Cyber insurtech MGAs and underwriting agencies: Difference between revisions
No edit summary |
No edit summary |
||
| Line 1: | Line 1: | ||
🌐 '''A rapidly maturing ecosystem of cyber-specialist MGAs is reshaping how businesses access cyber insurance worldwide.''' Over the past decade, a wave of insurtech managing general agents has emerged across North America, Europe, and Asia-Pacific, each combining delegated underwriting authority with proprietary technology, embedded cybersecurity services, and data-driven risk selection. This landscape now spans more than twenty dedicated cyber MGAs — from venture-backed unicorns like Coalition ($5B valuation, $770M raised) and At-Bay ($1.35B valuation, $292M raised) to nimble European challengers such as Stoïk, Baobab, and Dattak, and specialist platforms in Australia including Emergence Insurance and Sync Underwriting. Together, these players are building a new category of integrated "InsurSec" platforms that blur the line between insurance distribution and managed cybersecurity operations, challenging traditional carrier-led models with faster underwriting, continuous monitoring, and bundled prevention services. |
🌐 '''A rapidly maturing ecosystem of cyber-specialist MGAs is reshaping how businesses access cyber insurance worldwide.''' Over the past decade, a wave of insurtech managing general agents has emerged across North America, Europe, and Asia-Pacific, each combining delegated underwriting authority with proprietary technology, embedded cybersecurity services, and data-driven risk selection. This landscape now spans more than twenty dedicated cyber MGAs — from venture-backed unicorns like Coalition ($5B valuation, $770M raised) and At-Bay ($1.35B valuation, $292M raised) to nimble European challengers such as Stoïk, Baobab, and Dattak, and specialist platforms in Australia including Emergence Insurance and Sync Underwriting. Together, these players are building a new category of integrated "InsurSec" platforms that blur the line between insurance distribution and managed cybersecurity operations, challenging traditional carrier-led models with faster underwriting, continuous monitoring, and bundled prevention services. |
||
🔒 '''The most differentiated players are embedding cybersecurity operations deep into the insurance value chain, moving well beyond scan-based underwriting overlays.''' At-Bay operates a managed XDR platform through a dedicated security subsidiary with strategic SentinelOne and CrowdStrike alliances. Stoïk runs an in-house CERT with 24/7 services and CrowdStrike-integrated MDR that yields a 15% premium discount. Dattak operates CERT-DATTAK with a claimed average intervention time under two minutes and bundles EDR plus managed SOC as a distinct MDR tier. Eye Security requires policyholders to deploy its Managed XDR service before insurance is even available, making security posture a binding underwriting prerequisite. Elpha Secure bundles endpoint-installed software with reduced retentions and shorter waiting periods for adopters. Rather than merely assessing risk at the point of quote, the leading MGAs are actively managing it throughout the policy lifecycle — creating data feedback loops, reducing loss frequency, and building switching costs that pure-play insurance distributors cannot replicate. |
|||
| ⚫ | 🔄 ''' |
||
🏗️ '''Beneath the MGA label, business models are diverging sharply — with a growing subset building toward full-stack risk-bearing.''' At-Bay acquired an E&S carrier shell from XL Insurance America and began issuing policies on its own Delaware-domiciled paper in 2023, earning an AM Best A- rating. Cowbell launched both a Nebraska domestic surplus lines insurer and a Vermont captive reinsurer, layering owned risk-bearing onto its MGA distribution. Coalition obtained its own admitted carrier, also rated A- by AM Best. These vertical integration moves contrast with the majority of peers — including Stoïk, Baobab, Dattak, Eye Security, and Onda — that remain fully reliant on delegated authority from external carrier partners such as Tokio Marine, Zurich, Hiscox, and Lloyd's syndicates. The split between "asset-light MGA" and "hybrid carrier-MGA" is becoming a defining strategic fault line in the sector, with direct implications for capacity stability, underwriting autonomy, and long-term enterprise value. |
|||
