Insurer Brain

Summary:At-Bay: Difference between revisions

Browse history interactively
← Older edit
Content deleted Content added
VisualWikitext
No edit summary
No edit summary
 
(22 intermediate revisions by 2 users not shown)
Line 1:
{{#switch: {{{1|35}}}
|1 = {{#if:{{{bullet|}}}|* }}At-BayU.S. — venturecyber-backedfocused cyber[[Definition:Insurtech |insurtech MGA turned]], full-stack carrier[[Definition:Excess (AMand Bestsurplus A-),lines combining|E&S underwritingcarrier]], withInsurSec proprietary security servicesmodel, protecting$292M 40raised,000+ SME policyholders at a $1.35B valuation, [[Definition:AM Best |AM Best]] A-
|2 = {{#if:{{{bullet|}}}|* }}At-Bay is a $1U.S.35B-valued cyber-focused [[Definition:Insurtech |insurtech]] that underwritestransitioned specialtyfrom insurance[[Definition:Managing general agent (MGA) |MGA]] to full-stack [[Definition:Excess and deliverssurplus managedlines |E&S carrier]], combining insurance with integrated security services, tobacked overby 40,000$292M SMEin policyholders,venture achievingfunding lossat ratiosa roughly$1.35B halfvaluation theand industryrated average[[Definition:AM throughBest its|AM proprietaryBest]] InsurSecA- modelstable.
|3 = {{#if:{{{bullet|}}}|* }}🏢 '''At-Bay''' is a U.S.-based [[Definition:Insurtech |insurtech]] founded in 2016 that underwrites cyber, [[Definition:Technology errors and omissions (Tech E&O) |technology E&O]], and [[Definition:Miscellaneous professional liability (MPL) |MPL]] through its Delaware-domiciled [[Definition:Excess and surplus lines |E&S carrier]], At-Bay Specialty Insurance Company, rated [[Definition:AM Best |AM Best]] A- stable. The company operates an InsurSec model that integrates its Stance exposure management platform, [[Definition:Managed detection and response (MDR) |MDR]]/[[Definition:Extended detection and response (XDR) |MXDR]] services, and in-house [[Definition:Incident response |incident response]] with its insurance products, serving close to 40,000 businesses with revenue up to $5B. At-Bay has raised $292M in [[Definition:Venture capital |venture capital]] at a $1.35B post-money valuation and transitioned from an [[Definition:Managing general agent (MGA) |MGA]]/[[Definition:Fronting |fronted program]] to issuing policies on its own paper beginning August 2023, reporting a 98% [[Definition:Combined ratio |combined ratio]] at the carrier level in 2023.
|3 = {{#if:{{{bullet|}}}|* }}🛡️ '''At-Bay, Inc.''' is a Delaware-incorporated cyber insurtech founded in 2016 that operates as both an MGA and a full-stack carrier (At-Bay Specialty Insurance Company, AM Best A-), combining underwriting of cyber liability, Tech E&O, and miscellaneous professional liability with proprietary cybersecurity services delivered through its At-Bay Stance platform. The company has raised $295.7 million in venture funding, was valued at $1.35 billion after its July 2021 Series D, and manages over $380 million in gross written premium while protecting more than 40,000 policyholders across 100+ industries. Its InsurSec model — pairing active risk monitoring with insurance — has produced ransomware claim frequency seven times lower than the industry average and gross loss ratios estimated at 30–40%, positioning At-Bay as the fourth-largest U.S. standalone cyber insurer by direct premium as of 2024.
