Evolve MGA

{{#invoke:infobox|infoboxTemplate|child= | bodyclass = vcard

| above =

Evolve MGA

| subheader = Evolve Cyber Insurance Services LLC | subheaderstyle = font-weight:bold; font-size:105%;

| image = {{#invoke:InfoboxImage|InfoboxImage|image=Logo of Evolve MGA.svg|size=|sizedefault=frameless|alt=}} | caption =

| header1 = Corporate identity

| label2 = Type | data2 = Private — cyber-focused MGA | class2 = category

| label3 = Traded as | data3 =

| label4 = ISIN | data4 =

| label5 = LEI | data5 =

| label6 = Registration number | data6 =

| label7 = Regulated | data7 =

| label8 = License type | data8 = California insurance license (0K40961)

| label9 = NPN | data9 =

| label10 = Coverholder reference | data10 =

| label11 = License number | data11 =

| label12 = Incorporation | data12 = California

| label13 = Founded | data13 = 2015 (2015){{#invoke:Check for unknown parameters|check|unknown=|preview=Page using Template:Start date and age with unknown parameter "_VALUE_"|showblankpositional=1| 1 | 2 | 3 | br | df | end | p | paren }}

| label14 = Headquarters | data14 = | class14 = label

| label15 = Country | data15 =

| label16 = Domicile | data16 = California

| label17 = Licensed jurisdictions | data17 = All 50 U.S. states (NexGen policy)

| label18 = Regulator | data18 =

| label19 = Ultimate parent | data19 = Brown & Brown, Inc.

| label20 = Major shareholders | data20 =

| label21 = Group status | data21 =

| label22 = Key people | data22 = Michael Costello, Co-founder
Patrick Costello, Co-founder (departed late 2025)
Adam Kembrooke, CEO and President, Nexus Underwriting U.S.

| label23 = Number of employees | data23 = approximately 30 cyber specialists (2020)

| header24 = Business & markets

| label25 = Operating status | data25 =

| label26 = Customer segments | data26 = SMEs with cyber risk exposures up to $250M, with some classes up to $500M

| label27 = Lines of business | data27 = Cyber liability
Technology errors and omissions

| label28 = Business segments | data28 =

| label29 = Main products & services | data29 = Evolved NexGen cyber policy
EVO4.0 cyber policy (historical)
EVO 3.0 cyber policy (historical)
Standalone Technology E&O

| label30 = Technology platform | data30 = Proprietary mobile app (dark web monitoring, network scanning, phishing simulation)
Data Breach Calculator (NetDiligence / eRiskHub)

| label31 = Capacity providers | data31 = Lloyd's of London (current, NexGen policy)
Zurich Insurance plc (historical, EVO4.0)
HDI Global Specialty SE (historical, EVO4.0)
XL Catlin Insurance Company UK Limited (historical, EVO4.0)
Fidelis Underwriting Limited (historical, EVO4.0)

| label32 = Distribution | data32 = Direct-to-retail broker (3,000+ broking partners, July 2023)

| label33 = Geographic markets | data33 = United States (all 50 states)

| label34 = Branches | data34 =

| label35 = Customers served | data35 = approximately 6,000 policyholders (July 2023)

| label36 = Competitors | data36 = Coalition
At-Bay
Cowbell Cyber
Corvus Insurance
Resilience
CFC Underwriting Limited

| label37 = Market share rank | data37 =

| header38 = Key financials

| label39 = Currency | data39 =

| label40 = Market cap | data40 =

| label41 = Revenue | data41 =

| label42 = Insurance revenue | data42 =

| label43 = Operating income | data43 =

| label44 = EBITDA | data44 =

| label45 = Net income | data45 =

| label46 = Gross written premium | data46 =

| label47 = Net written premium | data47 =

| label48 = Loss ratio | data48 =

| label49 = Combined ratio | data49 =

| label50 = Commission / MGA fee | data50 =

| label51 = Total assets | data51 =

| label52 = Invested assets | data52 =

| label53 = Technical reserves | data53 =

| label54 = Contractual service margin | data54 =

| label55 = Net debt | data55 =

| label56 = Equity | data56 =

| label57 = Operating margin | data57 =

| label58 = Solvency ratio | data58 =

| label59 = Return on equity | data59 =

| label60 = Total funding raised | data60 =

| label61 = Last funding round | data61 = Acquisition by Nexus Underwriting, July 2023

