deploying encryption, locking down student information systems, email, grading platforms, and building access controls simultaneously. The operational disruption is immediate and total.
The start of the 2025 academic year was marked by a wave of cyberattacks that forced multiple districts into emergency response mode. Business interruption coverage in a cyber policy can respond to these events, but only if the waiting period and coverage trigger are properly structured. A 12-hour waiting period may be reasonable for a corporation; for a school district that must open its doors every morning, even a few hours of downtime creates cascading problems. The policy form matters here: the difference between "system failure" and "security event" as a trigger can determine whether the claim is paid.
By: Caden Braly
Founder of Bloc Cyber Insurance
INDEX
Bloc Cyber and Its Licensed Producers Are Authorized to Place Cyber Coverage in All 50 U.S. States and The District of Columbia.
Cyber liability insurance covers the financial losses your business faces after a cyberattack or data breach. This page explains what the coverage includes, who needs it, what it costs, and how Bloc Cyber helps you get protected fast.
We start with a twenty-minute call to walk through your contracts, your draw process, your tech stack, and the last twelve months of attempted fraud. From there we go to market with ten-plus carriers, benchmark terms side-by-side, and present the options in plain language with recommended limits and retentions. Most intakes get indicative terms within one business day.
Core Coverage Components for Educational Institutions
A cyber policy for an educational institution should address both the direct costs the institution incurs and the liability it faces from affected parties. These two categories, first-party and third-party, form the backbone of any education-specific cyber form.
First-Party Response and Recovery Costs
First-party coverage pays for the institution's own expenses following a cyber event. The key insuring agreements to examine include:
- Breach response costs: forensic investigation, legal counsel, notification, credit monitoring, and call center services
- Business interruption: lost revenue (tuition, fees, auxiliary services) and extra expense during system downtime
- Ransomware and extortion: the ransom payment itself, negotiation services, and associated costs
- Data restoration: rebuilding corrupted or encrypted databases, including student information systems
- Crisis management: public relations support to manage reputational harm with families and the community
Each of these line items carries its own sublimit in most policy forms. A $2 million aggregate limit with a $250,000 sublimit on ransomware payments does not provide $2 million of ransomware coverage. Reviewing sublimits before binding is essential.
Third-Party Liability and EdTech Vendor Exposure
Third-party coverage responds when someone else brings a claim against the institution. For schools, this typically means lawsuits from parents alleging negligent handling of student data, regulatory actions from state attorneys general, or contractual liability claims from partner organizations.
EdTech vendor exposure deserves special attention. Districts now rely on dozens of third-party platforms for learning management, assessment, communication, and student health tracking. When a vendor suffers a breach, the district often remains the data controller under FERPA and bears the notification obligation. A 2025 report found that one in two U.S. school districts experienced a cybersecurity incident, and many of those incidents originated with third-party vendors. Your cyber policy should clarify whether vendor-caused breaches trigger coverage or fall outside the policy's definition of a covered event.
We start with a twenty-minute call to walk through your contracts, your draw process, your tech stack, and the last twelve months of attempted fraud. From there we go to market with ten-plus carriers, benchmark terms side-by-side, and present the options in plain language with recommended limits and retentions. Most intakes get indicative terms within one business day.
The distinction is not academic. A retailer relying on a BOP endorsement labeled "data breach" may find it provides only $50,000 in notification expense coverage with no provision for PCI assessments, forensic fees, or regulatory defense. That is not cyber insurance; it is a marketing feature.
Some regulatory proceedings involve parallel tracks: the regulator's formal action and an internal investigation your company runs simultaneously. Shadow defense counsel represents your company's interests during the regulatory process without formally appearing before the agency. Monitoring counsel may be appointed under a consent order to oversee your compliance.
The costs for these roles can be substantial. Certain policy forms cover shadow counsel fees as part of the defense cost grant, while others exclude them entirely. Court-appointed monitors in state enforcement actions have generated significant fees that strain organizational budgets, and whether your policy responds to those costs depends on how the form defines "defense costs" and "regulatory proceeding."
Shadow Defense and Monitoring Counsel Roles
Litigation Buyout: Ringfencing Known Legal Disputes
When a target company has pending or threatened litigation, the buyer faces a binary problem: either reduce the purchase price to account for the worst-case outcome or find a way to transfer the risk. A litigation buyout policy does the latter. The insurer assumes the financial exposure of the identified lawsuit in exchange for a one-time premium. Capital commitments in the litigation finance sector rebounded 23% after a two-year contraction, which has expanded insurer appetite for these placements.