🏦 '''Strategic insurer capital is increasingly flowing into these platforms, creating alignment corridors that often precede deeper integration.''' Zurich Insurance Group invested $60M in Cowbell's Series C before separately acquiring BOXX outright. Allianz X led Coalition's $250M Series F, and Allianz SE's CEO subsequently joined Coalition's board. Intact Ventures led Resilience's $100M Series D while Intact group carriers serve as its primary underwriting paper. Munich Re Ventures participated in both At-Bay's and Stoïk's funding rounds while also providing reinsurance capacity. Tokio Marine HCC simultaneously serves as risk carrier and equity investor in Stoïk. AXIS Capital both invested in and provides capacity for Elpha Secure, later routing SME cyber submissions to its platform. These dual relationships — combining equity stakes with underwriting capacity or distribution access — suggest that carrier venture arms are functioning as strategic option mechanisms, positioning incumbents to deepen ties or pursue outright ownership as the market matures. |
|||
| ⚫ | 🔄 '''Indeed, the competitive landscape has already entered a consolidation phase, with strategic acquirers and incumbent carriers accelerating M&A activity.''' Travelers acquired Corvus Insurance for approximately $435M in early 2024, Zurich Insurance Group completed its full acquisition of BOXX Insurance in July 2025, Ryan Specialty absorbed Pera through its USQRisk acquisition in May 2025, and Brown & Brown integrated Evolve MGA via the Nexus/Kentro Capital deal in late 2023. Meanwhile, Cogitanda was rescued from insolvency by cybersecurity firm DGC AG, and Stoïk executed its first inorganic move by acquiring Belgian competitor CyberContract. These transactions signal that the standalone cyber MGA model is increasingly gravitating toward strategic partnerships, carrier ownership, or platform roll-ups — raising critical questions about which remaining independent players represent the most compelling acquisition targets. |
||
{{Section separator}} |
|||
== Overview of key players == |
== Overview of key players == |
||
| Line 210: | Line 218: | ||
</div> |
</div> |
||
{{Section separator}} |
|||
<div style="overflow-x: auto;"> |
<div style="overflow-x: auto;"> |
||
Latest revision as of 09:00, 9 March 2026
🌐 A rapidly maturing ecosystem of cyber-specialist MGAs is reshaping how businesses access cyber insurance worldwide. Over the past decade, a wave of insurtech managing general agents has emerged across North America, Europe, and Asia-Pacific, each combining delegated underwriting authority with proprietary technology, embedded cybersecurity services, and data-driven risk selection. This landscape now spans more than twenty dedicated cyber MGAs — from venture-backed unicorns like Coalition ($5B valuation, $770M raised) and At-Bay ($1.35B valuation, $292M raised) to nimble European challengers such as Stoïk, Baobab, and Dattak, and specialist platforms in Australia including Emergence Insurance and Sync Underwriting. Together, these players are building a new category of integrated "InsurSec" platforms that blur the line between insurance distribution and managed cybersecurity operations, challenging traditional carrier-led models with faster underwriting, continuous monitoring, and bundled prevention services.
🔒 The most differentiated players are embedding cybersecurity operations deep into the insurance value chain, moving well beyond scan-based underwriting overlays. At-Bay operates a managed XDR platform through a dedicated security subsidiary with strategic SentinelOne and CrowdStrike alliances. Stoïk runs an in-house CERT with 24/7 services and CrowdStrike-integrated MDR that yields a 15% premium discount. Dattak operates CERT-DATTAK with a claimed average intervention time under two minutes and bundles EDR plus managed SOC as a distinct MDR tier. Eye Security requires policyholders to deploy its Managed XDR service before insurance is even available, making security posture a binding underwriting prerequisite. Elpha Secure bundles endpoint-installed software with reduced retentions and shorter waiting periods for adopters. Rather than merely assessing risk at the point of quote, the leading MGAs are actively managing it throughout the policy lifecycle — creating data feedback loops, reducing loss frequency, and building switching costs that pure-play insurance distributors cannot replicate.
