Cyber insurtech MGAs and underwriting agencies: Difference between revisions
Content deleted Content added
No edit summary |
No edit summary |
||
| (4 intermediate revisions by the same user not shown) | |||
Line 1:
🌐 '''A rapidly maturing ecosystem of cyber-specialist MGAs is reshaping how businesses access cyber insurance worldwide.''' Over the past decade, a wave of insurtech managing general agents has emerged across North America, Europe, and Asia-Pacific, each combining delegated underwriting authority with proprietary technology, embedded cybersecurity services, and data-driven risk selection. This landscape now spans more than twenty dedicated cyber MGAs — from venture-backed unicorns like Coalition ($5B valuation, $770M raised) and At-Bay ($1.35B valuation, $292M raised) to nimble European challengers such as Stoïk, Baobab, and Dattak, and specialist platforms in Australia including Emergence Insurance and Sync Underwriting. Together, these players are building a new category of integrated "InsurSec" platforms that blur the line between insurance distribution and managed cybersecurity operations, challenging traditional carrier-led models with faster underwriting, continuous monitoring, and bundled prevention services.
🔒 '''The most differentiated players are embedding cybersecurity operations deep into the insurance value chain, moving well beyond scan-based underwriting overlays.''' At-Bay operates a managed XDR platform through a dedicated security subsidiary with strategic SentinelOne and CrowdStrike alliances. Stoïk runs an in-house CERT with 24/7 services and CrowdStrike-integrated MDR that yields a 15% premium discount. Dattak operates CERT-DATTAK with a claimed average intervention time under two minutes and bundles EDR plus managed SOC as a distinct MDR tier. Eye Security requires policyholders to deploy its Managed XDR service before insurance is even available, making security posture a binding underwriting prerequisite. Elpha Secure bundles endpoint-installed software with reduced retentions and shorter waiting periods for adopters. Rather than merely assessing risk at the point of quote, the leading MGAs are actively managing it throughout the policy lifecycle — creating data feedback loops, reducing loss frequency, and building switching costs that pure-play insurance distributors cannot replicate.
🔄 '''The competitive landscape is entering a consolidation phase, with strategic acquirers and incumbent carriers accelerating M&A activity.''' Several landmark transactions have already reshaped the market: Travelers acquired Corvus Insurance for approximately $435M in early 2024, Zurich Insurance Group completed its full acquisition of BOXX Insurance in July 2025, Ryan Specialty absorbed Pera through its USQRisk acquisition in May 2025, and Brown & Brown integrated Evolve MGA via the Nexus/Kentro Capital deal in late 2023. Meanwhile, Cogitanda was rescued from insolvency by cybersecurity firm DGC AG, and Stoïk executed its first inorganic move by acquiring Belgian competitor CyberContract. These transactions signal that the standalone cyber MGA model is increasingly gravitating toward strategic partnerships, carrier ownership, or platform roll-ups — raising critical questions about which remaining independent players represent the most compelling acquisition targets.▼
🏗️ '''Beneath the MGA label, business models are diverging sharply — with a growing subset building toward full-stack risk-bearing.''' At-Bay acquired an E&S carrier shell from XL Insurance America and began issuing policies on its own Delaware-domiciled paper in 2023, earning an AM Best A- rating. Cowbell launched both a Nebraska domestic surplus lines insurer and a Vermont captive reinsurer, layering owned risk-bearing onto its MGA distribution. Coalition obtained its own admitted carrier, also rated A- by AM Best. These vertical integration moves contrast with the majority of peers — including Stoïk, Baobab, Dattak, Eye Security, and Onda — that remain fully reliant on delegated authority from external carrier partners such as Tokio Marine, Zurich, Hiscox, and Lloyd's syndicates. The split between "asset-light MGA" and "hybrid carrier-MGA" is becoming a defining strategic fault line in the sector, with direct implications for capacity stability, underwriting autonomy, and long-term enterprise value.