Comparison: Standard General Liability vs. Cyber Insurance
Many school administrators assume their existing general liability or property policy covers a data breach. It does not. General liability forms contain broad exclusions for electronic data, and property policies rarely define "property" to include digital records.
Coverage Comparison Table
| Coverage Area | General Liability | Cyber Insurance |
|---|---|---|
| Student record breach notification | Not covered | Covered under breach response |
| FERPA regulatory defense | Not covered | Covered (check sublimit) |
| Ransomware payment | Not covered | Covered under extortion |
| Business interruption from cyberattack | Not covered | Covered (subject to waiting period) |
| Forensic investigation | Not covered | Covered under first-party response |
| Third-party lawsuits for data exposure | Typically excluded | Covered under liability insuring agreement |
| EdTech vendor breach | Not covered | May be covered (form-dependent) |
| Physical property damage from cyber event | Possibly covered | Not typically covered |
The gap is clear. A general liability policy was never designed to respond to a data breach, and no endorsement can fully close that gap. Schools need a standalone cyber form.
Real claims illustrate the exposure more clearly than abstract descriptions. Here are patterns that repeat across the technology sector:
- A SaaS company deploys a billing module that overcharges 12,000 end users over six months. The client demands $410,000 in restitution costs plus $150,000 in legal fees. The tech E&O form responds to the defense and indemnity obligation.
- An MSP fails to complete a server migration on schedule, causing a healthcare client to miss a compliance deadline. The healthcare company faces a regulatory fine and sues the MSP for $275,000. The policy form may respond, but only if the regulatory fine is not excluded as a penalty.
- A custom software vendor delivers an inventory management system that miscounts stock levels. The client loses $600,000 in downstream sales. The vendor's tech E&O policy covers defense costs and settlement, but a sublimit on the policy caps the payout at $500,000.
Average defense costs for technology professional liability claims range from $50,000 to $150,000 depending on complexity and jurisdiction. Settlement amounts vary widely, but six-figure demands are common even for small firms.
We start with a twenty-minute call to walk through your contracts, your draw process, your tech stack, and the last twelve months of attempted fraud. From there we go to market with ten-plus carriers, benchmark terms side-by-side, and present the options in plain language with recommended limits and retentions. Most intakes get indicative terms within one business day.
| Coverage Element | Commercial General Liability | Cyber Insurance |
|---|---|---|
| Data breach notification costs | Not covered | Covered under first-party |
| Ransomware payment | Not covered | Covered (subject to sublimit) |
| Regulatory defense | Not covered | Covered under third-party |
| Business interruption from cyberattack | Not covered | Covered with waiting period |
| Funds transfer fraud | Not covered | Covered via cyber crime endorsement |
| Third-party lawsuit over data loss | Excluded or severely limited | Covered under third-party liability |
| Technology product failure | Not covered | Covered under Tech E&O |
How much does a typical PCI forensic investigation cost?
PFI engagements range from $20,000 for a simple, small-merchant investigation to $120,000 or more for complex environments with multiple locations or e-commerce platforms. The card brands dictate the scope, and the merchant pays.
Determining Policy Limits and Deductibles
Setting the right limit requires more than guessing. It requires an analysis of the institution's actual exposure: the number of student and employee records held, the cost per record for notification and monitoring, the daily financial impact of a system outage, and the regulatory environment in which the institution operates.
Calculating Total Insurable Value for Student Data
Start with the number of records. A district with 20,000 students, 3,000 employees, and five years of archived records may hold 100,000 or more unique PII records. Industry benchmarks for breach cost per record in education range from $150 to $250 when legal defense, notification, and credit monitoring are included. That puts the total exposure for notification costs alone between $15 million and $25 million.
Most districts will not purchase limits that high, but the calculation frames the risk. A $3 million policy limit with a $5,000 retention may be appropriate for a small district; a large urban district or university system may need $10 million or more. The retention, or deductible, should reflect the institution's ability to self-fund the initial phase of a response.
Underwriting Requirements and Security Standards
Carriers underwriting education cyber policies now require specific security controls before they will offer terms. Multi-factor authentication on all remote access points, endpoint detection and response tools, offline or immutable backups, and a documented incident response plan are table stakes. Districts that cannot demonstrate these controls will face higher premiums, restrictive sublimits, or outright declination.
Bloc Cyber works with educational clients to identify which controls the underwriter will require and where the institution's current posture falls short, before the application is submitted. This prevents surprises at binding and ensures the policy form reflects the institution's actual risk profile.
We start with a twenty-minute call to walk through your contracts, your draw process, your tech stack, and the last twelve months of attempted fraud. From there we go to market with ten-plus carriers, benchmark terms side-by-side, and present the options in plain language with recommended limits and retentions. Most intakes get indicative terms within one business day.