|4 = {{#if:{{{bullet|}}}|* }}🏢 '''At-Bay''' is a U.S.-based [[Definition:Insurtech |insurtech]] founded in 2016 that underwrites cyber, [[Definition:Technology errors and omissions (Tech E&O) |technology E&O]], and [[Definition:Miscellaneous professional liability (MPL) |MPL]] through its Delaware-domiciled [[Definition:Excess and surplus lines |E&S carrier]], At-Bay Specialty Insurance Company, rated [[Definition:AM Best |AM Best]] A- stable. The company transitioned from an [[Definition:Managing general agent (MGA) |MGA]]/[[Definition:Fronting |fronted program]] structure backed by Trisura and [[Definition:Hartford Steam Boiler (HSB) |Hartford Steam Boiler]] to issuing policies on its own E&S paper beginning August 2023, completing a [[Definition:Full-stack carrier |full-stack carrier]] evolution. At-Bay has raised $292M in [[Definition:Venture capital |venture capital]] across six rounds at a $1.35B post-money valuation, with investors including [[Definition:Lightspeed Venture Partners |Lightspeed Venture Partners]], [[Definition:Khosla Ventures |Khosla Ventures]], Icon Ventures, [[Definition:Munich Re |Munich Re Ventures]], and M12.{{#if:{{{bullet|}}}||{{pb}}}}{{#if:{{{bullet|}}}||{{pb}}}}{{#if:{{{bullet|}}}|* }}🔒 '''InsurSec platform.''' At-Bay differentiates through an integrated insurance-and-security model anchored by its Stance Exposure Management platform, which provides [[Definition:Vulnerability scanning |vulnerability scanning]], dark web monitoring, AI-powered email fraud alerts, and vCISO advisory services embedded via an Embedded Security Fee for policyholders. [[Definition:Managed detection and response (MDR) |MDR]] services are powered by [[Definition:CrowdStrike |CrowdStrike]] and sold separately through subsidiary At-Bay Security, LLC, and in July 2025 the company launched an [[Definition:Extended detection and response (XDR) |MXDR]] platform with a strategic [[Definition:SentinelOne |SentinelOne]] alliance.{{#if:{{{bullet|}}}||{{pb}}}}{{#if:{{{bullet|}}}||{{pb}}}}{{#if:{{{bullet|}}}|* }}📊 '''Scale and performance.''' At-Bay serves close to 40,000 U.S. businesses with revenue up to $5B, distributing through [[Definition:Wholesale broker |wholesale brokers]] and digital channels including its acquired Relay marketplace. Carrier-level statutory reporting shows $154.5M in [[Definition:Gross written premium (GWP) |gross premium]] and a 98% [[Definition:Combined ratio |combined ratio]] in 2023, while company-disclosed annual recurring GWP reached $380M as of January 2023 with over 300 employees across hubs in Atlanta, Chicago, New York City, San Francisco, and Tel Aviv.
|4 = {{#if:{{{bullet|}}}|* }}🏢 '''Company profile.''' '''At-Bay, Inc.''' is a Delaware C-Corporation founded in 2016 by Rotem Iram and Roman Itskovich that operates a hybrid InsurSec model, combining MGA insurance underwriting with proprietary cybersecurity services through its At-Bay Stance platform. Headquartered in San Francisco with an R&D center in Tel Aviv, the company has raised $295.7 million across eight venture rounds, was valued at $1.35 billion following its July 2021 Series D, and acquired a licensed carrier from AXA XL in January 2023 — now rated A- (Excellent) by AM Best. As of 2025, At-Bay protects over 40,000 policyholders across 100+ industries with 340+ employees globally.