| label62 = Last known valuation | data62 =

| label63 = Lead investors | data63 =

| label64 = Capital structure | data64 =

| label65 = Insurer financial strength | data65 =

| label66 = Capacity partner ratings | data66 =

| label67 = External ratings | data67 =

| data68 =

}}{{#invoke:Check for unknown parameters|check|unknown=|preview = Page using Template:Infobox company with unknown parameter "_VALUE_"|ignoreblank=y | address | alt | branches | capacity_partner_ratings | capacity_providers | capital_structure | caption | child | combined_ratio | commission_rate | competitors | country | coverholder_ref | csm | currency | customer_segments | distribution | domicile | ebitda | embed | equity | exchange | financial_year | footnotes | founded | geographic_markets | group_status | gwp | headquarter | headquarters | ifsr | image | image_size | imagesize | incorporated | incorporation | insurance_jurisdictions | insurance_revenue | invested_assets | isin | key_people | last_round | last_valuation | lead_investors | legal_name | lei | license_number | license_type | lines_of_business | logo | logo_alt | logo_caption | logo_size | loss_ratio | market_cap | market_share_rank | markets_served | name | net_debt | net_income | npn | num_customers | num_employees | nwp | operating_income | operating_margin | operating_status | parent | products | ratings | registered | registration_number | regulated | regulator | reporting_year | revenue | roe | segments | shareholders | shareholders_equity | solvency_ratio | status_in_group | supervisory_authority | technology_platform | technical_reserves | ticker | total_assets | total_funding | total_revenue | type | ultimate_parent }}

The following sections provide further details.

~*~

{{safesubst:#invoke:Check for unknown parameters|check|unknown=|preview=Page using Template:Center with unknown parameter "_VALUE_"|ignoreblank=y| 1 | style }}

Corporate and regulatory profile

🏢 Legal entity. The operating legal entity is Evolve Cyber Insurance Services LLC, trading as Evolve MGA. A Rhode Island Department of State annual report filed in 2021 lists California as the state of formation and San Rafael as the principal office address. The company's website identifies San Diego as the headquarters location, while a 2023 acquisition announcement lists Dallas, Los Angeles, New York, and Texas as operating locations, indicating a multi-site U.S. footprint.

📅 Year founded. Evolve MGA has specialized in underwriting SME cyber insurance since 2015. A 2019 trade profile corroborates a circa-2015 launch and states the firm had doubled its book annually in the years following (historical claim, not independently validated).

🛡️ Business model and licensing. Evolve MGA positions itself as a cyber-focused MGA with full underwriting authority, offering cyber liability and technology E&O products. The company publishes a California insurance license number (0K40961) on its website. A publicly filed 2021 surplus-lines policy document shows insurance effected through CFC Underwriting Limited as coverholder, with a binding authority structure tied to a Unique Market Reference, providing direct evidence of Lloyd's delegated authority distribution for at least part of the historical book.

🏛️ Ownership and acquisition. Evolve MGA was acquired by Nexus Underwriting, with completion announced in July 2023. At the time of announcement, Nexus was described as a wholly owned subsidiary of Kentro Capital Limited. Brown & Brown, Inc. subsequently completed its acquisition of Kentro in October 2023, integrating Kentro into Brown & Brown Europe operations and placing Evolve MGA within a larger broker-controlled specialty platform.