🏗️ Beneath the MGA label, business models are diverging sharply — with a growing subset building toward full-stack risk-bearing. At-Bay acquired an E&S carrier shell from XL Insurance America and began issuing policies on its own Delaware-domiciled paper in 2023, earning an AM Best A- rating. Cowbell launched both a Nebraska domestic surplus lines insurer and a Vermont captive reinsurer, layering owned risk-bearing onto its MGA distribution. Coalition obtained its own admitted carrier, also rated A- by AM Best. These vertical integration moves contrast with the majority of peers — including Stoïk, Baobab, Dattak, Eye Security, and Onda — that remain fully reliant on delegated authority from external carrier partners such as Tokio Marine, Zurich, Hiscox, and Lloyd's syndicates. The split between "asset-light MGA" and "hybrid carrier-MGA" is becoming a defining strategic fault line in the sector, with direct implications for capacity stability, underwriting autonomy, and long-term enterprise value.
🏦 Strategic insurer capital is increasingly flowing into these platforms, creating alignment corridors that often precede deeper integration. Zurich Insurance Group invested $60M in Cowbell's Series C before separately acquiring BOXX outright. Allianz X led Coalition's $250M Series F, and Allianz SE's CEO subsequently joined Coalition's board. Intact Ventures led Resilience's $100M Series D while Intact group carriers serve as its primary underwriting paper. Munich Re Ventures participated in both At-Bay's and Stoïk's funding rounds while also providing reinsurance capacity. Tokio Marine HCC simultaneously serves as risk carrier and equity investor in Stoïk. AXIS Capital both invested in and provides capacity for Elpha Secure, later routing SME cyber submissions to its platform. These dual relationships — combining equity stakes with underwriting capacity or distribution access — suggest that carrier venture arms are functioning as strategic option mechanisms, positioning incumbents to deepen ties or pursue outright ownership as the market matures.
🔄 Indeed, the competitive landscape has already entered a consolidation phase, with strategic acquirers and incumbent carriers accelerating M&A activity. Travelers acquired Corvus Insurance for approximately $435M in early 2024, Zurich Insurance Group completed its full acquisition of BOXX Insurance in July 2025, Ryan Specialty absorbed Pera through its USQRisk acquisition in May 2025, and Brown & Brown integrated Evolve MGA via the Nexus/Kentro Capital deal in late 2023. Meanwhile, Cogitanda was rescued from insolvency by cybersecurity firm DGC AG, and Stoïk executed its first inorganic move by acquiring Belgian competitor CyberContract. These transactions signal that the standalone cyber MGA model is increasingly gravitating toward strategic partnerships, carrier ownership, or platform roll-ups — raising critical questions about which remaining independent players represent the most compelling acquisition targets.
{{safesubst:#invoke:Check for unknown parameters|check|unknown=|preview=Page using Template:Center with unknown parameter "_VALUE_"|ignoreblank=y| 1 | style }}
Overview of key players
| Logo | Company | Founded | HQ location | Main region | Category | Target market | Description |
|---|---|---|---|---|---|---|---|
|
At-Bay | 2016 |  USA, CA, San Francisco
|
North America | Cyber MGA / Carrier | SME to Enterprise | Template:Summary:At-Bay |
|
Baobab Insurance | 2021 |  Germany, Berlin
|
Europe | Cyber MGA | SME to Upper Mid-Market | Template:Summary:Baobab Insurance |
|
BOXX Insurance | 2018 |  Canada, Toronto