|5 = {{#if:{{{bullet|}}}|* }}🏢 '''At-Bay''' is a U.S.-based [[Definition:Insurtech |insurtech]] founded in 2016 that underwrites cyber, [[Definition:Technology errors and omissions (Tech E&O) |technology E&O]], and [[Definition:Miscellaneous professional liability (MPL) |MPL]] through its Delaware-domiciled [[Definition:Excess and surplus lines |E&S carrier]], At-Bay Specialty Insurance Company, rated [[Definition:AM Best |AM Best]] A- stable. The company transitioned from an [[Definition:Managing general agent (MGA) |MGA]]/[[Definition:Fronting |fronted program]] to [[Definition:Full-stack carrier |full-stack carrier]] status, completing its carrier acquisition from [[Definition:XL Insurance |XL Insurance America]] in January 2023 and beginning to issue policies on its own paper in August 2023. Co-founded by Rotem Iram (CEO) and Roman Itskovich (CRO), both Harvard Business School graduates, At-Bay has raised $292M in [[Definition:Venture capital |venture capital]] at a $1.35B post-money valuation.{{#if:{{{bullet|}}}||{{pb}}}}{{#if:{{{bullet|}}}||{{pb}}}}{{#if:{{{bullet|}}}|* }}💰 '''Funding and investors.''' At-Bay raised $292M across six rounds from seed through a Series D extension, with the $185M Series D in July 2021 and a $20M extension in October 2021 setting the $1.35B valuation. The investor base spans generalist venture funds ([[Definition:Lightspeed Venture Partners |Lightspeed Venture Partners]], [[Definition:Khosla Ventures |Khosla Ventures]], Icon Ventures), a strategic [[Definition:Reinsurer |reinsurer]] venture arm ([[Definition:Munich Re |Munich Re Ventures]]), and a corporate venture fund (M12), alongside growth investors Qumra Capital, Acrew Capital, and ION Crossover Partners.{{#if:{{{bullet|}}}||{{pb}}}}{{#if:{{{bullet|}}}||{{pb}}}}{{#if:{{{bullet|}}}|* }}🏗️ '''Carrier evolution.''' In its initial phase, At-Bay operated a fronted program launched in May 2022 with [[Definition:Trisura |Trisura Specialty Insurance Company]] as issuing carrier and [[Definition:Hartford Steam Boiler (HSB) |The Hartford Steam Boiler]] as lead reinsurer, with [[Definition:Reinsurance |reinsurance]] placed by [[Definition:Guy Carpenter |Guy Carpenter]]. The transition to full-stack carrier status was completed through the acquisition of a Delaware-domiciled E&S carrier (formerly XL Select Insurance Company), which received an AM Best A- rating in April 2023, reaffirmed with stable outlook in August 2025.{{#if:{{{bullet|}}}||{{pb}}}}{{#if:{{{bullet|}}}||{{pb}}}}{{#if:{{{bullet|}}}|* }}🔒 '''InsurSec platform.''' At-Bay operates an integrated insurance-and-security model anchored by its Stance Exposure Management platform, providing [[Definition:Vulnerability scanning |vulnerability scanning]], dark web monitoring, AI-powered email fraud alerts, vCISO advisory, and security awareness training. Access to Stance is embedded in surplus cyber and tech E&O policies via an Embedded Security Fee and endorsement, while a pre-bind Security Report delivers cyber risk analysis and recommendations during the quoting process.{{#if:{{{bullet|}}}||{{pb}}}}{{#if:{{{bullet|}}}||{{pb}}}}{{#if:{{{bullet|}}}|* }}🖥️ '''Managed security services.''' [[Definition:Managed detection and response (MDR) |MDR]] services are provided through subsidiary At-Bay Security, LLC, offered separately from insurance and not limited to policyholders; a June 2024 announcement described enterprise-grade MDR powered by [[Definition:CrowdStrike |CrowdStrike]] with 24/7 SOC monitoring. In July 2025, At-Bay launched an [[Definition:Extended detection and response (XDR) |MXDR]] platform and a strategic alliance with [[Definition:SentinelOne |SentinelOne]], expanding its managed security product line alongside its in-house Response & Recovery [[Definition:Digital forensics |digital forensics]] and [[Definition:Incident response |incident response]] team.