No. A data breach or cyberattack is a cyber liability exposure, not a technology E&O exposure. You need a separate cyber liability policy form to cover breach response, notification costs, regulatory defense, and third-party claims arising from a security incident. Many technology companies carry both policies because the exposures are distinct.
FAQ: Does this cover me if I get hacked?
P2PE encrypts cardholder data from the point of interaction (the card reader) to the payment processor's secure decryption environment. A validated P2PE solution removes your systems from PCI scope for those transactions, which directly reduces both your compliance burden and your risk profile. Underwriters recognize P2PE as a meaningful risk reduction and may offer premium credits for merchants using validated solutions.
Implementing Point-to-Point Encryption (P2PE)
Frequently Asked Questions About Education Cyber Coverage
Common Questions from School Administrators
Does FERPA require schools to carry cyber insurance? No. FERPA does not mandate insurance. It does, however, impose notification and compliance obligations that carry significant costs. Cyber insurance is the financial mechanism that funds those obligations.
Will our policy cover a breach that originates with an EdTech vendor? It depends on how the policy defines a "covered event" or "security failure." Some forms limit coverage to events on the insured's own network. Others extend to systems operated by service providers. This is a provision you must verify before binding.
What is a typical policy limit for a mid-size school district? Districts with 5,000 to 20,000 students commonly purchase limits between $2 million and $5 million. The right limit depends on record volume, state notification requirements, and the district's risk tolerance.
Are ransomware payments covered? Most cyber forms include an extortion insuring agreement, but the sublimit may be lower than the aggregate. Some policies also require the insured to obtain carrier consent before payment. Review the extortion provision carefully.
Does cyber insurance cover the cost of rebuilding our student information system? Data restoration coverage is standard in most forms, but the sublimit and the definition of "data" vary. Confirm that your policy covers the cost of recreating, not just recovering, corrupted records.
Real claims illustrate the exposure more clearly than abstract descriptions. Here are patterns that repeat across the technology sector:
- A SaaS company deploys a billing module that overcharges 12,000 end users over six months. The client demands $410,000 in restitution costs plus $150,000 in legal fees. The tech E&O form responds to the defense and indemnity obligation.
- An MSP fails to complete a server migration on schedule, causing a healthcare client to miss a compliance deadline. The healthcare company faces a regulatory fine and sues the MSP for $275,000. The policy form may respond, but only if the regulatory fine is not excluded as a penalty.
- A custom software vendor delivers an inventory management system that miscounts stock levels. The client loses $600,000 in downstream sales. The vendor's tech E&O policy covers defense costs and settlement, but a sublimit on the policy caps the payout at $500,000.
Average defense costs for technology professional liability claims range from $50,000 to $150,000 depending on complexity and jurisdiction. Settlement amounts vary widely, but six-figure demands are common even for small firms.
We start with a twenty-minute call to walk through your contracts, your draw process, your tech stack, and the last twelve months of attempted fraud. From there we go to market with ten-plus carriers, benchmark terms side-by-side, and present the options in plain language with recommended limits and retentions. Most intakes get indicative terms within one business day.
| Coverage Element | Commercial General Liability | Cyber Insurance |
|---|---|---|
| Data breach notification costs | Not covered | Covered under first-party |
| Ransomware payment | Not covered | Covered (subject to sublimit) |
| Regulatory defense | Not covered | Covered under third-party |
| Business interruption from cyberattack | Not covered | Covered with waiting period |
| Funds transfer fraud | Not covered | Covered via cyber crime endorsement |
| Third-party lawsuit over data loss | Excluded or severely limited | Covered under third-party liability |
| Technology product failure | Not covered | Covered under Tech E&O |
Will my policy pay for the fines if I'm not compliant?
This depends entirely on the policy form. Some forms cover PCI fines only if the merchant was making good-faith compliance efforts. Others exclude fines arising from known non-compliance. Read the exclusions carefully before binding.
How much does a typical PCI forensic investigation cost?
PFI engagements range from $20,000 for a simple, small-merchant investigation to $120,000 or more for complex environments with multiple locations or e-commerce platforms. The card brands dictate the scope, and the merchant pays.
What is the difference between a fine and an assessment?
A fine is a penalty for non-compliance with PCI DSS standards. An assessment is a cost-recovery mechanism: the card brands and issuing banks recoup their actual losses (fraud charges, card replacement costs) from the breached merchant. Both are financial obligations, but they arise from different triggers and may be treated differently under a policy form.
Next Steps for Securing Your District
Educational institutions face a threat environment that is intensifying year over year, and the financial consequences of a breach or ransomware event fall squarely on the institution's budget. A properly structured cyber policy transfers that risk to a carrier, but only if the form is written to match the institution's actual exposure.