|
North America | Cyber MGA / Carrier | SME to Individual | Template:Summary:BOXX Insurance |
|
Coalition | 2017 | USA, CA, San Francisco
|
North America | Cyber MGA / Carrier | SME to Large | Template:Summary:Coalition |
|
Cogitanda | 2016 | Germany, Flensburg
|
Europe | Cyber MGA | SME to Mid-Market | Template:Summary:Cogitanda |
|
Converge Insurance | 2021 | USA, NY, New York
|
North America | Cyber MGA | SME to Mid-Market | Template:Summary:Converge Insurance |
|
Corvus Insurance | 2017 | USA, MA, Boston
|
North America | Cyber MGA | SME to Large | Template:Summary:Corvus Insurance |
|
Cowbell | 2019 | USA, CA, Pleasanton
|
North America | Cyber MGA | SME to Mid-Market | Template:Summary:Cowbell |
|
Dattak | 2021 |  France, Paris
|
Europe | Cyber MGA | SME to Upper Mid-Market | Template:Summary:Dattak |
|
Elpha Secure | 2018 | USA, NY, New York
|
North America | Cyber MGA | SME | Template:Summary:Elpha Secure |
|
Emergence Insurance | 2015 |  Australia, Sydney
|
Asia-Pacific | Cyber Underwriting Agency | SME to Large | Template:Summary:Emergence Insurance |
|
Evolve MGA | 2015 | USA, CA, San Diego
|
North America | Cyber MGA | SME | Template:Summary:Evolve MGA |
|
Eye Security | 2020 |  Netherlands, The Hague
|
Europe | Cyber MGA | SME to Mid-Market | Template:Summary:Eye Security |
|
Invision Cyber | 2025 |  UK, London / USA
|
Europe / North America | Cyber MGA | Mid-Market to Large | Template:Summary:Invision Cyber |
|
Measured Analytics and Insurance | 2018 | USA, UT, Salt Lake City
|
North America | Cyber MGA | SME to Mid-Market | Template:Summary:Measured Analytics and Insurance |
|
Onda | 2022 | UK, London / USA / France
|
Europe | Cyber MGA | SME to Mid-Market | Template:Summary:Onda |
|
Pera | 2023 | USA
|
North America | Cyber MGA | Large Corporate | Template:Summary:Pera |
|
Resilience | 2016 | USA, CA, San Francisco
|
North America | Cyber MGA | Mid-Market to Large | Template:Summary:Resilience |
|
SafeInside Insurance | 2022 | USA, CA, Palo Alto
|
North America | Cyber MGA | Mid-Market to Large | Template:Summary:SafeInside Insurance |
|
Stoïk | 2021 | France, Paris
|
Europe | Cyber MGA | SME to Mid-Market | Template:Summary:Stoïk |
|
Sync Underwriting | 2024 | Australia, Sydney
|
Asia-Pacific | Cyber MGA | SME to Mid-Market | Template:Summary:Sync Underwriting |
{{safesubst:#invoke:Check for unknown parameters|check|unknown=|preview=Page using Template:Center with unknown parameter "_VALUE_"|ignoreblank=y| 1 | style }}
| Logo | Company | Est. GWP | Total Funding | Last Known Valuation | Key Shareholders / Investors | Acquired? | Link with AXA |
|---|---|---|---|---|---|---|---|
|
|
At-Bay | $380M ARR (Jan 2023) | $292M | $1.35B (2021) | Lightspeed, Khosla, Icon Ventures, Munich Re Ventures, M12, Qumra Capital, Acrew Capital, ION Crossover Partners | No — Independent | AXA SA listed as reinsurer in capacity panel |
|
|
Baobab Insurance | n.d. | €20.1M | n.d. | Viola FinTech, eCAPITAL, Augmentum Fintech, Project A Ventures, La Famiglia, Discovery Ventures | No — Independent | None identified |
|
|
BOXX Insurance | n.d. | $24.5M | n.d. | Zurich Insurance Group (full owner), Cyber Mentor Fund, SixThirty | Yes — Acquired by Zurich (July 2025) | AXA collaboration in Spain (Jan 2024, SME cyber risk prevention) |
|
|
Coalition | $775M+ run rate (July 2022) | $770M | $5B (2022) | Allianz X, Index Ventures, Ribbit Capital, T. Rowe Price, Durable Capital, Whale Rock, Valor Equity Partners, General Atlantic | No — Independent | Historical carrier lineage: Coalition Insurance Company predecessor names include "AXA Art Insurance Corporation" (shell lineage only, no present-day AXA tie) |
