Elpha Secure: Difference between revisions

🏛️ '''Legal identity.''' Elpha Secure Technology, Inc. is a Delaware corporation incorporated in 2018, as recorded in a Regulation D Form D filing with the U.S. Securities and Exchange Commission (CIK 0001850887).<ref name="sec-formd">{{cite web |title=Elpha Secure Technology, Inc. — Form D |url=https://www.sec.gov/Archives/edgar/data/1850887/000185088722000001/xslFormDX01/primary_doc.xml |publisher=U.S. Securities and Exchange Commission |access-date=9 March 2026-03-09}}</ref> The company's website and privacy policy identifyidentifies the operating entity as "Elpha Secure Technology Inc." andwith lista aprincipal business address at 580 Fifth Avenue, Suite 820, New York, addressNY 10036.<ref name="elpha-homeelphamain">{{cite web |title=Elpha Secure |url=https://www.elphasecure.com/ |publisher=Elpha Secure Technology, Inc. |access-date=9 March 2026-03-09}}</ref> TheA current principal businessprior address isat 580576 Fifth Avenue, Suite 820903, New York, NY 10036, updatedappears fromin the earlier SEC-filed address at 576 Fifth Avenue, Suite 903filing.<ref name="sec-formd"/>

📋 '''Regulatory statuspositioning.''' Elpha positions itself as a fully"Fully licensedLicensed managing general agent (MGA)" operating across all 50 U.S. states, with surplus lines disclosuresdisclaimers notingindicating that its products are offered only through licensed surplus lines producers.<ref name="elpha-brokers">{{cite web |title=Elpha Secure — For Brokers |url=https://www.elphasecure.com/for-brokers |publisher=Elpha Secure Technology,|access-date=2026-03-09}}</ref><ref Incname="newsroom">{{cite web |title=Newsroom |url=https://www.elphasecure.com/newsroom |publisher=Elpha Secure |access-date=9 March 2026-03-09}}</ref> Based on the company'sits own MGA positioning and its explicit statements ofthat beingit is "financially backed" by specific carriers, theElpha is most supportablesupportably classificationclassified isas a cyber insurtech MGA with delegated underwriting authority rather than a licensed risk-bearing carrier.<ref name="elpha-brokers"/> DisclosedCarrier capacitylicensure referencesfor pointa toproprietary U.S.balance-sheet carrier paper rather than Lloyd's syndicates, andwas no entries on FCA, BaFin, or ACPR registers werenot identified, consistentin withthe U.S.-centricsources operationsreviewed.<ref name="elpha-brokers"/>

🔍 '''Licensing evidence.''' A public license record from the Florida Department of Financial Services shows a senior claims professional associated with Elpha — business address at the same New York office — holding nonresident property &and casualty and nonresident surplus lines licensing categories at the same New York address.<ref name="fllicense">{{cite web |title=Florida licenseeLicensee searchSearch — recordFlorida 1390211Department of Financial Services |url=https://licenseesearch.fldfs.com/Licensee/1390211 |publisher=Florida Department of Financial Services |access-date=9 March 2026-03-09}}</ref> WhileThis thisevidences the use of state producer licensing regimes for personnel, though it does not substitute for a full entity-level producer licensing review across states,. itDisclosed evidencescapacity thereferences company'sin usereviewed ofmaterials statepoint producerto licensingU.S. regimescarrier forpaper personnelrather than Lloyd's syndicate participation.<ref name="brokers"/>

💡🔐 '''Core thesis.''' Elpha's model combines cyber insurance with embedded security software, seekingaiming to reduce loss frequency and severity by bundling managedintegrating security tooling and managed support into the insurance proposition.<ref name="elpha-homeelphamain"/> The companyinsurance marketsproduct is marketed as a "cyber insurance policy with market-leading coverage," paired with specific economic enhancements — notably reduced ransomware retentionsretention and shortened business interruption waiting periods — when the insured deploysuses Elpha's security solution.<ref name="elpha-brokers"/> The accompanyingsecurity software suiteproduct, historicallycommonly branded "Elphaware," in earlier materials, is apositioned as SaaS platform installed on endpoints with multiple modules spanningincluding EDR-like monitoring, backups, MFA for remote access, and SOC support.<ref name="bw-axis-2021axispartner21">{{cite web |title=AXIS Partners With Elpha Secure to Provide Cyber Security Software for Small Businesses |url=https://www.businesswire.com/news/home/20210315005036/en/AXIS-Partners-With-Elpha-Secure-to-Provide-Cyber-Security-Software-for-Small-Businesses |publisher=BusinessWireBusiness Wire |date=15 March 2021 |access-date=9 March 2026-03-09}}</ref>

