What Cyber Insurance Actually Costs: Insura's Quote Data
Most cyber insurance cost pages repeat the same industry survey ranges. This one is built from real quotes: 601 cyber quotes from 19 carriers for 185 businesses that Insura quoted between May 27 and October 16, 2026, at $1M and $2M limits. Test submissions are excluded, and each business counts once per limit — at its lowest carrier quote, which is the price a shopper who compares would actually pay.
| Limit | Businesses quoted | 25th percentile | Median | 75th percentile |
|---|---|---|---|---|
| $1M | 178 | $806/yr | $1,124/yr | $1,707/yr |
| $2M | 127 | $1,308/yr | $1,752/yr | $2,544/yr |
Most of these businesses are small professional-services and tech firms, so read the table as "what a 2–25 person firm pays," not a Fortune 500 tower. The median retention (deductible) on these quotes was $5,000.
Cyber Insurance Cost by Revenue
Revenue is the single biggest rating factor we see — more revenue means more records, more transactions and a bigger business-interruption loss.
| Annual revenue | $1M limit (median) | $1M middle half | $2M limit (median) | $2M middle half |
|---|---|---|---|---|
| Under $500K | $1,071 | $660–$1,380 | $1,681 | $1,272–$2,125 |
| $500K–$2M | $1,332 | $916–$1,750 | $2,099 | $1,699–$3,346 |
| $2M–$10M | $1,944 | $1,244–$3,259 | $3,735 | $2,156–$5,975 |
Sample sizes: under $500K = 122 / 86 businesses; $500K–$2M = 38 / 27; $2M–$10M = 12 / 11. We had fewer than 5 businesses above $10M revenue, so we don't publish a number for that band — at that size, expect five figures and a broker-negotiated program rather than a quick quote.
Cyber Insurance Cost by Industry
| Industry | $1M limit (median) | $1M middle half | $2M limit (median) | Businesses ($1M / $2M) |
|---|---|---|---|---|
| Law firms | $1,967 | $1,226–$2,212 | $2,713 | 9 / 10 |
| Marketing & advertising agencies | $1,782 | $1,101–$1,878 | $2,279 | 6 / 7 |
| IT consultants, MSPs & software firms | $1,189 | $512–$1,943 | $1,747 | 45 / 35 |
| Accounting & CPA firms | $1,129 | $1,071–$1,434 | $1,830 | 13 / 12 |
| Healthcare practices | $1,095 | $1,044–$1,304 | $1,733 | 8 / 7 |
| Management consultants | $1,023 | $905–$1,484 | $1,536 | 21 / 14 |
A few patterns stand out:
- Law firms pay the most at both limits. Privileged client files, trust-account wire transfers and ABA Model Rule 1.6 duties make carriers price legal work as high-severity. See law firm cyber insurance.
- IT and MSP pricing has the widest spread ($512 to $1,943 for the middle half). A solo developer and a managed service provider with admin access to 40 client networks are very different risks — MSPs should expect the top of that range, and should price cyber together with Tech E&O. See IT consultant insurance.
- Healthcare practices are mid-pack in our data despite HIPAA exposure — most of the practices we quote are small offices with modest record counts. Larger record counts push premiums up fast.
- We don't yet have 5+ priced financial-advisor submissions, so they're not in the table. RIAs typically price close to accounting firms, with SEC Regulation S-P incident-response duties as the main driver.
Carrier Choice Matters as Much as Business Size
For businesses where we got quotes from 3 or more carriers at the same $1M limit (46 businesses), the most expensive quote was a median 2.2× the cheapest — and for a quarter of them, more than 3.5×. Same business, same limit, same week.
That spread is why comparing carriers is the most reliable way to lower your cyber insurance cost. The carriers in this dataset include Chubb, Coalition, At-Bay, Hiscox, CFC, Tokio Marine, Corvus, Cowbell, Converge and Corgi. No single carrier was cheapest across the board: some price small, low-revenue firms aggressively, others are more competitive once revenue or limits go up. Compare named carriers side by side on best cyber insurance companies.
What Drives Your Premium
- Revenue and record count — the core exposure base (see the table above).
- Industry — legal, healthcare and financial work carry regulatory and confidentiality duties that raise severity.
- Security controls — MFA on email, remote access and admin accounts; EDR on endpoints; offline or immutable backups; and phishing training. Missing MFA is one of the most common reasons a carrier declines, surcharges or adds a ransomware sublimit.
- Limit and retention — the median $2M quote was about $630/year more than the median $1M quote in our data; raising the retention lowers premium but increases what you pay per claim.
- Claims history — a prior cyber claim usually raises the price and can narrow coverage for that type of incident.
- Contract requirements — many clients now require $1M–$2M cyber limits in vendor contracts, which sets your floor.
Bundle Cyber With the Coverage Your Clients Ask About
For most professional and tech firms, cyber is half of the sale:
- IT consultants, MSPs, SaaS and software firms → Cyber + Tech E&O (often a single combined policy, which usually costs less than two standalone ones).
- Law firms → Cyber + legal malpractice (E&O).
- Accountants, consultants and financial advisors → Cyber + professional liability / E&O.
- Venture-backed startups → Cyber + Tech E&O + D&O.
How to Lower Your Cyber Insurance Cost
- Turn on MFA everywhere — email, VPN/remote access, cloud consoles and admin accounts.
- Deploy EDR on every laptop and server.
- Keep backups offline or immutable and test a restore.
- Train staff on phishing and wire-transfer verification — funds-transfer fraud is one of the most common small-business claims.
- Choose the right limit — match what your client contracts require instead of over- or under-buying.
- Compare carriers every renewal — the 2.2× median spread above is real money.
Ready to see your own number? Compare cyber insurance quotes — one application, multiple carriers.
Compare by Carrier and Industry
Prices vary by carrier as much as by business size — the best cyber insurance companies roundup compares them. IT consultants and MSPs can get the Tech E&O + cyber bundle priced on IT consultant insurance, and every line can be quoted at once on compare business insurance quotes.
Methodology: quotes Insura generated for real business applicants, May 27 – October 16, 2026. Test and internal submissions are excluded. Each business counts once per limit, at its lowest carrier quote; carrier-spread figures use businesses with 3+ carrier quotes at $1M. Industry is grouped by NAICS code; cells with fewer than 5 businesses are not published. Quotes are indications, not bound premiums — your price depends on your application.
