Insurer Brain

Summary:Resilience: Difference between revisions

Browse history interactively
Content deleted Content added
VisualWikitext
Created page with "{{#switch: {{{1|3}}} |1 = {{#if:{{{bullet|}}}|* }}A venture-backed cyber insurance MGA combining underwriting with integrated cybersecurity platform, achieving loss ratios one-third of industry average at ~$650M valuation |2 = {{#if:{{{bullet|}}}|* }}Resilience is a ~$650M-valued cyber insurance MGA/MGU founded in 2016 that underwrites policies on behalf of carrier partners while delivering a bundled cybersecurity platform, achieving approximately 20% loss ratios aga..."
 
No edit summary
 
Line 1:
{{#switch: {{{1|3}}}
|1 = {{#if:{{{bullet|}}}|* }}A ventureUS-backedbased cyber insuranceinsurtech MGA combining underwriting with, integrated cybersecurityinsurance-plus-security platform, achievingIntact lossgroup ratioscapacity, onemid-thirdmarket ofto industrylarge averageenterprise, atover ~$650M225M valuationraised
|2 = {{#if:{{{bullet|}}}|* }}Resilience is a ~$650MSan Francisco-valuedbased cyber insuranceinsurtech MGA/MGU foundedoperating inon 2016Intact thatgroup underwritescarrier policiespaper, onoffering behalfcyber ofand carriertechnology partnersE&O whilecoverage deliveringwith alimits bundledup cybersecurityto platform,$20M achievingto approximatelymid-market 20%and losslarge ratiosenterprise againstclients anacross industrythe averageUS, ofUK, 60%EU, acrossand aCanada, rapidlyhaving raised over $225M expandingthrough globalSeries portfolioD.
|3 = {{#if:{{{bullet|}}}|* }}🏢 '''Resilience''' is a cyber-focused insurtech managing general agent headquartered in San Francisco, operating under the legal entity Arceo Labs, Inc. Founded in 2016, the company writes cyber insurance and technology E&O on Intact group carrier paper with limits up to $20M, targeting mid-market to large enterprise organizations with $25M to $10B in revenue. Resilience differentiates through an integrated "Insure + Secure" model combining underwriting with in-house security engineering, continuous portfolio threat monitoring via its Risk Operations Center, and breach-and-attack simulations powered by AttackIQ. The company has raised over $225M through a Series D round led by Intact Ventures in August 2023, with a $650M valuation reported at Series C.
|3 = {{#if:{{{bullet|}}}|* }}🛡️ '''Resilience''' is a privately held, Delaware-registered cyber insurance MGA/MGU founded in 2016 by former U.S. military cyber operators, combining policy underwriting on behalf of carrier partners (primarily Intact Financial subsidiaries) with a proprietary SaaS cybersecurity platform bundled at no extra charge to policyholders. The company has raised approximately $325 million across seed through Series D rounds, was valued at roughly $650 million after its November 2021 Series C, and serves approximately 10% of all U.S. enterprises with over $1 billion in revenue as of 2025. Its integrated Insure + Secure model has produced loss ratios approximately one-third of the industry average, with 96% of premium-tier Edge Solution clients recording zero incurred-loss claims in 2023 and 85% of ransomware-targeted clients avoiding any ransom payment.
|4 = {{#if:{{{bullet|}}}|* }}🏢 '''Resilience''' is a cyber-focused insurtech managing general agent headquartered in San Francisco, legally operating as Arceo Labs, Inc. Founded in 2016, the company functions as a program administrator on Intact group carrier paper, offering cyber insurance with limits up to $20M and technology E&O with $10M limits to mid-market and large enterprise clients with $25M to $10B in revenue. It distributes through brokers across the US, UK, EU, and Canada via distinct licensed intermediaries in each jurisdiction.{{#if:{{{bullet|}}}||{{pb}}}}{{#if:{{{bullet|}}}||{{pb}}}}{{#if:{{{bullet|}}}|* }}🔒 '''Integrated platform.''' Resilience differentiates through its "Insure + Secure" model, embedding in-house security engineers into the underwriting lifecycle from risk assessment through post-bind vulnerability monitoring. The Risk Operations Center provides continuous portfolio-level threat monitoring, and breach-and-attack simulations powered by AttackIQ are offered alongside coverage. Claims operations feature a global in-house team with a stated average initial reply time under 15 minutes and a published vendor panel spanning forensics, ransomware resolution, crisis communications, and credit monitoring.{{#if:{{{bullet|}}}||{{pb}}}}{{#if:{{{bullet|}}}||{{pb}}}}{{#if:{{{bullet|}}}|* }}💰 '''Funding and capacity.''' The company has raised over $225M through a Series D led by Intact Ventures in August 2023, with a $650M valuation reported at Series C in November 2021. Prior rounds include $37M in early funding from Lightspeed Venture Partners and Founders Fund (2019) and an $80M Series C co-led by General Catalyst. US underwriting capacity is provided by Homeland Insurance Company of New York and Homeland Insurance Company of Delaware within the Intact group, with Intact Insurance Company serving as the Canadian carrier.