{{#if:{{{bullet|}}}||{{pb}}}}{{#if:{{{bullet|}}}||{{pb}}}}{{#if:{{{bullet|}}}|* }}📜 '''Policy coverage.''' The published cyber policy form (AB-CYB-001.2, 08/2023) uses a modular [[Definition:Claims-made policy |claims-made]] structure with [[Definition:First-party coverage |first-party]] coverages including incident response costs, [[Definition:Business interruption insurance |business interruption]] (direct and [[Definition:Contingent business interruption |contingent]]), [[Definition:Cyber extortion |cyber extortion]], and [[Definition:Financial fraud coverage |financial fraud]] ([[Definition:Social engineering fraud |social engineering]] and [[Definition:Computer fraud |computer fraud]]). Third-party [[Definition:Insuring agreement |Insuring Agreements]] cover [[Definition:Privacy liability |information privacy liability]], [[Definition:Regulatory liability |regulatory liability]] (including [[Definition:General Data Protection Regulation (GDPR) |GDPR]] penalties), [[Definition:Payment Card Industry Data Security Standard (PCI-DSS) |PCI-DSS]] liability, [[Definition:Network security liability |network security liability]], and [[Definition:Media liability |media liability]], with notable [[Definition:Exclusion |exclusions]] for war, infrastructure failure, and [[Definition:Prior acts exclusion |prior acts]].{{#if:{{{bullet|}}}||{{pb}}}}{{#if:{{{bullet|}}}||{{pb}}}}{{#if:{{{bullet|}}}|* }}📊 '''Financial performance.''' Carrier-level statutory reporting shows $154.5M in [[Definition:Gross written premium (GWP) |gross premium]] and a 98% [[Definition:Combined ratio |combined ratio]] in 2023, with [[Definition:Net income |net income]] of $1.29M. Company-disclosed annual recurring GWP reached $380M as of January 2023, up from a $240M run-rate in 2021 that represented 600% year-over-year growth, and the company employs more than 300 people across hubs in Atlanta, Chicago, New York City, San Francisco, and Tel Aviv.{{#if:{{{bullet|}}}||{{pb}}}}{{#if:{{{bullet|}}}||{{pb}}}}{{#if:{{{bullet|}}}|* }}🤝 '''Distribution and market.''' At-Bay distributes through [[Definition:Wholesale broker |wholesale brokers]] and digital channels, operating a dedicated broker platform and API strategy reinforced by its August 2022 acquisition of Relay, a multi-carrier digital distribution marketplace maintained as an operationally independent unit. The company serves close to 40,000 U.S. businesses, primarily SMB by count but extending to mid-market and enterprise through its expanded $5B revenue ceiling and $10M [[Definition:Aggregate limit |aggregate limit]] architecture.{{#if:{{{bullet|}}}||{{pb}}}}{{#if:{{{bullet|}}}||{{pb}}}}{{#if:{{{bullet|}}}|* }}⚠️ '''Risk factors.''' Key risk considerations include continued reliance on reinsurance despite the carrier transition, [[Definition:Cyber aggregation risk |systemic cyber aggregation]] exposure across first-party coverages, regulatory scrutiny inherent in E&S [[Definition:Underwriting |underwriting]] and corporate control transactions, and technology execution risk tied to third-party vendor dependencies in MDR services. The Relay acquisition introduces integration risk as the platform is maintained operationally independent while being embedded within At-Bay's distribution strategy.
{{#if:{{{bullet|}}}||<br>}}
{{#if:{{{bullet|}}}||<br>}}
{{#if:{{{bullet|}}}|* }}📈 '''Performance and competitive position.''' Gross written premium grew from an estimated $40 million in 2020 to over $380 million by 2022, driven by new customer acquisition, expanded capacity, and hard-market rate increases. At-Bay's technical underwriting has produced gross loss ratios estimated at 30–40% against industry peaks of 75–100%, with ransomware claim frequency reported at seven times lower than the industry average — results that prompted lead reinsurer HSB to increase its capital commitment. By 2024, At-Bay Specialty ranked fourth among U.S. standalone cyber insurers by direct premium, trailing only Coalition among insurtech peers while competitors Corvus and Cowbell faced capacity disruptions.