The critical steps are straightforward: inventory your student and employee records, assess your current security controls against underwriting requirements, and review any existing policy at the insuring-agreement level to identify sublimit gaps, waiting-period mismatches, and vendor coverage exclusions. Do not assume a bundled policy purchased through a generalist broker addresses these issues. Education cyber insurance requires form-level attention.
If your district or university is purchasing its first cyber policy, or if you suspect your current form has gaps,
request a coverage review so a specialist can walk through the policy language with you. The goal is to know exactly what triggers your coverage and where it stops, before a claim answers that question for you.
ABOUT THE AUTHOR
Caden Braly
— Founder, Bloc Cyber
I'm Caden Braly, founder of Bloc Cyber, the specialty cyber insurance arm of Braly Insurance. I built Bloc Cyber around one idea: businesses deserve coverage that actually responds when a cyberattack happens. I work closely with clients to understand their exposure, place the right policy through specialty carriers, and stand with them through the claim. My goal is simple — give every business straight answers and protection they can trust.
Full profile → caden@bloccyber.com LinkedIn
Industries We Protect
Cyber Coverage Built for Your Industry
Every industry faces a different cyber threat, from patient records in healthcare to wire fraud in construction. Bloc Cyber matches coverage to the risks your sector actually faces, drawing on specialty carriers that understand your business. Find your industry below to see how we protect it.
Healthcare
Banking
Retail / E-Commerce
Legal
Technology / SaaS
Education
Energy / Utilities
Manufacturing
Construction
Defense
Healthcare
HIPAA-grade protection for patient data
725
healthcare breaches disclosed in 2024
HIPAA-grade protection for patient data
▣ Ransomware on EHR systems
▣ PHI exfiltration
▣ Medical device exploits
▣ Business email compromise
Sub-sectors we place
Hospitals and health systems
Physician practices and specialty clinics
Dental practices and DSOs
Behavioral health and addiction treatment centers
Medical billing and revenue cycle management firms
Typical turnaround for indication of terms: 1 business day.
Banking
Coverage that meets FFIEC and NYDFS expectations
$5.9M
average cost of a financial sector breach
Common threats we underwrite against
▣ Wire fraud and BEC
▣ Credential stuffing
▣ Third-party vendor risk
▣ Ransomware
Sub-sectors we place
Community banks
Credit unions
Mortgage lenders and loan originators
Wealth management and RIAs
Payment processors and merchant acquirers
Typical turnaround for indication of terms: 1 business day.
Retail / E-Commerce
PCI-DSS aligned coverage for every checkout
42%
of retailers hit by ransomware in the last year
Common threats we underwrite against
▣ Magecart / card skimming
▣ POS malware
▣ Account takeover
▣ Supply-chain intrusion
Sub-sectors we place
Direct-to-consumer (DTC) brands
Shopify and marketplace sellers
Brick-and-mortar multi-location retailers
Restaurants and QSR franchises
Grocery and specialty food retail
Typical turnaround for indication of terms: 1 business day.
Legal
Privilege, client files, and trust-account safeguards
1 in 4
law firms reported a breach in 2024
Common threats we underwrite against
▣ Wire-transfer fraud
▣ Privileged data theft
▣ Email account compromise
▣ Ransomware
Sub-sectors we place
AmLaw / large firms
Boutique litigation firms
Personal injury and plaintiffs’ firms
Estate planning and trust attorneys
Title and real estate closing firms
Typical turnaround for indication of terms: 1 business day.
Technology / SaaS
SOC 2 and ISO-aligned risk transfer
$4.88M
avg. cost of a SaaS breach in 2024
Common threats we underwrite against
▣ Supply-chain attacks
▣ Cloud misconfiguration
▣ Token and key theft
▣ Zero-day exploits
Sub-sectors we place
B2B SaaS platforms
Managed service providers (MSPs) and MSSPs
Fintech startups
AI and machine learning companies
Cloud hosting and infrastructure providers
Typical turnaround for indication of terms: 1 business day.
Education
FERPA-aligned coverage for student and research data
80%
of K–12 districts hit by ransomware since 2022
Common threats we underwrite against
▣ Ransomware on district networks
▣ Student PII theft
▣ Fake invoice fraud
▣ DDoS on exam platforms
Sub-sectors we place
K-12 public school districts
Private and charter schools
Colleges and universities
EdTech platforms
Tutoring, test prep, and online learning providers
Typical turnaround for indication of terms: 1 business day.