|4 = {{#if:{{{bullet|}}}|* }}🏢 '''Company profile.''' Resilience Cyber Insurance Solutions LLC was founded in 2016 as Arceo Labs by four co-founders with deep U.S. military cyber operations backgrounds, rebranding in 2020 upon launching as an MGA/MGU. Headquartered in San Francisco with offices across the United States, Canada, and Europe including London, Milan, Madrid, and Stockholm, the company has raised approximately $325 million in equity financing and was valued at roughly $650 million following its November 2021 Series C led by General Catalyst and Rapid7 CEO Corey Thomas. As of 2025, Resilience employs an estimated 250-300 people, underwrites policies on behalf of a multi-carrier panel led by Intact Financial subsidiaries, and counts approximately 10% of all U.S. enterprises with over $1 billion in revenue among its clients.
|5 = {{#if:{{{bullet|}}}|* }}🏢 '''Resilience''' is a cyber-focused insurtech managing general agent headquartered in San Francisco, legally operating as Arceo Labs, Inc. Founded in 2016 during its Arceo.ai era, the company functions as a program administrator writing on third-party carrier paper rather than bearing risk on its own balance sheet. Insurance products are produced or distributed through licensed intermediaries, while cybersecurity services are delivered directly by the operating company.{{#if:{{{bullet|}}}||{{pb}}}}{{#if:{{{bullet|}}}||{{pb}}}}{{#if:{{{bullet|}}}|* }}🌐 '''Multi-jurisdictional operations.''' Resilience operates across the US, UK, EU, and Canada through distinct distribution entities. In the US, Ocrea Risk Services, LLC (NPN 19169260) distributes products underwritten by Homeland Insurance Company of New York and Homeland Insurance Company of Delaware (Intact group). UK distribution is handled by Arceo, Ltd. under FCA authorization (reference 1007418), EU operations run through Resilience Cyber Insurance Solutions Germany GmbH (IHK zu Dortmund), and Canadian insurance services are offered by Resilience Cyber Insurance Solutions Agency Canada Ltd. with Intact Insurance Company as carrier.{{#if:{{{bullet|}}}||{{pb}}}}{{#if:{{{bullet|}}}||{{pb}}}}{{#if:{{{bullet|}}}|* }}👤 '''Leadership.''' The company was co-founded by CEO Vishaal "V8" Hariprasad, a licensed insurance broker, US Air Force veteran, and former co-founder of Morta Security (acquired by Palo Alto Networks), and Chairman Raj Shah, managing partner of Shield Capital and former head of DIUx. The executive team includes President Mario Vitale, Chief Underwriting Officer Maria Long, Global Head of Claims Jeremy Gittler, and CISO Chris Wheeler.{{#if:{{{bullet|}}}||{{pb}}}}{{#if:{{{bullet|}}}||{{pb}}}}{{#if:{{{bullet|}}}|* }}🛡️ '''Product suite.''' Resilience offers cyber insurance with limits up to $20M on a primary or excess basis and technology E&O with $10M limits targeting organizations with $25M to $10B in revenue. Explicitly described cyber coverages include up to $500,000 in eCrime coverage, funds transfer fraud recovery, and privacy wrongful act coverage. The company markets across a broad industry appetite including healthcare, financial services, manufacturing, technology, and life sciences.{{#if:{{{bullet|}}}||{{pb}}}}{{#if:{{{bullet|}}}||{{pb}}}}{{#if:{{{bullet|}}}|* }}🔒 '''Insure + Secure model.''' The core differentiator is an integrated model embedding in-house security engineers into the underwriting lifecycle from risk assessment through post-bind vulnerability monitoring. The Risk Operations Center provides continuous portfolio-level threat monitoring, while breach-and-attack simulations powered by AttackIQ are offered to policyholders. Claims service documents emphasize that the purchase of insurance is not tied to the purchase of security services.