📄 '''Policy structure and pricing.''' Elpha marketsadvertises a cyber insurancebase policy describedstarting asat a straightforward product with embedded software upgrades$1,000 and coverage enhancements.<ref name="elpha-cyber">{{cite web |title=Elpha Secure — Cyber Insurance |url=https://www.elphasecure.com/cyber-insurance |publisher=Elpha+ Securesoftware Technology,starting Inc. |access-date=9 March 2026}}</ref> A base policy starts atcost $1,000 for insurance plus software combined."<ref name="elpha-smartersmartercov">{{cite web |title=Elpha Secure — Smarter Coverage |url=https://www.elphasecure.com/landing-pages/smarter-coverage |publisher=Elpha Secure Technology, Inc. |access-date=9 March 2026-03-09}}</ref> Marketed enhancements include a $500 extortion loss retention, a 6-hour waiting period, and a 365-day period of restoration for business interruption when the insured adopts the security solution.<ref name="elphabrokers"/> Marketing frames the product as "straightforward" with embedded software upgrades and enhancements, though the modularity of insuring agreements and distinctions between proprietary and carrier wording are not detailed in accessible product-brokersfacing pages.<ref name="cyberins"/>

🛡️ '''First-party coverages.''' Elpha's marketing pages explicitly list business interruption and system failure coverage (with waiting-period and restoration-period enhancements), ransomware and cyber extortion coverage (with a referencedan extortion loss retention enhancement), and incident response expenses.<ref name="elpha-smartersmartercov"/> Data restoration, bricking or hardware damage, reputational harm, and social engineering or funds transfer fraud are not referenced as named insuring agreements in accessible materials, though certain breach-response panel services and email-security features address adjacent exposures on a services rather than coverage basis.<ref name="elpha-claims">{{cite web |title=Elpha Secure — Claims |url=https://www.elphasecure.com/insurance/claims |publisher=Elpha Secure Technology, Inc. |access-date=9 March 2026}}</ref><ref name="elpha-howitworks">{{cite web |title=Elpha Secure — How It Works |url=https://www.elphasecure.com/technology/how-it-works |publisher=Elpha Secure Technology, Inc. |access-date=9 March 2026}}</ref>

⚖️ '''Third-party coverages.''' NetworkListed third-party coverages include network security and privacy liability, regulatory fines, and PCI coverage are each explicitly listed.<ref name="elpha-smartersmartercov"/> Media liability and bundled technology errors & omissions coverage are not referenced in accessible product pages.

🏥 '''Breach response model.''' Elpha states it maintains a curated provider panel and encourages policyholders to use listed providers. OnlyThe claims page includes reimbursement gating language stipulating that only expenses incurred through engagement of listed response providers and with Elpha's prior written consent qualify as incident response expenses under the first-party insuring agreement,.<ref name="claims">{{cite web |title=Claims |url=https://www.elphasecure.com/insurance/claims |publisher=Elpha Secure |access-date=2026-03-09}}</ref> This indicatingindicates a panel-led incident response model with economic controls rather than unrestricted vendor choice. Elpha's claims page provides an incident hotline routed through incident response counsel and references a formal claims email notice process.<ref name="elpha-claims"/>

📊 '''Coverage enhancementsdifferentiation.''' Policyholders who adopt Elpha's security solution receivemarkets "enhanced coverage" including— lower retentions, shorter waiting periods, and longer restoration periods — when the insured adopts the security solution.<ref name="elpha-cybercyberins"/> This mechanismpositions linksthe insurance economics directlyas to securityan adoption, functioninglever asfor boththe a risk-reduction tool and a commercial incentive for bundledsecurity uptaketooling.

🖥️ '''Service architectureposture.''' Elpha's software is positioned as endpoint-installed tooling with additional managed services, supported by a Security Operations Center.<ref name="cybertech">{{cite web |title=Elpha Secure — Cybersecurity Technology |url=https://www.elphasecure.com/cybersecurity-technology |publisher=Elpha Secure Technology, Inc. |access-date=9 March 2026-03-09}}</ref> Pre-bind servicescapabilities include a "deep scanning tool" for external network and cloud assets to detect vulnerabilities and misconfigurations, combined withplus a monthly outreach cadence focused on the most criticalworst risks andwith an option for quarterly reporting.<ref name="elpha-howitworks">{{cite web |title=How It Works |url=https://www.elphasecure.com/technology/how-it-works |publisher=Elpha Secure |access-date=2026-03-09}}</ref> This functionally resembles underwriting hygiene enforcement and risk-improvement workflows aligned with cyber insurance subjectivities.

