Insoryx

Cyber Liability Insurance

Ransomware, data breach, and business-interruption protection — plus the breach-response team you won’t have in-house. Get matched with a cyber specialist who knows which carriers will quote your security posture.

Get matched with a specialist →

Quick answer: In 2026, most small businesses pay $1,200–$7,500 per year for a $1M cyber liability policy (the average business under 50 employees pays about $1,740/yr). Mid-market firms ($10M–$100M revenue) pay $8,000–$25,000+. To get a quote at all, carriers now require MFA, EDR, and tested backups— without them, most will decline or non-renew.

Cyber insurance changed more than any other commercial line in the last few years. Ransomware pushed prices up and turned underwriting into a technical audit — but it also means a well-defended business now pays meaningfully less than a poorly secured competitor. Below are real 2026 numbers by revenue and industry, the exact controls carriers demand before they’ll quote you, a live estimator, and a fast way to get matched with a cyber specialist.

Cyber Insurance Premium Estimator

Choose your revenue, industry, and desired limit for a realistic 2026 annual range.

Estimated annual premium
$3,038 – $5,670
standalone cyber policy

Estimates only. Actual pricing depends on your security controls, data volume, claims history, and carrier appetite.

Cyber insurance cost by company revenue

Revenue is the clearest predictor of price because it proxies both the volume of data you hold and the ransom a criminal thinks you can pay. Here’s the typical 2026 annual range for a $1M limit:

Annual premium range by revenue ($1M limit)
A $1M limit is common for small firms; larger or data-heavy businesses often carry $3M-$10M.

How industry changes your cyber premium

Two firms with identical revenue can pay very differently depending on the data they hold. Healthcare and financial services carry the most regulated, most valuable data, so they price highest. This index sets manufacturing at 100:

Relative cyber premium by industry (manufacturing = 100)
Healthcare and finance pay a premium for holding regulated personal, health, and payment data.

What carriers require before they’ll quote you (2026)

Cyber underwriting in 2026 is a security audit. If you can’t demonstrate these controls, most carriers will decline, non-renew, or price you punitively. The good news: putting them in place is the fastest way to both qualify and lower your premium.

Required control
What underwriters expect
MFA
Multi-factor authentication on email, remote/VPN access, and all privileged accounts — effectively mandatory
EDR
Endpoint detection & response actively monitored on all servers and workstations
Tested backups
Offline or immutable backups, tested for restore — the #1 ransomware recovery control
Incident response plan
A documented IR plan naming who does what during a breach
Patching
Timely patching of critical vulnerabilities (often 30-90 days)
Security training
Regular phishing/awareness training for staff

What a cyber policy actually covers

Cyber blends first-party coverage (your own losses) and third-party liability (claims from others). The pieces that matter most in a real incident:

Coverage
What it does
Breach response
Notification, credit monitoring, forensics, and PR after a breach
Cyber extortion
Ransomware negotiation and payment, plus recovery costs
Business interruption
Lost income while systems are down after an attack
Data restoration
Rebuilding data corrupted or destroyed in an incident
Third-party liability
Lawsuits and regulatory claims from affected customers

Get matched with a cyber insurance specialist

Answer 5 quick questions and unlock a tailored estimate for your business.

Step 1 of 6

What's your approximate annual revenue?

Revenue is the primary driver of your cyber premium.

Frequently asked questions

Most small businesses pay $1,200-$7,500 per year for a $1M cyber liability policy in 2026. A business under $1M in revenue typically pays $1,200-$2,400/yr for $1M in coverage; the average business under 50 employees pays around $1,740/yr ($145/mo). Mid-market companies ($10M-$100M revenue) usually pay $8,000-$25,000+, and higher-risk industries such as healthcare and finance sit at the top of every range.

Figures reflect 2026 benchmark data and are for general education only. Insoryx is not an insurance carrier; verify all quotes and control requirements with a licensed cyber-insurance specialist.