{{#if:{{{bullet|}}}||{{pb}}}}{{#if:{{{bullet|}}}||{{pb}}}}{{#if:{{{bullet|}}}|* }}📋 '''Claims operations.''' The claims function features a global in-house team available 24/7 with a stated average initial reply time under 15 minutes. Service panel materials enumerate provider categories including privacy law, digital forensics and incident response, data recovery, ransomware resolution, crisis communications, and credit monitoring. This structure supports rapid mobilization and coordination across incident types.{{#if:{{{bullet|}}}||{{pb}}}}{{#if:{{{bullet|}}}||{{pb}}}}{{#if:{{{bullet|}}}|* }}💰 '''Funding history.''' Resilience has raised over $225M in venture capital through a Series D led by Intact Ventures in August 2023. Prior rounds include $37M in cumulative early funding from Lightspeed Venture Partners and Founders Fund (September 2019) and an $80M Series C co-led by General Catalyst and Corey Thomas (November 2021), which valued the company at $650M per specialist press. The investor base spans generalist, defense-adjacent, and strategic insurer capital including CRV, UL Ventures, and Shield Capital.{{#if:{{{bullet|}}}||{{pb}}}}{{#if:{{{bullet|}}}||{{pb}}}}{{#if:{{{bullet|}}}|* }}🏦 '''Capacity structure.''' US underwriting is placed through Homeland Insurance Company of New York and Homeland Insurance Company of Delaware within the Intact group, with the Series C announcement characterizing Resilience as the cyber program manager of Intact Insurance Specialty Solutions. The Intact relationship extends to strategic investment, with the carrier group's venture arm leading the Series D. Canadian underwriting is provided by Intact Insurance Company.{{#if:{{{bullet|}}}||{{pb}}}}{{#if:{{{bullet|}}}||{{pb}}}}{{#if:{{{bullet|}}}|* }}⚠️ '''Risk factors.''' Key risks include capacity dependency concentration on named Intact group entities, limited public validation of loss outcomes underpinning the risk quantification model, and multi-jurisdictional regulatory complexity across four regions with separate licensed intermediaries. The business targets limits up to $20M, increasing tail sensitivity to correlated cyber catastrophe events, and expansion into technology E&O introduces professional liability dynamics beyond core cyber. The sole disclosed performance metric is a company claim of a net loss ratio three times lower than the 2022 industry average.
{{#if:{{{bullet|}}}||<br>}}
{{#if:{{{bullet|}}}||<br>}}
{{#if:{{{bullet|}}}|* }}📈 '''Performance and underwriting results.''' Resilience has consistently produced loss ratios far below industry benchmarks, reporting approximately 20% in 2022 versus an industry average of roughly 60%, while 96% of Edge Solution policyholders in 2023 recorded zero incurred-loss claims and 85% of ransomware-targeted clients paid no ransom. By mid-2025, claim frequency across the portfolio had dropped 53% year-over-year even as per-incident ransomware costs rose, and European gross written premium grew 48% following the 2023 EU launch. The capital-light MGA model generates revenue through base commissions (estimated at 15% of gross written premium) and contingent profit commissions tied to superior loss performance, with the cybersecurity platform embedded at no separate charge to create a data-driven feedback loop between security outcomes and underwriting decisions.