🔒 '''Continuous in-force services.''' TheElpha securitydescribes agent comprisesa seven-component describedsecurity agent components:comprising real-time threat monitoring (EDR-like), remote access protection with MFA, SOC outreach for top patches and mitigations, email security ("ES Mail") for phishing, spam, and fraudulent financial transaction identification, patching capabilities for (vulnerability and version management), dark web monitoring, and exposed credential monitoring.<ref name="elpha-howitworks"/> Post-incident, Elpha's claims page provides an incident hotline routed through incident response counsel, references a provider panel, and establishes a formal claims email notice process.<ref name="elpha-claims"/>

🤝 '''Technology partners.''' Elpha launched its cyber insurance offering on Socotra's cloud-native platform, with an implementation completedtime inof less than two months.<ref name="elpha-brokers"/> An analytics partnership with CyberCube provides access to Portfolio Manager and Single Point of Failure Intelligence for managing portfolio accumulation and supporting growthmanagement and capital discussions.<ref name="elphamain"/><ref name="seriesa">{{cite web |title=Elpha Secure Raises $20 Million in Series A Funding Led by Canapi Ventures |url=https://www.nasdaq.com/press-release/elpha-home"secure-raises-%2420-million-in-series-a-funding-led-by-canapi-ventures-2022-10-06 |publisher=Nasdaq / PR Newswire |date=6 October 2022 |access-date=2026-03-09}}</ref> In October 2025, Elpha announced a partnership with SentinelOne to integrate its insurance offering with SentinelOne's security platform for SMB customers.<ref name="prn-sentinelsentinelone">{{cite web |title=Elpha Secure and SentinelOne Partner to Drive Cyber Resilience and Protection for Customers |url=https://www.prnewswire.com/news-releases/elpha-secure-and-sentinelone-partner-to-drive-cyber-resilience-and-protection-for-customers-302573779.html |publisher=PR Newswire |date=October 2025 |access-date=9 March 2026-03-09}}</ref> The software is third-party audited by Security Compass Advisory and references VB100 testing as a validation mechanism.<ref name="elpha-claims"/><ref name="elpha-howitworks"/>

🌐 '''Channel architecture.''' Elpha distributesworks throughwith wholesale insurance brokers and markets "quotes in seconds" with an online quoting-and-binding workflow capable of delivering quotes in seconds.<ref name="elpha-cybercyberins"/> The AXIS partnership expansion likewisealso references routing submissions via wholesale broker partners to Elpha.<ref name="axis-2024axisexpand24"/> GeographicA operationsdigital spandistribution all 50 U.S. states,partnership with noAffinity disclosedAdvisors capabilitiesfurther outsidestreamlines theaccess Unitedto States;cyber theinsurance publicand sitesecurity issolutions U.S.-oriented,through featuringwholesale U.S.broker contact information and surplus lines disclaimerspartners.<ref name="elpha-brokers"/><ref name="elpha-newsroomlinkedin">{{cite web |title=Elpha Secure LinkedIn Post — NewsroomAffinity Advisors Partnership |url=https://www.elphasecurelinkedin.com/newsroomposts/elpha-secure_cyberinsurance-partnership-sme-activity-7283248640498827264-pNRq |publisher=Elpha Secure Technology, Inc.LinkedIn |access-date=9 March 2026-03-09}}</ref>

== Leadership, governance, and personnel signals ==

👤 '''Founders.''' Preetam Dutta is identified as CEO in Elpha communications and is listed as an executive officer and director in the SEC Form D filing.<ref name="prn-sentinelformd"/><ref name="riskappetite">{{cite web |title=Elpha Secure increasesIncreases riskRisk appetiteAppetite |url=https://blog.elphasecure.com/elpha-secure-increases-risk-appetite/ |publisher=Elpha Secure Blog |date=February 2023 |access-date=9 March 2026-03-09}}</ref> Gordon Malin is identified by AXIS as Elpha's co-founder and CEO as of June 2024.<ref name="axis-2024axisexpand24"/> External profiling and Elpha's positioning indicate a technical cybersecurity orientation at the founding level,.<ref though detailed prior employer histories are not available in primary sources.name="riskappetite"/>

🎓 '''Key leadershipEducation.''' JoshDavid MacDonaldWilliams-King's isdoctoral publiclytraining referencedis asassociated Chiefwith UnderwritingColumbia OfficerUniversity, inas multipledescribed industryon contexts,a includingColumbia eventsCS andpersonal commentarypage.<ref name="elpha-brokerscolumbiadwk"/><ref>{{cite web |title=CyberCubeDavid Williams-King — CyberColumbia Predictions 2023 WebinarUniversity |url=https://www.cybcubecs.comcolumbia.edu/events~dwk/cyber-predictions-2023-webinar |publisher=CyberCubeColumbia |date=2023University |access-date=9 March 2026-03-09}}</ref> DavidPreetam Williams-KingDutta's serveseducation as CTO, having joined Elpha after completing aclaims (PhD at Columbia University; hisundergraduate academicat backgroundYale isUniversity) documentedappear onin asecondary Columbiaprofiles Computerrather Sciencethan personalprimary pagefilings.<ref name="axis-2024forward50"/><ref>{{cite web |title=DavidForward50 Williams-King — Columbia CSAmericas |url=https://wwwsonr.cs.columbia.eduglobal/~dwkwp-content/uploads/2023/10/Forward50-Americas.pdf |publisher=ColumbiaSonr UniversityGlobal |date=October 2023 |access-date=9 March 2026-03-09}}</ref> Perry Tsao appears in a Florida license record with a business address aligned to Elpha and holds nonresident P&C and nonresident surplus lines licensing categories.<ref name="sec-formd"/>