🏦 '''Strategic insurer capital is increasingly flowing into these platforms, creating alignment corridors that often precede deeper integration.''' Zurich Insurance Group invested $60M in Cowbell's Series C before separately acquiring BOXX outright. Allianz X led Coalition's $250M Series F, and Allianz SE's CEO subsequently joined Coalition's board. Intact Ventures led Resilience's $100M Series D while Intact group carriers serve as its primary underwriting paper. Munich Re Ventures participated in both At-Bay's and Stoïk's funding rounds while also providing reinsurance capacity. Tokio Marine HCC simultaneously serves as risk carrier and equity investor in Stoïk. AXIS Capital both invested in and provides capacity for Elpha Secure, later routing SME cyber submissions to its platform. These dual relationships — combining equity stakes with underwriting capacity or distribution access — suggest that carrier venture arms are functioning as strategic option mechanisms, positioning incumbents to deepen ties or pursue outright ownership as the market matures.
▲🔄 '''
{{Section separator}}
== Overview of key players ==
Line 10 ⟶ 18:
|+ 🛡️ Cyber insurtech MGA competitive landscape
|-
! scope="col" style="text-align:center; width:
! scope="col" style="text-align:center; width:
! scope="col" style="text-align:center
! scope="col" style="text-align:center
! scope="col" style="text-align:center
! scope="col" style="text-align:center
! scope="col" style="text-align:center
! scope="col" style="text-align:center
|- style="background:#ffffff;"
| style="text-align:center;" | [[File:Logo of At-Bay.svg|80px|link=At-Bay]]
Line 25 ⟶ 33:
| style="text-align:left;" | North America
| style="text-align:left;" | Cyber MGA / Carrier
| style="text-align:left;" |
| style="text-align:left;" | {{Summary:At-Bay|1}}
|- style="background:#f2f2f2;"
Line 34 ⟶ 42:
| style="text-align:left;" | Europe
| style="text-align:left;" | Cyber MGA
| style="text-align:left;" | SME to Upper Mid-Market
| style="text-align:left;" | {{Summary:Baobab Insurance|1}}
|- style="background:#ffffff;"
Line 58 ⟶ 66:
| style="text-align:left;" | [[Cogitanda]]
| style="text-align:center;" | 2016
| style="text-align:left;" | {{flagicon|Germany}},
| style="text-align:left;" | Europe
| style="text-align:left;" | Cyber MGA
| style="text-align:left;" | SME to Mid-Market
| style="text-align:left;" | {{Summary:Cogitanda|1}}
Line 79 ⟶ 87:
| style="text-align:left;" | North America
| style="text-align:left;" | Cyber MGA
| style="text-align:left;" | SME to
| style="text-align:left;" | {{Summary:Corvus Insurance|1}}
|- style="background:#f2f2f2;"
Line 88 ⟶ 96:
| style="text-align:left;" | North America
| style="text-align:left;" | Cyber MGA
| style="text-align:left;" | SME to Mid-Market
| style="text-align:left;" | {{Summary:Cowbell|1}}
|- style="background:#ffffff;"
Line 97 ⟶ 105:
| style="text-align:left;" | Europe
| style="text-align:left;" | Cyber MGA
| style="text-align:left;" | SME to Upper Mid-Market
| style="text-align:left;" | {{Summary:Dattak|1}}
|- style="background:#f2f2f2;"
Line 133 ⟶ 141:
| style="text-align:left;" | Europe
| style="text-align:left;" | Cyber MGA
| style="text-align:left;" | SME to Mid-Market
| style="text-align:left;" | {{Summary:Eye Security|1}}
|- style="background:#f2f2f2;"
Line 147 ⟶ 155:
| style="text-align:center;" | [[File:Logo of Measured Analytics and Insurance.svg|80px|link=Measured Analytics and Insurance]]
| style="text-align:left;" | [[Measured Analytics and Insurance]]