📊 Scale indicators. The acquisition announcement disclosed over 3,000 retail broking partners and approximately 6,000 policyholders, and stated that the acquisition introduced the Evolved NexGen cyber policy supported by Lloyd's of London across all 50 U.S. states. The 2021 Rhode Island annual report lists Dan Carraher and Bryan Costello as managers of the entity.

~*~

{{safesubst:#invoke:Check for unknown parameters|check|unknown=|preview=Page using Template:Center with unknown parameter "_VALUE_"|ignoreblank=y| 1 | style }}

Leadership and governance

👥 Founders. Brothers Michael Costello and Patrick Costello co-founded Evolve MGA and are described as fourth-generation insurance professionals. A 2020 agent-association profile states Patrick obtained a property and casualty license in college, interned at Lloyd's, trained at ACE Group, earned the CPCU designation, and worked as a professional liability underwriter before focusing on cyber; Michael worked as a retail producer and received multi-year cyber specialty training at Lloyd's.

🎙️ Underwriting philosophy. A 2019 trade interview quotes Patrick emphasizing wire transfer fraud and social engineering coverage while criticizing cyber policy "warranty statements" as a claims-denial risk; the same interview claims eight U.S. offices at the time and annual book doublings since 2015. The acquisition announcement quotes Adam Kembrooke as CEO and President of Nexus Underwriting U.S. in connection with the transaction.

⚠️ Leadership continuity. A 2025 public post from Patrick states it was his last day with the company, indicating at least one founder departure post-acquisition.

~*~

{{safesubst:#invoke:Check for unknown parameters|check|unknown=|preview=Page using Template:Center with unknown parameter "_VALUE_"|ignoreblank=y| 1 | style }}

Funding, ownership, and financial signals

🔗 Ownership pathway. Evolve MGA was acquired by Nexus Underwriting in July 2023; Nexus was then owned by Kentro Capital Limited, which was subsequently acquired by Brown & Brown, Inc. in October 2023. No venture rounds, valuations, or equity raises were identified in primary sources reviewed; the sole disclosed capital event is the acquisition, whose financial terms were not published.

💰 Evolve MGA — funding rounds, lead investors, and valuation, cumulative to July 2023

Round	Date	Amount raised	Lead investor(s)	Post-money valuation	Cumulative funding
Acquired	July 2023	—	Nexus Underwriting	—	—

🏆 Awards as commercial signal. Evolve has received multiple Advisen (Zywave) Cyber Risk Awards: "Cyber Newcomer of the Year" in 2019, "Cyber Risk MGA" winner and Patrick as "Cyber Risk Industry Person of the Year — Americas" in 2021, and "Cyber MGA of the Year" in 2022. The acquisition announcement describes Evolve as a three-time Cyber MGA of the Year winner.

📈 Evolve MGA — key performance indicators, most recent disclosed figures

KPI	Most recent figure	Prior year
Gross Written Premium (GWP)	—	—
GWP growth rate (YoY)	—	—
Policy count (in force)	~6,000 policyholders (July 2023)	—
Net loss ratio	—	—
Revenue	—	—
Net income / net loss	—	—
MGA commission rate (% of GWP)	—	—
Headcount	~30 cyber specialists (2020)	—
GWP per employee	—	—

~*~

{{safesubst:#invoke:Check for unknown parameters|check|unknown=|preview=Page using Template:Center with unknown parameter "_VALUE_"|ignoreblank=y| 1 | style }}

Product suite and coverage analysis

🎯 Customer segments. Evolve MGA markets to SMEs with cyber risk exposures up to $250 million, with some classes up to $500 million, spanning a broad industry appetite including banks, credit unions, hospitals, physician practices, municipalities, local government, private equity, venture capital, insurance intermediaries, and various professional services. This breadth suggests a generalist SME and lower mid-market underwriting posture rather than a narrow vertical specialization.

📋 Policy form and structure. Post-acquisition, Evolve offers the Evolved NexGen cyber policy supported by Lloyd's across all 50 states. A publicly filed 2021 policy specimen references wording version "EVO4.0" and provides a cyber incident response line associated with CFC. The historical specimen includes an unlimited retroactive date and an optional 12-month extended reporting period at 100% of applicable annualized premium, both typical claims-made structural elements.

