How Much Does Cyber Insurance Cost in 2026? Published Prices

Most of the cyber insurers we checked print no premium, so there is no published price for a typical business. The only starting prices we found, checked on 10 October 2026, belong to Next Insurance: $4 a month for some low-risk businesses when cyber is added to general liability. Your actual premium depends on your industry, revenue and security practices.

Dupple data: of the six cyber insurer and broker sites we checked on 10 October 2026, one printed a starting price. The other five printed no figure at all.

Which carriers publish a price

We checked six carriers and brokers: Next Insurance, Coalition, At-Bay, Embroker, Vouch and Resilience. The table shows what each site says about price.

Only the Next page gives a number a buyer can put in a budget. The other five print no figure. Several make the price depend on an application or name the factors that move it. None of the six sites publishes a premium range by company size, so a table of premiums by size would be a guess, and this page does not publish one.

What the starting price actually promises

Next's footnote says more than the headline does. It states that starting prices and premiums "represented before an actual customer quote are not guaranteed," and it describes that figure as "representations of existing premiums of active policies as of April 1, 2026." In plain terms, the figure is a dated record of what active policies were paying on that day. It is not an offer you can sign.

The same footnote says applicants are individually underwritten and that not all of them may qualify. The qualifier "for some low-risk businesses" matters as much as the number itself, because it tells you the price is not written for a typical company.

Our arithmetic turns the two starting prices into annual figures. The $4 add-on comes to $48 a year, and the $15 add-on comes to $180 a year, before any underwriting decision. Among the six sites we checked, those two are the only cyber prices a buyer can use at all.

Next's page also says its cyber limits go up to $250,000. It does not say which limit the starting price buys. Ask for the limit in writing before you compare any two quotes, because a cheaper premium on a lower limit is not the same product.

The ten factors Next says set the price

Next lists ten factors that influence what you pay: your industry, your business operations, the size of your business, your revenue, where you do business, the level of coverage you choose, the sensitivity of your data, your cybersecurity practices, policy limits and your claims history. That list is more useful than the headline, because it tells you which answers to get right on the application.

Revenue and size tell the carrier how much data, how many payments and how many staff accounts could be exposed in an incident. A broker will ask for both, and a quote is only as reliable as the answers behind it. The sensitivity of your data is a separate line from revenue, so expect questions about what kind of records you hold, not only how many.

Location appears on four of the six sites. Next lists where you do business among its factors. Embroker says pricing "may vary by state." Vouch says its pricing depends on policyholder location among other factors. Resilience says its policies "may differ by geography." A quote for a company in one state is a weak guide for a company in another, so give the broker every state where you operate, not only your head office.

Claims history is on Next's list too. Disclose any prior incident on the application rather than hoping it stays out of the price, because an incomplete application can cause problems at claim time.

Which controls can lower the premium, and which affect cover

Controls touch the bill in two directions. At-Bay's packages say that "qualified policyholders who implement an approved MDR solution may be eligible for a premium credit," and that any savings "will be based on the specific risk profile of the business." The word "may" matters. The credit is an assessment for each business, not a discount printed on a price list.

At-Bay's footnotes also say that the managed detection service Stance MDR (compare the managed detection roundup) "is not required for insurance coverage through At-Bay," and that similar credits are available for comparable solutions. So the credit is not limited to one vendor's service. Ask the broker whether your current endpoint tool, with or without a managed service on top, counts as approved.

The exclusion runs the other way. Next's page lists "failure to maintain required security standards (for example, PCI DSS noncompliance)" under its specific exclusions. A business that takes cards should treat PCI compliance as a coverage question, not only a price question, and confirm it before the policy is bound.

Put a number on any credit before you decide. The managed detection bill is priced in our EDR cost breakdown, and the endpoint shortlist is in the EDR ranking. Compare any credit a broker quotes with the annual cost of the managed service, not with the premium headline. Next counts cybersecurity practices among its price factors, and our guides to two-factor authenticator apps and password managers cover two common controls, so you can check your own setup before you call a broker.