| style="text-align:center;" |
| style="text-align:left;" | {{flagicon|USA}}, UT, Salt Lake City
| style="text-align:left;" | North America
| style="text-align:left;" | Cyber MGA
| style="text-align:left;" | SME to Mid-Market
| style="text-align:left;" | {{Summary:Measured Analytics and Insurance|1}}
|- style="background:#f2f2f2;"
Line 196 ⟶ 204:
| style="text-align:left;" | Europe
| style="text-align:left;" | Cyber MGA
| style="text-align:left;" | SME to Mid-Market
| style="text-align:left;" | {{Summary:Stoïk|1}}
|- style="background:#ffffff;"
| style="text-align:center;" | [[File:Logo of Sync Underwriting.svg|80px|link=Sync Underwriting]]
| style="text-align:left;" | [[Sync Underwriting]]
| style="text-align:center;" |
| style="text-align:left;" | {{flagicon|Australia}}, Sydney
| style="text-align:left;" | Asia-Pacific
Line 211 ⟶ 219:
</div>
{{Section separator}}
<div style="overflow-x: auto;">
Line 217 ⟶ 226:
|+ 🛡️ Cyber Insurtech MGA — M&A Opportunity Comparison Table
|-
! scope="col" style="text-align:center; width:
! scope="col" style="text-align:center; width:
! scope="col" style="text-align:center
! scope="col" style="text-align:center
! scope="col" style="text-align:center
! scope="col" style="text-align:center
! scope="col" style="text-align:center
! scope="col" style="text-align:center
|- style="background:#ffffff;"
| style="text-align:center;" | [[File:Logo of At-Bay.svg|80px|link=At-Bay]]
Line 231 ⟶ 240:
| style="text-align:left;" | $292M
| style="text-align:left;" | $1.35B (2021)
| style="text-align:left;" | Lightspeed, Khosla, Icon Ventures, Munich Re Ventures, M12, Qumra Capital, Acrew Capital, ION Crossover Partners
| style="background:#d4edda; text-align:left;" | No — Independent
| style="text-align:left;" |
|- style="background:#f2f2f2;"
| style="text-align:center;" | [[File:Logo of Baobab Insurance.svg|80px|link=Baobab Insurance]]
| style="text-align:left;" | [[Baobab Insurance]]
| style="text-align:left;" |
| style="text-align:left;" | €20.1M
| style="text-align:left;" |
| style="text-align:left;" |
| style="background:#d4edda; text-align:left;" | No — Independent
| style="text-align:left;" | None identified
Line 246 ⟶ 255:
| style="text-align:center;" | [[File:Logo of BOXX Insurance.svg|80px|link=BOXX Insurance]]
| style="text-align:left;" | [[BOXX Insurance]]
| style="text-align:left;" |
| style="text-align:left;" | $24.5M
| style="text-align:left;" |
| style="text-align:left;" | Zurich Insurance Group (full owner), Cyber Mentor Fund, SixThirty
| style="background:#f8d7da; text-align:left;" | Yes — Acquired by Zurich (July 2025)
Line 258 ⟶ 267:
| style="text-align:left;" | $770M
| style="text-align:left;" | $5B (2022)
| style="text-align:left;" | Allianz X, Index Ventures, Ribbit Capital, T. Rowe Price, Durable Capital, Whale Rock, Valor Equity Partners, General Atlantic
| style="background:#d4edda; text-align:left;" | No — Independent
| style="text-align:left;" | Historical carrier lineage: Coalition Insurance Company predecessor names include "AXA Art Insurance Corporation" (shell lineage only, no present-day AXA tie)
|- style="background:#ffffff;"
| style="text-align:center;" | [[File:Logo of Cogitanda.svg|80px|link=Cogitanda]]
| style="text-align:left;" | [[Cogitanda]]
| style="text-align:left;" |
| style="text-align:left;" |
| style="text-align:left;" |
| style="text-align:left;" | DGC AG (post-insolvency acquirer)
| style="background:#f8d7da; text-align:left;" | Yes — Acquired by DGC AG from insolvency (Mar 2025)
Line 273 ⟶ 282:
| style="text-align:center;" | [[File:Logo of Converge Insurance.svg|80px|link=Converge Insurance]]
| style="text-align:left;" | [[Converge Insurance]]
| style="text-align:left;" |
| style="text-align:left;" | $20M
| style="text-align:left;" |
| style="text-align:left;" | Forgepoint Capital, QBE Ventures
| style="background:#d4edda; text-align:left;" | No — Independent
Line 285 ⟶ 294:
| style="text-align:left;" | $162M
| style="text-align:left;" | ~$750M (Series C)
| style="text-align:left;" | Travelers (full owner), Bain Capital Ventures, Insight Partners, Telstra Ventures, .406 Ventures
| style="background:#f8d7da; text-align:left;" | Yes — Acquired by Travelers (~$435M, Jan 2024)
| style="text-align:left;" | None identified
Line 293 ⟶ 302:
| style="text-align:left;" | $200M+ run rate (2021)
| style="text-align:left;" | $208.3M+
| style="text-align:left;" |
| style="text-align:left;" | Zurich Insurance Group, Anthemis, Permira, Prosperity7,
| style="background:#fff3cd; text-align:left;" | No — Independent (Zurich strategic investor)
| style="text-align:left;" | None identified
Line 302 ⟶ 311:
| style="text-align:left;" | €10M (2024); €22M target (2025)
| style="text-align:left;" | €18M
| style="text-align:left;" |
| style="text-align:left;" | XAnge, Breega, Bpifrance
| style="background:#d4edda; text-align:left;" | No — Independent
| style="text-align:left;" | CEO Charlotte Couallier is former AXA France commercial partnerships director; board member Matthieu Bébéar is ex-Chief Business Officer of AXA
|- style="background:#f2f2f2;"
| style="text-align:center;" | [[File:Logo of Elpha Secure.svg|80px|link=Elpha Secure]]
| style="text-align:left;" | [[Elpha Secure]]
| style="text-align:left;" |
| style="text-align:left;" | >$29M
| style="text-align:left;" |
| style="text-align:left;" | Canapi Ventures, Stone Point Ventures, AXIS Capital, State Farm Ventures, The Hartford STAG Ventures, Fermat Capital Management, EOS Venture Partners
| style="background:#d4edda; text-align:left;" | No — Independent
| style="text-align:left;" | None identified
Line 318 ⟶ 327:
| style="text-align:center;" | [[File:Logo of Emergence Insurance.svg|80px|link=Emergence Insurance]]
| style="text-align:left;" | [[Emergence Insurance]]
| style="text-align:left;" |
| style="text-align:left;" |
| style="text-align:left;" |
| style="text-align:left;" | Steadfast Group Limited (33.33%), Hollard Insurance
| style="background:#fff3cd; text-align:left;" | No — Independent (Steadfast associate)
| style="text-align:left;" | None identified
Line 327 ⟶ 336:
| style="text-align:center;" | [[File:Logo of Evolve MGA.svg|80px|link=Evolve MGA]]
| style="text-align:left;" | [[Evolve MGA]]
| style="text-align:left;" |
| style="text-align:left;" | None (acquired)
| style="text-align:left;" |
| style="text-align:left;" | Brown & Brown / Nexus Underwriting (full owner)
| style="background:#f8d7da; text-align:left;" | Yes — Acquired by Nexus / Brown & Brown (2023)
Line 336 ⟶ 345:
| style="text-align:center;" | [[File:Logo of Eye Security.svg|80px|link=Eye Security]]
| style="text-align:left;" | [[Eye Security]]
| style="text-align:left;" |
| style="text-align:left;" | €57.5M
| style="text-align:left;" |
| style="text-align:left;" | J.P. Morgan Growth Equity Partners, Bessemer Venture Partners, TIN Capital
| style="background:#d4edda; text-align:left;" | No — Independent
| style="text-align:left;" | None identified
Line 345 ⟶ 354:
| style="text-align:center;" | [[File:Logo of Invision Cyber.svg|80px|link=Invision Cyber]]