|
|
Cogitanda | n.d. | n.d. | n.d. | DGC AG (post-insolvency acquirer) | Yes — Acquired by DGC AG from insolvency (Mar 2025) | None identified |
|
|
Converge Insurance | n.d. | $20M | n.d. | Forgepoint Capital, QBE Ventures | No — Independent | Founder Anthony Dagostino departed to AXA XL (Sep 2023) |
|
|
Corvus Insurance | $200M+ book | $162M | ~$750M (Series C) | Travelers (full owner), Bain Capital Ventures, Insight Partners, Telstra Ventures, .406 Ventures | Yes — Acquired by Travelers (~$435M, Jan 2024) | None identified |
|
|
Cowbell | $200M+ run rate (2021) | $208.3M+ | n.d. | Zurich Insurance Group, Anthemis, Permira, Prosperity7, Brewer Lane Ventures, PruVen Capital, NYCA Partners, Viola FinTech, ManchesterStory | No — Independent (Zurich strategic investor) | None identified |
|
|
Dattak | €10M (2024); €22M target (2025) | €18M | n.d. | XAnge, Breega, Bpifrance | No — Independent | CEO Charlotte Couallier is former AXA France commercial partnerships director; board member Matthieu Bébéar is ex-Chief Business Officer of AXA |
|
|
Elpha Secure | n.d. | >$29M | n.d. | Canapi Ventures, Stone Point Ventures, AXIS Capital, State Farm Ventures, The Hartford STAG Ventures, Fermat Capital Management, EOS Venture Partners | No — Independent | None identified |
|
|
Emergence Insurance | n.d. | n.d. | n.d. | Steadfast Group Limited (33.33%), Hollard Insurance | No — Independent (Steadfast associate) | None identified |
|
|
Evolve MGA | n.d. | None (acquired) | n.d. | Brown & Brown / Nexus Underwriting (full owner) | Yes — Acquired by Nexus / Brown & Brown (2023) | Historical capacity panel included XL Catlin / AXA XL |
|
|
Eye Security | n.d. | €57.5M | n.d. | J.P. Morgan Growth Equity Partners, Bessemer Venture Partners, TIN Capital | No — Independent | None identified |
|
|
Invision Cyber | n.d. | n.d. | n.d. | Vector Investment Capital (75%+ control), Correlation Holdings (minority at Acies MGU level) | No — Independent | Co-founder Stuart Essex formerly Head of UK PI at AXA XL |
|
|
Measured Analytics and Insurance | n.d. | Undisclosed (2 rounds) | n.d. | Signal Peak Ventures, Origin Ventures, Royal Street Ventures, Silicon Valley Data Capital, AV8 Ventures | No — Independent | None identified |
|
|
Onda | n.d. | n.d. | n.d. | n.d. | No — Independent | None identified |
|
|
Pera | n.d. | $3.25M (group seed) | n.d. | Ryan Specialty (full owner), Maiden Holdings (prior seed) | Yes — Acquired by Ryan Specialty (May 2025) | None identified |
|
|
Resilience | n.d. | >$225M | ~$650M (2021) | Intact Ventures, General Catalyst, Lightspeed, Founders Fund, CRV, UL Ventures, Shield Capital | No — Independent (Intact strategic partner) | None identified |
|
|
SafeInside Insurance | n.d. | >$170M (group) | n.d. | Avataar Ventures, BT Group, Sorenson Capital, Prosperity7, Eight Roads, Telstra Ventures | No — Independent | None identified |
|
|
Stoïk | ~€50M (2025) | ~€69.8M | n.d. | Alven, a16z, Munich Re Ventures, Tokio Marine HCC, Impala, Opera Tech Ventures, Anthemis | No — Independent | Henri de Castries (former AXA CEO) participated as business angel in Series A (June 2022) |
|
|
Sync Underwriting | n.d. | n.d. | n.d. | Rhodian Group (equity), Amwins (minority in Rhodian) | No — Independent | None identified |
{{safesubst:#invoke:Check for unknown parameters|check|unknown=|preview=Page using Template:Center with unknown parameter "_VALUE_"|ignoreblank=y| 1 | style }}
At-Bay
{{safesubst:#invoke:Check for unknown parameters|check|unknown=|preview=Page using Template:Center with unknown parameter "_VALUE_"|ignoreblank=y| 1 | style }}