Energy / Utilities
OT and IT coverage for critical infrastructure
24/7
operational-tech monitoring requirements
Common threats we underwrite against
▣ ICS/SCADA intrusion
▣ Nation-state actors
▣ Ransomware on OT
▣ Insider threat
Sub-sectors we place
Municipal utilities (water, electric, gas)
Oil and gas operators
Pipeline and midstream companies
Renewable energy (solar, wind) developers
Electric cooperatives and rural utilities
Typical turnaround for indication of terms: 1 business day.
Manufacturing
Business interruption protection for connected plants
25%
of all ransomware attacks target manufacturing
Common threats we underwrite against
▣ Ransomware halting production
▣ IP theft
▣ ICS exploits
▣ Vendor compromise
Sub-sectors we place
Industrial and heavy equipment manufacturers
Food and beverage processing
Pharmaceutical and medical device manufacturers
Automotive and parts suppliers
Aerospace component manufacturers
Typical turnaround for indication of terms: 1 business day.
Construction
Protection for project files, wires, and jobsite tech
$200K+
average wire-fraud loss in construction
Common threats we underwrite against
▣ Wire-transfer diversion
▣ BEC on project payments
▣ Stolen bid data
▣ Ransomware
Sub-sectors we place
General contractors
Commercial HVAC, electrical, and plumbing subs
Civil and infrastructure contractors
Homebuilders and residential developers
Architecture and engineering (A&E) firms
Typical turnaround for indication of terms: 1 business day.
Defense
CMMC, DFARS, and CUI-compliant risk transfer
CMMC
2.0 compliance required by 2026
Common threats we underwrite against
▣ CUI exfiltration
▣ Nation-state APTs
▣ Supply-chain compromise
▣ Cleared-personnel targeting
Sub-sectors we place
DoD prime contractors
CMMC-regulated subcontractors
Defense software and systems integrators
Aerospace and satellite contractors
Federal IT and cleared staffing firms
Typical turnaround for indication of terms: 1 business day.
The Bloc system
One foundation.
Ten industry-specific builds.
The Bloc mark is built from stackable planes — each one a different angle on the same core structure. That’s how we place coverage: one underwriting discipline, tuned and re-tuned for every industry we serve.
Coverage
A policy you can actually read.
Structured in three clean blocs.
01
First-Party
Your direct losses when an incident hits your business.
✓
Incident response & forensics
✓
Business interruption
✓ Data restoration
✓ Cyber extortion / ransomware
✓ Funds transfer fraud
✓ Reputational harm
02
Third-Party
Your liability to clients, partners, and regulators.
✓
Network security liability
✓
Privacy liability (HIPAA, GDPR, state laws)
✓ Regulatory defense & fines
✓ PCI-DSS fines and assessments
✓ Media liability
✓ Breach notification costs
03
Specialty
Advanced coverages for complex risks and contracts.
✓
Technology E&O
✓
Social engineering fraud
✓ Contingent business interruption
✓ Systems failure
✓ Bricking & hardware replacement
✓ CMMC / regulatory-specific endorsements
Typical limits placed
$1M / $1M starter
$5M / $10M mid-market
$25M+ layered towers
Custom retentions
Common Questions
Cyber Liability Insurance, Explained
What does cyber insurance cover?
Cyber insurance covers the financial losses from a data breach or cyberattack. This includes breach response, legal fees, customer notification, ransomware, business interruption, and regulatory fines, depending on your policy.
Does my business really need cyber insurance?
Yes. Any business that stores customer data, processes payments, or relies on connected systems faces cyber risk. Small and mid-sized companies are frequent targets because they often have fewer defenses.
How much does cyber insurance cost?
Cost depends on your industry, revenue, data volume, and security practices. We market your risk to multiple carriers to find strong coverage at a competitive price. Request a quote for an exact figure.
What is the difference between first-party and third-party cyber coverage?
First-party coverage pays for your own losses, like data recovery and lost income. Third-party coverage pays for claims from others harmed by a breach on your systems.
How fast can I get a quote?
Most clients receive a quote in under 24 hours after we review the details of their business and exposure.
What should I do first after a cyberattack?
Contact us right away. We help you start breach response, connect you with forensic and legal support, and guide your claim so you contain the damage quickly.
Insights
Field notes from the placement desk.
What carriers are asking right now.
Start a quote
Tell us about your business.
We’ll come back with terms.
We’ll review your stack, your contracts, and your exposure — then place the program against the right markets. Most intakes get indicative terms back within one business day.
01
Quick intake
We only ask what the carriers actually need.
02
Benchmark
Side-by-side terms from 10+ specialty cyber carriers.
03
Bind
Plain-language policy review, e-signed and in force.