| style="text-align:left;" | [[Invision Cyber]]
| style="text-align:left;" |
| style="text-align:left;" |
| style="text-align:left;" |
| style="text-align:left;" | Vector Investment Capital (75%+ control), Correlation Holdings (minority
| style="background:#d4edda; text-align:left;" | No — Independent
| style="text-align:left;" | Co-founder Stuart Essex formerly Head of UK PI at AXA XL
Line 354 ⟶ 363:
| style="text-align:center;" | [[File:Logo of Measured Analytics and Insurance.svg|80px|link=Measured Analytics and Insurance]]
| style="text-align:left;" | [[Measured Analytics and Insurance]]
| style="text-align:left;" |
| style="text-align:left;" | Undisclosed (2 rounds)
| style="text-align:left;" |
| style="text-align:left;" | Signal Peak Ventures, Origin Ventures, Royal Street Ventures, Silicon Valley Data Capital, AV8 Ventures
| style="background:#d4edda; text-align:left;" | No — Independent
| style="text-align:left;" | None identified
Line 363 ⟶ 372:
| style="text-align:center;" | [[File:Logo of Onda.svg|80px|link=Onda]]
| style="text-align:left;" | [[Onda]]
| style="text-align:left;" |
| style="text-align:left;" |
| style="text-align:left;" |
| style="text-align:left;" |
| style="background:#d4edda; text-align:left;" | No — Independent
| style="text-align:left;" | None identified
Line 372 ⟶ 381:
| style="text-align:center;" | [[File:Logo of Pera.svg|80px|link=Pera]]
| style="text-align:left;" | [[Pera]]
| style="text-align:left;" |
| style="text-align:left;" | $3.25M (group seed)
| style="text-align:left;" |
| style="text-align:left;" | Ryan Specialty (full owner), Maiden Holdings (prior seed)
| style="background:#f8d7da; text-align:left;" | Yes — Acquired by Ryan Specialty (May 2025)
Line 381 ⟶ 390:
| style="text-align:center;" | [[File:Logo of Resilience.svg|80px|link=Resilience]]
| style="text-align:left;" | [[Resilience]]
| style="text-align:left;" |
| style="text-align:left;" | >$225M
| style="text-align:left;" | ~$650M (2021)
| style="text-align:left;" | Intact Ventures, General Catalyst, Lightspeed, Founders Fund, CRV, UL Ventures, Shield Capital
| style="background:#fff3cd; text-align:left;" | No — Independent (Intact strategic partner)
| style="text-align:left;" | None identified
Line 390 ⟶ 399:
| style="text-align:center;" | [[File:Logo of SafeInside Insurance.svg|80px|link=SafeInside Insurance]]
| style="text-align:left;" | [[SafeInside Insurance]]
| style="text-align:left;" |
| style="text-align:left;" | >$170M (group)
| style="text-align:left;" |
| style="text-align:left;" | Avataar Ventures, BT Group, Sorenson Capital, Prosperity7, Eight Roads, Telstra Ventures
| style="background:#d4edda; text-align:left;" | No — Independent
| style="text-align:left;" | None identified
Line 401 ⟶ 410:
| style="text-align:left;" | ~€50M (2025)
| style="text-align:left;" | ~€69.8M
| style="text-align:left;" |
| style="text-align:left;" | Alven, a16z, Munich Re Ventures, Tokio Marine HCC, Impala, Opera Tech Ventures, Anthemis
| style="background:#d4edda; text-align:left;" | No — Independent
| style="text-align:left;" |
|- style="background:#ffffff;"
| style="text-align:center;" | [[File:Logo of Sync Underwriting.svg|80px|link=Sync Underwriting]]
| style="text-align:left;" | [[Sync Underwriting]]
| style="text-align:left;" |
| style="text-align:left;" |
| style="text-align:left;" |
| style="text-align:left;" | Rhodian Group (equity), Amwins (minority in Rhodian)
| style="background:#d4edda; text-align:left;" | No — Independent
| |||