{{#if:{{{bullet|}}}||<br>}}
{{#if:{{{bullet|}}}||<br>}}
{{#if:{{{bullet|}}}|* }}🚀 '''Strategy and outlook.''' Resilience is simultaneously scaling up-market into Fortune 1000 accounts through its Accredited capacity partnership for companies with $10 billion-plus revenues and selectively moving down-market via Technology E&O for growth-stage firms above $25 million in revenue. Geographic expansion centers on cementing European operations across France, Benelux, DACH, and the Nordics, with a London wholesale Lloyd's facility established in 2025 and Asia-Pacific identified as a longer-term target. Key risks include capacity concentration on Intact, cyber catastrophe accumulation, pricing cycle softening, and model risk from novel attack types, while the $100 million Series D provides estimated runway of 24-36 months toward an inflection point where recurring commissions cover fixed costs.
|5 = {{#if:{{{bullet|}}}|* }}🏢 '''Company profile.''' Resilience Cyber Insurance Solutions LLC was founded in 2016 as Arceo Labs by Vishaal Hariprasad (CEO), Raj Shah (Chairman), Davis Hake, and Matthew Hall, rebranding in 2020 upon launching as a cyber insurance MGA/MGU. Headquartered in San Francisco with offices in New York, Chicago, Los Angeles, Baltimore, Toronto, London, Milan, Madrid, Stockholm, Rotterdam, Dublin, and other locations, the company operates at the intersection of cyber insurance and cybersecurity, underwriting policies on behalf of carrier partners while providing an integrated SaaS risk management platform to policyholders. The founders brought deep national security backgrounds from U.S. Air Force cyber operations, White House policy roles, and the co-founding of Morta Security (acquired by Palo Alto Networks), and as of 2025 approximately 10% of all U.S. enterprises with over $1 billion in revenue were counted among Resilience's clients.
{{#if:{{{bullet|}}}||<br>}}
{{#if:{{{bullet|}}}||<br>}}
{{#if:{{{bullet|}}}|* }}🔄 '''Business model.''' Resilience operates a dual-segment model combining insurance underwriting with a proprietary cybersecurity platform delivered as a unified proposition, earning commission income (typically 10-20% of gross written premium) and contingent profit commissions tied to loss-ratio performance rather than retaining insurance risk on its own balance sheet. The cybersecurity platform is offered in two tiers — Essential (baseline monitoring included with coverage) and Edge (premium continuous threat intelligence, breach and attack simulation, and hands-on mitigation support) — both bundled at no extra charge, creating a feedback loop where platform data informs underwriting and insurance incentivizes clients to act on security recommendations. Insurance products span comprehensive cyber liability with up to $20 million U.S. limits and a Technology E&O line expanded in 2025 to companies above $25 million in revenue, distributed exclusively through insurance brokers.
{{#if:{{{bullet|}}}||<br>}}
{{#if:{{{bullet|}}}||<br>}}
{{#if:{{{bullet|}}}|* }}🤝 '''Capacity and distribution.''' Capacity is sourced from a multi-carrier panel including Intact Insurance Specialty Solutions (Homeland Insurance Company of New York and Delaware) as the primary U.S. carrier, RSA Insurance for UK and European placements, HDI Global Specialty as an additional European source, and Accredited Insurance for large-enterprise accounts with revenues exceeding $10 billion. Distribution is exclusively broker-driven through major firms including Marsh, Aon, WTW, Lockton, and cyber specialty brokers, with Resilience providing portal tools and a Cyber Risk Calculator for modeling client risk. A London wholesale Lloyd's facility was established in late 2025 to capture large or international programs, and the company holds Lloyd's coverholder authorization for certain placements.
{{#if:{{{bullet|}}}||<br>}}
{{#if:{{{bullet|}}}||<br>}}
{{#if:{{{bullet|}}}|* }}📈 '''Performance drivers.''' Resilience's loss ratio was approximately 20% in 2022 against an industry average of roughly 60%, and in 2023 96% of Edge Solution policyholders had no incurred-loss claims while 85% of ransomware-targeted clients avoided paying any ransom. By mid-2025, claim frequency across the portfolio had dropped 53% year-over-year even as per-incident ransomware costs rose, and third-party vendor-related claim notifications fell from 37% to 26% of claims, attributed to proactive monitoring through the Risk Operations Center. European gross written premium grew 48% year-over-year following the 2023 EU launch, and the overall book expanded through higher policy limits, geographic reach, and movement into Fortune 1000 accounts.