🔒 First-party coverages. The EVO4.0 schedule includes cyber incident response sections for incident response costs, legal and regulatory costs, IT security and forensic costs, crisis communications, and privacy breach management costs, each at a $3,000,000 each-and-every-claim limit with varying deductibles, plus a $50,000 post-breach remediation sublimit. The current product page lists 24/7 hotline support, breach costs, forensic costs, legal breach advice, and PR/crisis management as included features.

💳 Cybercrime and social engineering. The current product page lists social engineering, invoice manipulation and impersonation fraud, electronic theft of third-party funds, theft of funds held in escrow, cyber extortion, and telephone hacking as covered perils. The EVO4.0 specimen provides explicit sublimits including funds transfer fraud ($250,000), theft of funds held in escrow ($250,000), theft of personal funds ($250,000), extortion ($3,000,000), corporate identity theft ($250,000), telephone hacking ($250,000), push payment fraud ($50,000), and unauthorized use of computer resources ($250,000).

🏗️ Business interruption and system failure. The current product page indicates business income loss with a stated six-hour waiting period, 12-month reputational loss coverage, supplemental extra expense, and "bricking" coverage. The EVO4.0 schedule shows system damage and business interruption at $3,000,000 limits for system damage/rectification and income loss/extra expense, with a $1,000,000 sublimit for system failure; dependent business interruption at the same structure; reputational harm at $3,000,000; claim preparation costs at $25,000; and hardware replacement costs at $3,000,000.

⚖️ Third-party coverages. Network security liability, privacy liability, regulatory penalties, and PCI liability are included per the current product page. The EVO4.0 schedule shows these as aggregate-limit insuring clauses at $3,000,000 with a $5,000 deductible, alongside management liability, regulatory fines, and PCI fines/penalties/assessments. Media liability and intellectual property rights infringement appear in the historical specimen within an aggregate-limit framework.

💻 Technology E&O. The EVO4.0 specimen explicitly states "Technology Errors and Omissions: NO COVER GIVEN" within that policy form. Evolve separately markets a standalone Technology E&O product covering IT consulting, MSPs, SaaS, software development, telecom services, and related technology operations.

~*~

{{safesubst:#invoke:Check for unknown parameters|check|unknown=|preview=Page using Template:Center with unknown parameter "_VALUE_"|ignoreblank=y| 1 | style }}

Breach response and cybersecurity services

🚨 Historical claims ecosystem. The 2021 EVO4.0 specimen designates CFC Underwriting Limited as cyber incident manager and lists an approved claims panel including Wilson Elser, Context Security, Kivu Consulting, CrowdStrike, DOSarrest, Mullen Coughlin, and Clyde & Co, signaling a structured managed-response model.

📞 Current claims handling. The current product page states rapid response claims handling through McDonald Hopkins and provides a dedicated incident email for NexGen policyholders.

🔍 Pre-bind services. Evolve provides risk vulnerability scans and reports and states that each policyholder receives a comprehensive risk assessment with their quote.

📱 Policyholder tooling. An in-house mobile app offers 24/7 dark web monitoring, network deep scanning, phishing simulation campaigns, free forensic expert advice, and instant claims notification. The cyber product page links to a Data Breach Calculator hosted on eRiskHub infrastructure, based on a proprietary formula developed by NetDiligence and its insurance industry partners.

🤝 Vendor partnerships. The policyholder risk management page lists vendor relationships including Upfort (Upfort Shield trial and discount), Avail, BlackFog, ControlCase, eSentire, and Coro, forming a curated cybersecurity partner marketplace for policyholders.

