By Ryan Windt | Head of Growth Marketing | Updated June 2026 Most guidance on cyber insurance underwriting treats the application like a checklist. Turn on MFA, deploy EDR, keep backups, write an incident response plan, and you pass. The checklist is real, and you can read what underwriters verify in our breakdown of the security […]

By Ryan Windt | Head of Growth Marketing | Updated June 2026 Most cyber insurance pricing answers start and end with “it depends.” That is true, but it is not useful when you are trying to budget for coverage or sanity-check what you already pay. This page gives you a real number to work from. […]

By Ryan Windt | Head of Growth Marketing | Updated June 2026 Most businesses think about a cyberattack as something that happens to their data. The records get stolen, the systems get locked, the operation grinds to a halt for a while, and then it comes back. What far fewer businesses plan for is the […]

By Ryan Windt | Head of Growth Marketing | Updated June 2026 The Cyber Incident Reporting for Critical Infrastructure Act is now law, and its reporting timelines are not suggestions. When CISA’s final rules take effect, covered entities that experience a significant cyber incident will have 72 hours to report it to the federal government. […]

By Ryan Windt | Head of Growth Marketing | Updated June 2026 When a ransomware attack hits and the question of whether to pay becomes real, most businesses assume the decision is theirs to make. That assumption is often wrong. Cyber insurance policies contain a consent to settle clause that governs who has the authority […]

By Ryan Windt | Head of Growth Marketing | Updated June 2026 When a ransomware attack encrypts your systems or a cyber incident takes your operations offline, the financial damage doesn’t stop at remediation costs. Every hour your business can’t operate is revenue you won’t recover. Payroll continues. Rent continues. Contracts have deadlines. Customers go […]

By Ryan Windt | Head of Growth Marketing | Updated June 2026 Most security programs are built to stop attacks that arrive by email or through software. Vishing works because it arrives by phone, where there is no spam filter, no link to scan, and no attachment to detonate in a sandbox. Just a human […]

By Ryan Windt | Head of Growth Marketing | Updated June 2026 Email security has gotten significantly better at catching phishing links. Secure email gateways scan URLs, sandbox suspicious attachments, and flag known malicious domains before they reach an inbox. Attackers noticed. Quishing is the response. Instead of embedding a malicious link directly in an […]

By Ryan Windt | Head of Growth Marketing | Updated June 2026 For years, the conventional ransomware narrative positioned MSPs as collateral damage. A client gets hit, the MSP gets pulled into the response, maybe a lawsuit follows. That framing was always incomplete, and by 2025 and into 2026, it stopped being accurate at all. […]

By Ryan Windt, Head of Growth Marketing For years, multi-factor authentication was the answer. If a carrier asked whether your organization had MFA deployed, and you said yes, that was usually enough. The box was checked. The conversation moved on. That era is ending. A class of attack called Adversary-in-the-Middle phishing, or AiTM phishing, has […]

By Ryan Windt | Head of Growth Marketing | Updated June 2026 In February 2024, attackers affiliated with the ALPHV/BlackCat ransomware group accessed a single Citrix remote access portal at Change Healthcare. The portal had no multi-factor authentication. Nine days later, they deployed ransomware. What followed was the largest cyber event in U.S. healthcare history. […]

By Ryan Windt | Head of Growth Marketing | Updated June 2026 Business email compromise was already the highest-loss cybercrime category in the United States before artificial intelligence entered the picture. The FBI’s 2025 IC3 report put BEC losses at $2.77 billion across more than 21,000 complaints. That number was built largely on old-fashioned social […]

By Ryan Windt | Head of Growth Marketing | Updated June 2026 Telehealth stopped being a pandemic workaround years ago. It is now core infrastructure for behavioral health networks, primary care startups, remote patient monitoring vendors, e-prescribing platforms, and the digital front doors of large health systems. That shift created a category of company that […]

By Ryan Windt | Head of Growth Marketing | Updated June 2026 Marketing and advertising agencies sit in an unusual position when it comes to cyber risk. They are not banks. They are not hospitals. They do not handle Social Security numbers or medical records in the ordinary course of business. So the assumption at […]

By Ryan Windt | Head of Growth Marketing | Updated June 2026 Pharmacies sit at an intersection of healthcare data sensitivity, financial transaction volume, and regulatory complexity that creates a distinct cyber risk profile. They hold prescription histories, diagnoses, and medication records that are protected under HIPAA. They process payment transactions at the point of […]