{{#if:{{{bullet|}}}||<br>}}
{{#if:{{{bullet|}}}||<br>}}
{{#if:{{{bullet|}}}|* }}💰 '''Financial profile.''' Revenue derives from base commissions estimated at approximately 15% of gross written premium, contingent profit commissions earned through superior loss performance, and the embedded value of the cybersecurity platform, with commission revenue likely growing from low single-digit millions in 2020 to tens of millions by 2023. Personnel costs are the largest expense category, followed by technology development, international office buildouts, and BreachQuest acquisition integration costs, and Resilience has likely operated at an EBITDA loss each year through 2025 consistent with aggressive venture-backed reinvestment. The $100 million Series D provides runway to continue executing without immediate profitability pressure, with the inflection point to breakeven projected within a few years as recurring commissions scale to cover fixed costs.
{{#if:{{{bullet|}}}||<br>}}
{{#if:{{{bullet|}}}||<br>}}
{{#if:{{{bullet|}}}|* }}🏦 '''Balance sheet and liquidity.''' The balance sheet is dominated by cash estimated at $100-150 million following the August 2023 Series D close, funded by cumulative paid-in capital of approximately $325 million, with additional assets including capitalized platform development costs, BreachQuest acquisition intangibles, and commission receivables from carrier partners. The company carries no traditional debt and total liabilities consist primarily of short-term operational obligations such as premiums payable to carriers and deferred commission revenue, while equity remains strongly positive with paid-in capital partially offset by accumulated operating losses estimated at $50-80 million. Estimated cash runway as of mid-2023 was at least 24-36 months at burn rates of $3-5 million per month, and the MGA model eliminates the need for statutory surplus or claim reserves as all insurance risk sits with carrier partners.
{{#if:{{{bullet|}}}||<br>}}
{{#if:{{{bullet|}}}||<br>}}
{{#if:{{{bullet|}}}|* }}⚠️ '''Risk and compliance.''' The most significant insurance risk is a systemic cyber catastrophe affecting many insureds simultaneously, mitigated through portfolio diversification, continuous monitoring of third-party vendor concentration, and multi-carrier capacity arrangements. Capacity concentration on Intact poses a strategic risk, as Intact provides a substantial share of underwriting capacity and funding, partially addressed through diversification via Accredited, Lloyd's, and HDI partnerships. Additional risk categories include pricing cycle exposure as the cyber market softened in 2023-2024, model risk from potential blind spots in the Threatonomics engine, key person dependency on the founders, and multi-jurisdictional regulatory complexity spanning U.S. state MGA licensure, FCA authorization in the UK, Lloyd's coverholder audits, and EU passporting through an Irish entity.
{{#if:{{{bullet|}}}||<br>}}
{{#if:{{{bullet|}}}||<br>}}
{{#if:{{{bullet|}}}|* }}🏛️ '''Governance and ESG.''' The Board of Directors includes co-founders Hariprasad and Shah alongside investor representatives from General Catalyst, Lightspeed Venture Partners, and Intact Ventures, with top-tier VC governance discipline including regular board meetings and likely audited financials from Series C onward. Women hold several prominent leadership positions including the Chief Data Officer, SVP Engineering, Chief Underwriting Officer, and Chief Legal Officer, while the company's military and intelligence heritage shapes active recruitment of former government cyber experts. Resilience's core mission carries inherent social value — by helping 96% of Edge clients in 2023 avoid paying ransoms, the company directly deprives cybercriminal enterprises of revenue, and leadership has participated in White House cybersecurity summits and contributes publicly available threat reports.
{{#if:{{{bullet|}}}||<br>}}
{{#if:{{{bullet|}}}||<br>}}
{{#if:{{{bullet|}}}|* }}🚀 '''Capital history and strategic outlook.''' Resilience's funding spans six years from a $3-5 million seed round in 2016-2018 through a $100 million Series D in August 2023 led by Intact Ventures, bringing cumulative equity financing to approximately $325 million with the Series C post-money valuation reported at approximately $650 million and the Series D estimated in the $600-800 million range. Forward strategy centers on scaling up-market into Fortune 1000 accounts via the Accredited partnership, expanding down-market through Tech E&O, cementing European operations across France, Benelux, DACH, and the Nordics, and pursuing technology priorities including AI-driven underwriting automation and deeper platform integrations following the CrowdStrike and AWS collaboration. No debt has been raised, preserving strategic flexibility for potential future capital events including a possible IPO, while the capital-light MGA model allows deployment toward technology and expansion rather than regulatory capital requirements.
}}
Retrieved from "https://www.insurerbrain.com/wiki/Summary:Resilience"