~*~

{{safesubst:#invoke:Check for unknown parameters|check|unknown=|preview=Page using Template:Center with unknown parameter "_VALUE_"|ignoreblank=y| 1 | style }}

Distribution and geographic expansion

🌐 Retail broker model. Evolve operates a direct-to-retail broker distribution architecture, with the acquisition announcement citing over 3,000 retail broking partners. A 2020 association profile describes outreach through broker training, marketing materials, and in-person seminars, with a production team spending significant time in retail agencies. The company's appointment page targets brokers directly, framing itself as "trusted by thousands of brokers across the country."

🇺🇸 Geographic footprint. Evolve states nationwide U.S. availability across all 50 states for the post-acquisition NexGen policy supported by Lloyd's. No evidence of non-U.S. underwriting operations under the Evolve MGA brand was found in reviewed sources.

📜 Licensing and authorization. The company publicly displays a California insurance license number and operates through national broker relationships. The 2021 policy specimen is classified as surplus lines, with Patrick listed as surplus lines broker. The policy certificate evidences a Lloyd's delegated authority pathway via CFC as coverholder.

~*~

{{safesubst:#invoke:Check for unknown parameters|check|unknown=|preview=Page using Template:Center with unknown parameter "_VALUE_"|ignoreblank=y| 1 | style }}

Carrier capacity and strategic partnerships

🏦 Current capacity. Post-acquisition, Evolve states the NexGen policy is supported by Lloyd's of London across all 50 U.S. states.

📄 Historical panel. A 2021 surplus-lines tax filing page within the EVO4.0 specimen provides granular evidence of a co-insurance structure spanning Lloyd's syndicates (with percentage participations) and non-Lloyd's insurers including Zurich Insurance plc, HDI Global Specialty SE, XL Catlin Insurance Company UK Limited, and Fidelis Underwriting Limited. CFC Underwriting Limited served as coverholder and cyber incident manager, a role typically paired with delegated underwriting authority and controlled claims response.

🔗 AXA relationship. The 2021 specimen lists XL Catlin Insurance Company UK Limited as an insurer participant; AXA XL identifies AXA XL Insurance Company UK Limited as formerly XL Catlin Insurance Company UK Limited, following AXA's completion of the XL Group acquisition in 2018. No evidence was found of AXA Venture Partners, Kamet, or AXA-entity distribution partnerships, nor of founder employment ties to AXA.

🤝 Broker association partnerships. The Florida Association of Insurance Agents partnered with Evolve to provide coverage through the EVO 3.0 cyber policy to its members, listing specific coverage highlights as part of that arrangement.

~*~

{{safesubst:#invoke:Check for unknown parameters|check|unknown=|preview=Page using Template:Center with unknown parameter "_VALUE_"|ignoreblank=y| 1 | style }}

Competitive positioning

🧭 Category positioning. Evolve is classified as a U.S. cyber-focused MGA built around retail broker distribution at scale, packaged coverage emphasizing broad first-party protection and cybercrime/social engineering scenarios, and bundled cybersecurity partner resources with an incident-response workflow.

💡 Claimed differentiators. Evolve's product comparison table highlights unlimited reinstatement on first-party coverage, breach response costs outside the limit, and full prior acts as distinguishing features. The historical specimen corroborates these claims through its unlimited retroactive date, defined waiting period mechanics, and multiple cybercrime sublimits. The partner ecosystem and mobile app reflect an insurtech-adjacent service layer.

🏁 Peer benchmarking. Full-stack cyber platforms such as Coalition and At-Bay typically emphasize proprietary security telemetry and continuous control monitoring as underwriting differentiators — capabilities not demonstrated as proprietary by Evolve in public materials. Cowbell Cyber and Corvus Insurance are positioned around analytics-driven underwriting, whereas Evolve's strengths appear more anchored in broker education, claims ecosystem breadth, and coverage design. Evolve's historical linkage to CFC as coverholder and incident manager implies structural proximity to CFC's operating model of delegated authority plus managed response.