{{#if:{{{bullet|}}}||<br>}}
{{#if:{{{bullet|}}}||<br>}}
{{#if:{{{bullet|}}}|* }}🚀 '''Strategy and outlook.''' At-Bay's forward strategy centers on deepening SME penetration through its admitted product and API distribution, expanding into adjacent specialty lines, and optimizing full-stack carrier operations by migrating more business onto its own balance sheet. The company is likely not yet profitable on a consolidated basis given heavy growth investment, but unit economics are favorable — a sub-50% loss ratio and growing commission base suggest a clear path to breakeven, while the hire of CFO Ari Fischel (who helped prepare Oscar Health for IPO) signals public-market readiness. Key risks include cyber catastrophe accumulation, capacity provider withdrawal, and regulatory evolution around ransom payments and privacy laws.
|5 = {{#if:{{{bullet|}}}|* }}🏢 '''Company profile.''' '''At-Bay, Inc.''' is a Delaware C-Corporation founded in 2016 by Rotem Iram (CEO) and Roman Itskovich (CRO) that operates as a cyber-focused MGA and, since January 2023, a wholly-owned carrier through At-Bay Specialty Insurance Company (AM Best A-, Excellent). Headquartered in San Francisco with an R&D center in Tel Aviv and offices in New York, Atlanta, Chicago, and Mountain View, the company has raised $295.7 million across eight venture rounds and was valued at $1.35 billion following a July 2021 Series D led by Icon Ventures and Lightspeed Venture Partners. Key institutional backers include Khosla Ventures, M12 (Microsoft), Munich Re Ventures, Acrew Capital, Glilot Capital, Qumra Capital, and ION Crossover Partners, with no single investor holding a disclosed controlling stake.
{{#if:{{{bullet|}}}||<br>}}
{{#if:{{{bullet|}}}||<br>}}
{{#if:{{{bullet|}}}|* }}🔄 '''Business model.''' At-Bay operates a hybrid InsurSec model combining MGA insurance underwriting with proprietary cybersecurity services delivered through its At-Bay Stance platform, which provides continuous vulnerability scanning, managed detection and response (MDR) with 15-minute average threat containment, and AI-powered email fraud defense. Core insurance products include cyber liability, Technology E&O, and miscellaneous professional liability (MPL), the latter launched in 2022 with API-driven auto-quoting across 50+ business classes. Revenue is primarily commission-driven at an estimated 15–20% of gross written premium, supplemented by contingent commissions earned when loss ratios stay below agreed thresholds and by embedded security fees bundled into select policies.
{{#if:{{{bullet|}}}||<br>}}
{{#if:{{{bullet|}}}||<br>}}
{{#if:{{{bullet|}}}|* }}🤝 '''Distribution and capacity.''' Distribution relies on wholesale brokers (CRC, RT Specialty, AmWINS) via an online Broker Platform that earned a 93 NPS, supplemented by API integrations for programmatic quoting and an admitted cyber product available in 47 states for micro-SMEs. The capacity structure has evolved from a single carrier (HSB/Munich Re, A++ rated) to a diversified multi-carrier panel including Trisura Specialty as a fronting insurer, a captive reinsurance subsidiary, and At-Bay's own carrier — with At-Bay Specialty ranking fourth among U.S. standalone cyber insurers by direct premium as of 2024. Strategic alliances with Microsoft (2021) and CrowdStrike (2023) extend reach into SMB cybersecurity ecosystems.
{{#if:{{{bullet|}}}||<br>}}
{{#if:{{{bullet|}}}||<br>}}
{{#if:{{{bullet|}}}|* }}📈 '''Performance drivers.''' Gross written premium grew from an estimated $40 million in 2020 to over $380 million by 2022, fueled by new customer acquisition, aggressive capacity deployment during the hard market, and steep industry-wide rate increases, while the policyholder count rose from approximately 5,000 to over 40,000 by 2025. The standout driver is technical underwriting producing gross loss ratios estimated at 30–40% against an industry peak of 75–100%, with ransomware claim frequency seven times lower than the industry average — results attributed to proactive vulnerability patching, rigorous risk selection, and efficient in-house claims handling. Operational efficiency of approximately $1.3 million in GWP per employee, achieved through automation, has driven a virtuous cycle of high submission volume and superior risk selection.