== Funding, and financial signals, and performance metrics ==

💵 '''CapitalSeries raisedA.''' Elpha completed a $20 million Series A in October 2022 led by Canapi Ventures, with participation from existing investors including Stone Point Ventures, AXIS Capital, State Farm Ventures, The Hartford STAG Ventures, Fermat Capital Management, and EOS Venture Partners.<ref name="nasdaq-seriesa"/> EarlierSocotra's seedannouncement fundingreferences isElpha referencedhaving asraised "more than $9 million," placingin cumulativeseed funding prior to the Series A. Cumulative disclosed funding attherefore greater thanexceeds $29 million.<ref name="nasdaq-seriesa"/>

|+ 💰 Elpha Secure Technology, Inc. — disclosed funding rounds, amount, (USD)<refand name="nasdaq-seriesa"/>investors

! scope="col" style="text-align:center" | Lead investor(s)

📉📊 '''Financial transparency.''' Elpha does not publicly disclose gross written premiumGWP, policy count, loss ratio, or revenue in the reviewed sources. The soleonly publiclybroadly accessible scale proxy is a third-party headcount estimate of approximately 40 employees.<ref name="builtin">{{cite web |title=Elpha Secure —Company Built InProfile |url=https://builtin.com/company/elpha-secure |publisher=Built In |access-date=9 March 2026-03-09}}</ref><ref name="linkedin"/> No statutory insurance financial filings attributable to an Elpha-owned carrier entity were identified; diligencethe review relied on SEC Form D identity data, insurer and partner disclosures, and company-controlled product pages.<ref name="sec-formd"/>

== Competitive positioning, risks, and outlookrisks ==

⚔️🏁 '''DifferentiationPeer analogs.''' At-Bay positions a combined insurance and security platform including MDR, with policy enhancements tied to adopting security controls.<ref name="atbay">{{cite web |title=At-Bay: Cyber Insurance & MDR Security Platform |url=https://www.at-bay.com/ |publisher=At-Bay |access-date=2026-03-09}}</ref> Coalition markets "active" cyber insurance with incident response and affiliated security capabilities.<ref name="coalition">{{cite web |title=Coalition — Active Cyber Insurance |url=https://www.coalitioninc.com/au/ |publisher=Coalition |access-date=2026-03-09}}</ref> Cowbell emphasizes continuous underwriting and continuous risk assessment as core differentiators.<ref name="cowbell">{{cite web |title=Continuous Underwriting |url=https://cowbell.insure/au/continuous-underwriting/ |publisher=Cowbell |access-date=2026-03-09}}</ref> Elpha's differentiation versusrelative to these larger platforms rests not on scale disclosures, — which remainare limited, — but on two factors: explicit program relationships with AXIS that route SME cyber submissions to Elpha'sits platform, and on security product breadth centredcentered on endpoint-installed capabilities plus SOC outreach, including newer email-security tooling.<ref name="axis-2024axisexpand24"/>

🏰 '''Moat assessment.''' Elpha's partnership with CyberCube partnership for portfolio analytics and accumulation risk tooling signalsindicates an intent to professionaliseprofessionalize catastrophic cyber catastropherisk management for capacity discussions.<ref name="elpha-homeelphamain"/> The software suite is described as modular and configurable in (active orand passive modes), covering endpoint monitoring, backups, email security, and vulnerability management — broader than a pure scan-based underwriting overlay.<ref name="elpha-howitworks"/> AXIS's 2024 decision to direct certain SME submissions to Elpha indicates distribution leverage, whileand disclosed carrier backers (AXIS Surplus and Everest entities), combined with AXIS's investor role, provide a positive capacity-stability signal, butthough AXIS also intensifybeing an investor intensifies counterparty concentration risk.<ref name="elpha-brokers"/><ref name="axis-2024axisexpand24"/>

|+ 📅 Elpha Secure Technology,key Inc.milestones —and key corporate milestonesevents

! scope="col" style="text-align:center; width:7em" | Date