Baobab Insurance
Template:Summary:Baobab Insurance
{{safesubst:#invoke:Check for unknown parameters|check|unknown=|preview=Page using Template:Center with unknown parameter "_VALUE_"|ignoreblank=y| 1 | style }}
BOXX Insurance
Template:Summary:BOXX Insurance
{{safesubst:#invoke:Check for unknown parameters|check|unknown=|preview=Page using Template:Center with unknown parameter "_VALUE_"|ignoreblank=y| 1 | style }}
Coalition
{{safesubst:#invoke:Check for unknown parameters|check|unknown=|preview=Page using Template:Center with unknown parameter "_VALUE_"|ignoreblank=y| 1 | style }}
Cogitanda
{{safesubst:#invoke:Check for unknown parameters|check|unknown=|preview=Page using Template:Center with unknown parameter "_VALUE_"|ignoreblank=y| 1 | style }}
Converge Insurance
Template:Summary:Converge Insurance
{{safesubst:#invoke:Check for unknown parameters|check|unknown=|preview=Page using Template:Center with unknown parameter "_VALUE_"|ignoreblank=y| 1 | style }}
Corvus Insurance
Template:Summary:Corvus Insurance
{{safesubst:#invoke:Check for unknown parameters|check|unknown=|preview=Page using Template:Center with unknown parameter "_VALUE_"|ignoreblank=y| 1 | style }}
Cowbell
{{safesubst:#invoke:Check for unknown parameters|check|unknown=|preview=Page using Template:Center with unknown parameter "_VALUE_"|ignoreblank=y| 1 | style }}
Dattak
{{safesubst:#invoke:Check for unknown parameters|check|unknown=|preview=Page using Template:Center with unknown parameter "_VALUE_"|ignoreblank=y| 1 | style }}
Elpha Secure
{{safesubst:#invoke:Check for unknown parameters|check|unknown=|preview=Page using Template:Center with unknown parameter "_VALUE_"|ignoreblank=y| 1 | style }}
Emergence Insurance
Template:Summary:Emergence Insurance
{{safesubst:#invoke:Check for unknown parameters|check|unknown=|preview=Page using Template:Center with unknown parameter "_VALUE_"|ignoreblank=y| 1 | style }}
Evolve MGA
{{safesubst:#invoke:Check for unknown parameters|check|unknown=|preview=Page using Template:Center with unknown parameter "_VALUE_"|ignoreblank=y| 1 | style }}
Eye Security
{{safesubst:#invoke:Check for unknown parameters|check|unknown=|preview=Page using Template:Center with unknown parameter "_VALUE_"|ignoreblank=y| 1 | style }}
Invision Cyber
Template:Summary:Invision Cyber
{{safesubst:#invoke:Check for unknown parameters|check|unknown=|preview=Page using Template:Center with unknown parameter "_VALUE_"|ignoreblank=y| 1 | style }}
Measured Analytics and Insurance
Template:Summary:Measured Analytics and Insurance
{{safesubst:#invoke:Check for unknown parameters|check|unknown=|preview=Page using Template:Center with unknown parameter "_VALUE_"|ignoreblank=y| 1 | style }}
Onda
{{safesubst:#invoke:Check for unknown parameters|check|unknown=|preview=Page using Template:Center with unknown parameter "_VALUE_"|ignoreblank=y| 1 | style }}
Pera
{{safesubst:#invoke:Check for unknown parameters|check|unknown=|preview=Page using Template:Center with unknown parameter "_VALUE_"|ignoreblank=y| 1 | style }}
Resilience
{{safesubst:#invoke:Check for unknown parameters|check|unknown=|preview=Page using Template:Center with unknown parameter "_VALUE_"|ignoreblank=y| 1 | style }}
SafeInside Insurance
Template:Summary:SafeInside Insurance
{{safesubst:#invoke:Check for unknown parameters|check|unknown=|preview=Page using Template:Center with unknown parameter "_VALUE_"|ignoreblank=y| 1 | style }}
Stoïk
{{safesubst:#invoke:Check for unknown parameters|check|unknown=|preview=Page using Template:Center with unknown parameter "_VALUE_"|ignoreblank=y| 1 | style }}