Summary:At-Bay: Difference between revisions

|2 = {{#if:{{{bullet|}}}|* }}At-Bay is a $1.35B-valued cyber insurtech that underwrites specialty insurance and delivers managed security services to over 40,000 SME policyholders, achieving loss ratios roughly half the industry average through its proprietary InsurSec model.

|3 = {{#if:{{{bullet|}}}|* }}🛡️ '''At-Bay, Inc.''' is a Delaware-incorporated cyber insurtech founded in 2016 that operates as both an MGA and a full-stack carrier (At-Bay Specialty Insurance Company, AM Best A-), combining underwriting of cyber liability, Tech E&O, and miscellaneous professional liability with proprietary cybersecurity services delivered through its At-Bay Stance platform. The company has raised $295.7 million in venture funding, was valued at $1.35 billion after its July 2021 Series D, and manages over $380 million in gross written premium while protecting more than 40,000 policyholders across 100+ industries. Its InsurSec model — pairing active risk monitoring with insurance — has produced ransomware claim frequency seven times lower than the industry average and gross loss ratios estimated at 30–40%, positioning At-Bay as the fourth-largest U.S. standalone cyber insurer by direct premium as of 2024.

{{#if:{{{bullet|}}}|* }}🚀 '''Strategy and outlook.''' At-Bay's forward strategy centers on deepening SME penetration through its admitted product and API distribution, expanding into adjacent specialty lines, and optimizing full-stack carrier operations by migrating more business onto its own balance sheet. The company is likely not yet profitable on a consolidated basis given heavy growth investment, but unit economics are favorable — a sub-50% loss ratio and growing commission base suggest a clear path to breakeven, while the hire of CFO Ari Fischel (who helped prepare Oscar Health for IPO) signals public-market readiness. Key risks include cyber catastrophe accumulation, capacity provider withdrawal, and regulatory evolution around ransom payments and privacy laws.

{{#if:{{{bullet|}}}|* }}🔄 '''Business model.''' At-Bay operates a hybrid InsurSec model combining MGA insurance underwriting with proprietary cybersecurity services delivered through its At-Bay Stance platform, which provides continuous vulnerability scanning, managed detection and response (MDR) with 15-minute average threat containment, and AI-powered email fraud defense. Core insurance products include cyber liability, Technology E&O, and miscellaneous professional liability (MPL), the latter launched in 2022 with API-driven auto-quoting across 50+ business classes. Revenue is primarily commission-driven at an estimated 15–20% of gross written premium, supplemented by contingent commissions earned when loss ratios stay below agreed thresholds and by embedded security fees bundled into select policies.{{#if:{{{bullet|}}}||<br>}}{{#if:{{{bullet|}}}|* }}🤝 '''Distribution and capacity.''' Distribution relies on wholesale brokers (CRC, RT Specialty, AmWINS) via an online Broker Platform that earned a 93 NPS, supplemented by API integrations for programmatic quoting and an admitted cyber product available in 47 states for micro-SMEs. The capacity structure has evolved from a single carrier (HSB/Munich Re, A++ rated) to a diversified multi-carrier panel including Trisura Specialty as a fronting insurer, a captive reinsurance subsidiary, and At-Bay's own carrier — with At-Bay Specialty ranking fourth among U.S. standalone cyber insurers by direct premium as of 2024. Strategic alliances with Microsoft (2021) and CrowdStrike (2023) extend reach into SMB cybersecurity ecosystems.{{#if:{{{bullet|}}}||<br>}}

{{#if:{{{bullet|}}}|* }}📈 '''Performance drivers.''' Gross written premium grew from an estimated $40 million in 2020 to over $380 million by 2022, fueled by new customer acquisition, aggressive capacity deployment during the hard market, and steep industry-wide rate increases, while the policyholder count rose from approximately 5,000 to over 40,000 by 2025. The standout driver is technical underwriting producing gross loss ratios estimated at 30–40% against an industry peak of 75–100%, with ransomware claim frequency seven times lower than the industry average — results attributed to proactive vulnerability patching, rigorous risk selection, and efficient in-house claims handling. Operational efficiency of approximately $1.3 million in GWP per employee, achieved through automation, has driven a virtuous cycle of high submission volume and superior risk selection.{{#if:{{{bullet|}}}||<br>}}