{{#if:{{{bullet|}}}||<br>}}
{{#if:{{{bullet|}}}||<br>}}
{{#if:{{{bullet|}}}|* }}💰 '''Financial profile.''' Net revenues consist primarily of commission income estimated at $57–76 million in 2022 based on $380 million GWP at a 15–20% commission rate, though no GAAP figures have been publicly disclosed. The company is likely not yet profitable on a consolidated basis given heavy growth-mode investment in personnel across high-cost markets and technology R&D, with operating losses sustained by venture capital. However, the retained slice of business written through At-Bay Specialty starting in 2023 could produce an estimated 75% combined ratio, yielding a 25% underwriting margin that complements commission income and a new stream of investment income from the carrier's bond portfolio.
{{#if:{{{bullet|}}}||<br>}}
{{#if:{{{bullet|}}}||<br>}}
{{#if:{{{bullet|}}}|* }}🏦 '''Balance sheet and liquidity.''' The consolidated balance sheet includes carrier assets (a conservative investment-grade bond portfolio, reinsurance recoverables, and premium receivables) alongside insurance liabilities that remain heavily reinsured, keeping net liabilities limited. AM Best assessed At-Bay Specialty's risk-adjusted capitalization at the strongest level with balance sheet strength rated Very Strong, and the company carries zero known debt — all expansion has been funded by equity. Free cash flow has been negative to date, but the burn rate is manageable as evidenced by no major equity raise since 2021, and the trend is toward self-sustainability as commission revenues grow and the carrier generates investment income.{{#if:{{{bullet|}}}||<br>}}
{{#if:{{{bullet|}}}||<br>}}
{{#if:{{{bullet|}}}||<br>}}
{{#if:{{{bullet|}}}|* }}⚠️ '''Risk and compliance.''' The paramount risk is cyber catastrophe accumulation — a single systemic event causing simultaneous claims across the portfolio — managed through dependency monitoring, exposure caps, aggregate stop-loss reinsurance, and ERM-level catastrophe modeling rated appropriate by AM Best. Additional risk categories include attritional loss volatility (average ransomware severity rose 47% for mid-sized firms in 2024), capacity provider withdrawal risk (mitigated by diversified carriers and own balance sheet), technology and data risk (SOC 2 certified), and regulatory risk from evolving privacy laws and potential ransom-payment bans. At-Bay Insurance Services LLC holds producer licenses in all 50 states and D.C., while At-Bay Specialty is eligible as a surplus lines insurer in 44 states and files NAIC annual statements under Delaware regulatory examination.{{#if:{{{bullet|}}}||<br>}}
{{#if:{{{bullet|}}}||<br>}}
{{#if:{{{bullet|}}}||<br>}}
{{#if:{{{bullet|}}}|* }}🏛️ '''Governance and capital history.''' Governance has matured from startup mode to near-public-company standards with independent directors Gregg Davis and Rob Glanville added to the carrier's board in 2023, while the broader board includes founder-executives and investor representatives from Icon Ventures and Lightspeed. Capital actions span eight equity rounds from a 2016–2017 seed through the landmark $185 million Series D in July 2021 at a $1.35 billion valuation, a $20 million extension from ION Crossover Partners, and a minor $3.7 million round in September 2022 — with no further raises as of 2026. Munich Re Ventures uniquely provides both equity capital and underwriting capacity via HSB, aligning investment and risk-bearing interests.
{{#if:{{{bullet|}}}||<br>}}
{{#if:{{{bullet|}}}||<br>}}
{{#if:{{{bullet|}}}|* }}🚀 '''Strategic outlook.''' At-Bay's forward strategy centers on deepening SME penetration through its admitted product and API distribution, expanding into adjacent specialty lines such as D&O or cyber fraud-related crime insurance, and optimizing full-stack carrier operations by gradually migrating more business onto its own balance sheet. Technology priorities include AI-enhanced threat intelligence and underwriting, expansion of the At-Bay Stance platform, and scaling MDR through automation, while the company intends to diversify reinsurance partnerships and pursue embedded insurance deals with cloud providers or MSPs. The hire of CFO Ari Fischel — who helped prepare Oscar Health for IPO — and the presence of crossover fund ION signal public-market readiness, with a roadmap to EBITDA breakeven implied by improving operating leverage and favorable unit economics.
}}
Retrieved from "https://www.insurerbrain.com/wiki/Summary:At-Bay"