~*~

{{safesubst:#invoke:Check for unknown parameters|check|unknown=|preview=Page using Template:Center with unknown parameter "_VALUE_"|ignoreblank=y| 1 | style }}

Risk factors

⚡ Capacity concentration. While the 2021 specimen evidences a diversified panel spanning Lloyd's and non-Lloyd's insurers, the current positioning emphasizes Lloyd's support; a shift in Lloyd's appetite, delegated authority performance management, or capacity retrenchment could create volatility in available limits, pricing, and underwriting guidelines.

🔧 Claims and response dependency. The EVO4.0 specimen shows a structured response model centered on CFC, while the current NexGen process references McDonald Hopkins, creating operational dependency on third-party claims and vendor ecosystems across policy generations.

🌊 Aggregation and systemic exposure. The portfolio is described as one of the larger SME cyber portfolios in the U.S., implying exposure to correlated events such as ransomware waves, supplier outages, and systemic vulnerabilities.

👤 Key-person risk. Patrick Costello's public departure creates key-person continuity risk given the founder-led identity prominent in earlier materials and awards, raising questions about underwriting philosophy continuity and distribution retention.

📝 Regulatory and compliance risk. Evolve publicly discloses a California insurance license number and operates across states including surplus lines placements; formal multi-state licensing confirmation and any administrative action history were not located in accessible regulator registers.

~*~

{{safesubst:#invoke:Check for unknown parameters|check|unknown=|preview=Page using Template:Center with unknown parameter "_VALUE_"|ignoreblank=y| 1 | style }}

Strategy and outlook

🧩 M&A-driven trajectory. The acquisition by Nexus and subsequent integration of Kentro into Brown & Brown indicates a platform strategy oriented toward consolidated specialty underwriting capabilities and distribution leverage across geographies and lines.

📢 Distribution scale. A core strategic pillar is building and defending retail broker distribution scale, anchored by the disclosed base of over 3,000 broking partners.

🛡️ Product differentiation. Evolve seeks to maintain differentiation through broad cybercrime and first-party coverage features and claims response capabilities, complemented by curated cybersecurity services, policyholder tooling, and vendor partnerships.

~*~

{{safesubst:#invoke:Check for unknown parameters|check|unknown=|preview=Page using Template:Center with unknown parameter "_VALUE_"|ignoreblank=y| 1 | style }}

Company timeline

🗓️ Evolve MGA — selected corporate milestones and events, 2015–2025

Date	Event
2015	Specialized SME cyber underwriting operations begin.
June 2019	Advisen Cyber Risk Awards name Evolve MGA "Cyber Newcomer of the Year."
June 2020	Advisen Cyber Risk Awards recognize Evolve as "Cyber MGA of the Year" and name the founders as Cyber Person of the Year (USA).
June 2021	Advisen awards Evolve "Cyber Risk MGA" winner; Patrick named Industry Person of the Year (Americas).
June 2022	Zywave/Advisen announce Evolve MGA as "Cyber MGA of the Year" winner.
July 2023	Nexus Underwriting completes acquisition of Evolve; Evolved NexGen policy launched across all 50 U.S. states; scale disclosed at 3,000+ broking partners and approximately 6,000 policyholders.
October 2023	Brown & Brown completes acquisition of Kentro Capital Limited, integrating Kentro into Brown & Brown Europe operations.
Late 2025	Patrick Costello publicly announces departure from the company.

~*~

{{safesubst:#invoke:Check for unknown parameters|check|unknown=|preview=Page using Template:Center with unknown parameter "_VALUE_"|ignoreblank=y| 1 | style }}

See also

• Cyber insurtech MGAs and underwriting agencies

~*~

{{safesubst:#invoke:Check for unknown parameters|check|unknown=|preview=Page using Template:Center with unknown parameter "_VALUE_"|ignoreblank=y| 1 | style }}

References

{{#invoke:Check for unknown parameters|check|unknown=|preview=Page using Template:Reflist with unknown parameter "_VALUE_"|ignoreblank=y| 1 | colwidth | group | liststyle | refs }}