Why no carrier prints a price table

Carriers price each applicant after an application, and two of the pages we read say so. Embroker states that "services and pricing may vary by state, and are subject to application and underwriting requirements." Next says its starting prices are not guaranteed and that applicants are individually underwritten.

Those two statements explain the gap. A premium depends on the applicant's revenue, industry, controls, state and claims history, and those inputs come from the application, not from a catalog. A printed table would average businesses that the carrier does not treat as alike, so a carrier page can only offer a starting price with conditions, or no price at all.

How to get quotes you can compare

• Ask every broker for the same limit and the same retention, which is the amount you pay before the policy responds. Premiums only mean something side by side when the cover is the same.
• Give each broker the same facts: revenue, headcount, industry, every state you operate in, card volume and the kind of data you hold. A quote built on different facts cannot be compared with another.
• Compare annual premium with annual premium. Next's starting price is a monthly figure for certain businesses, so if a broker quotes monthly, multiply by twelve before you put it beside an annual figure.
• Ask which controls the application asks about and what credit each one earns, in dollars, before you bind.
• Get the exclusions in writing before you bind, and read the security-standards line with your own card and data practices in mind.

FAQ

How much does cyber insurance cost in 2026?

No carrier we checked prints a premium for a typical business. The only starting prices are Next Insurance's $4 a month for some low-risk businesses with cyber added to general liability, or $15 a month with professional liability. Next says its starting prices are not guaranteed, and its footnote dates the $4 figure to active policies as of April 1, 2026. Our arithmetic puts the two at $48 and $180 a year.

Is there cheap cyber insurance for a small business?

The cheapest published figure is Next's monthly add-on, but it applies to some low-risk businesses and is not guaranteed. Next's own list makes the price depend on industry and revenue, and three other sites tie it to location, so a low starting price does not tell you what your own application will cost.

Does endpoint detection lower the cost of cyber insurance?

It may. At-Bay says qualified policyholders who run an approved managed detection and response solution may be eligible for a premium credit, and that any saving is based on the business's risk profile. Its footnotes say similar credits apply to comparable solutions, so ask whether your current service qualifies before you buy a new one.

What do cyber insurers look at when they set the premium?

Next lists ten factors: industry, business operations, business size, revenue, where you do business, the level of coverage, the sensitivity of your data, cybersecurity practices, policy limits and claims history. Embroker and Vouch both say pricing varies with state or location, so the state where you operate can change the number.

Do card payments affect whether a cyber policy pays out?

They can. Next's page lists failure to maintain required security standards, such as PCI DSS noncompliance, among its specific exclusions. A business that takes card payments should confirm PCI compliance with its broker and read the exclusion before binding the policy.

What limit can a small business buy?

Next says its cyber limits go up to $250,000. The Next page does not state which limit its starting price buys, so get the limit in the quote itself. Compare premiums only at the same limit.

Why don't cyber insurers publish exact prices?

Their own pages tie the price to underwriting. Embroker says pricing may vary by state and is subject to application and underwriting, and Next says its starting prices are not guaranteed. A firm number comes from a completed application, so a published figure can only be a starting price with conditions.

How we checked this page

We checked six cyber insurer and broker sites on 10 October 2026: Next Insurance, Coalition, At-Bay, Embroker, Vouch and Resilience. We quote only what those sites print, with the date. The $48 and $180 figures are our arithmetic on Next's starting prices, not a carrier quote. We did not request quotes for this page, and prices change, so check any figure with the carrier before you buy.

Cite this: Cyberpresso, "How Much Does Cyber Insurance Cost in 2026? Published Prices", October 2026.

For the security news behind these controls, subscribe to the Cyberpresso newsletter.

Some offers on this page may be paid placements or contain affiliate links.