By Ryan Windt | Head of Growth Marketing | Updated June 2026 Registered investment advisers and wealth management firms occupy a specific position in the financial services cyber insurance market. They hold detailed client financial data, manage access to investment accounts, and process wire transfers on behalf of clients. They are subject to SEC oversight, […]

By Ryan Windt | Head of Growth Marketing | Updated June 2026 Mental health records are among the most sensitive categories of protected health information under HIPAA. Therapy notes, psychiatric diagnoses, substance use treatment records, and medication histories carry a stigma risk that goes beyond what most other health data involves. A patient whose cardiologist’s […]

By Ryan Windt | Head of Growth Marketing | Updated June 2026 Trucking and transportation companies have become significantly more exposed to cyber risk over the past decade, and most of that exposure crept in through the back door of operational efficiency improvements. Electronic logging devices are now federally mandated and connected to cellular networks. […]

By Ryan Windt | Head of Growth Marketing | Updated June 2026 For most of the last decade, cyber underwriting focused almost entirely on what was inside your own walls: your MFA, your backups, your endpoint protection. That made sense when most attacks targeted the insured directly. It makes much less sense now, when some […]

By Ryan Windt | Head of Growth Marketing | Updated June 2026 Most controls underwriters check are about keeping attackers out. Logging and monitoring is different. It is the control that determines what happens once someone gets in, and increasingly it is the one that separates a contained incident from a catastrophic claim. When forensics […]

By Ryan Windt | Head of Growth Marketing | Updated June 2026 When a business tells a cyber underwriter “we follow NIST,” that sentence does almost nothing on its own. Underwriters do not price policies on framework names. They price on the specific controls a framework produces and on whether you can prove those controls […]

By Ryan Windt | Head of Growth Marketing | Updated June 2026 Zero trust is not a product. It is not a certification. And it is not something you either have or do not have. It is an architecture philosophy built on one principle: no user, device, or system should be trusted by default, regardless […]

By Ryan Windt | Head of Growth Marketing | Updated June 2026 Ransomware works by spreading. An attacker gains initial access through a phishing email, a compromised credential, or an unpatched vulnerability, and then moves laterally through the network looking for systems to encrypt, data to exfiltrate, and backups to destroy. The faster they can […]

By Ryan Windt | Head of Growth Marketing | Updated June 2026 Vulnerability management doesn’t generate headlines the way ransomware does. It’s not a flashy control. But ask any underwriter what they’re looking at when a claim comes in, and unpatched systems appear near the top of the list. Carriers have paid out enough claims […]

By Ryan Windt | Head of Growth Marketing | Updated July 2026 Most MSPs experience cyber insurance as a questionnaire problem. Someone spends an afternoon translating what the environment actually runs into a self-reported form, an insurer prices off those answers, and the security work your team does every day barely shows up in the […]

By Ryan Windt | Head of Growth Marketing | Updated June 2026 An MSP rolls out Microsoft Copilot for a client, tunes the permissions, and trains the staff. Three months later, the client discovers Copilot surfaced salary data and a confidential acquisition memo to employees who should never have seen them. The client’s lawyer sends […]

By Ryan Windt | Head of Growth Marketing | Updated June 2026 Co-managed IT is one of the fastest-growing service models for MSPs, and one of the murkiest from a liability standpoint. In a fully managed relationship, the lines are reasonably clear: the MSP runs the environment, and the MSP’s contracts and insurance are built […]

By Ryan Windt | Head of Growth Marketing | Updated June 2026 Most MSPs know they need Tech E&O insurance. Fewer understand what MSP-specific E&O coverage actually looks like, how it differs from the generic technology professional liability form written for software companies, and what underwriters are evaluating when they write it for a managed […]

By Ryan Windt | Head of Growth Marketing | Updated May 2026 Most MSPs shopping for cyber insurance run into the same problem: they get quotes written for generic small businesses, not for companies that hold privileged access to dozens of client environments simultaneously. For a full guide to MSP cyber insurance including pricing benchmarks […]

By Ryan Windt | Head of Growth Marketing | Updated May 2026 When an MSP applies for cyber liability insurance, underwriters are not just evaluating the MSP’s own security controls. They are evaluating the entire client base the MSP manages. For a full overview of MSP cyber insurance including pricing and what your own policy […]