A data center aisle at night, locked server racks with status lights and bundled network cabling, an operations room behind glass — cyber insurance cost

California commercial insurance

Cyber Insurance Cost in California

Search for the cost of cyber insurance and you will find averages that fit almost no one. What a California business actually pays depends on a short list of factors underwriters price — most of which the business can see in advance and several of which it can change before applying.

What Drives the Premium
Limits & Retentions
Comparing Quotes

Reviewed by David Gleason, Principal — October 11, 2026

Start Quote Now 844-978-7283

Next Level Experience. Insurance Done Right.

Request a Quote Call 844-978-7283 See FAQs

CaliforniaGeneral information only, not legal advice — illustrative scenarios and coverage, subject to change without notice. Content may be out of date or contain errors, and requirements vary by city, county, state, agency, project, contract, carrier and policy, among other factors; verifying what applies to your own situation is your responsibility. Full disclaimer

Prefer to send everything at once? Complete a streamlined submission — just needs your review. Especially worth it if your business does $2M+ in annual sales — it can meaningfully speed up carrier turnaround.

Interactive coverage guide

Build a coverage stack around how the business actually operates.

Start with the preselected industry or trade, then adjust the operational questions. The commonly considered stack updates live. Keep the coverages you want GIB to evaluate, remove ones you do not want included in your quote request, and add other available lines before continuing.

Common Starting Coverages

General LiabilityThird-party injury and property damage

What it is

General Liability commonly addresses covered third-party bodily injury, property damage and certain personal or advertising injury claims, subject to the policy.

Why businesses like yours commonly carry it

Businesses commonly use it as a starting liability policy and to satisfy customer, landlord or contract requirements.

Possible coverage gap

General Liability is not intended to replace policies for employee injuries, business vehicles, owned property, cyber events or professional errors.

Learn more about General Liability

Cyber Liability & Data BreachCyber events, data and system interruption

What it is

Cyber insurance may address certain first-party and third-party losses from covered data breaches, cyberattacks, ransomware and system interruption, depending on the policy.

Why businesses like yours commonly carry it

Most California businesses now run payments, records and customer contact through email and cloud systems, which is the exposure a cyber policy is written around.

Possible coverage gap

General Liability generally should not be assumed to address data breach response, ransomware or network interruption.

Learn more about California cyber insurance by industry

Commonly Added Based on Operations

Business Owners Policy / Commercial PackageLiability and property components evaluated together

What it is

A Business Owners Policy commonly combines liability and property coverages for eligible businesses. A Commercial Package Policy may combine multiple commercial coverage parts depending on the account and carrier.

Why businesses like yours commonly carry it

Businesses with premises, contents, inventory or other property exposures may ask GIB to evaluate whether liability and property components can be packaged where appropriate.

Possible coverage gap

Eligibility, included coverages and package structure vary by carrier. Commercial Property may also be written separately rather than as part of a package.

Learn more about Business Owners Policy / Commercial Package

Commercial Crime / FidelityEmployee theft and certain fraud losses

What it is

Commercial Crime may address certain covered theft, fraud and funds-transfer losses, depending on the selected insuring agreements.

Why businesses like yours commonly carry it

Businesses handling money, inventory, payments or account access commonly consider crime coverage.

Possible coverage gap

Property and cyber policies do not necessarily cover every employee theft or social-engineering loss.

Learn more about Commercial Crime / Fidelity

Exposure-Dependent Coverages

Employment Practices LiabilityEmployment-related allegations

What it is

EPLI may address certain covered employment-related claims such as discrimination, harassment, retaliation or wrongful termination.

Why businesses like yours commonly carry it

Businesses with employees or managers commonly consider employment-practices protection as the workforce grows.

Possible coverage gap

Workers Compensation and General Liability generally do not replace employment-practices coverage.

Learn more about Employment Practices Liability

Umbrella / Excess LiabilityAdditional limits above scheduled liability policies

What it is

Umbrella or Excess Liability may provide additional limits above identified underlying liability policies, subject to its own terms and exclusions.

Why businesses like yours commonly carry it

Businesses with larger contracts, vehicles, public exposure or higher severity potential commonly consider additional limits.

Possible coverage gap

An umbrella does not automatically broaden every exclusion or sit over every policy unless the issued terms say it does.

Learn more about Umbrella / Excess Liability

Do you have specific insurance requirements from a project, customer, vendor, landlord, lender, lease, or contract?

Yes — I have them nowOpen the Requirements Analyzer to review or upload them.Yes — but I don't have them available yetContinue now and flag the quote for follow-up.No — I don't have specific requirementsContinue directly to the quote request.

Loading quote and requirements options…

Continue With These Coverages

Educational guidance only. Results are not a coverage recommendation, quote, binder, policy interpretation, or guarantee of coverage. Actual needs, availability, forms, limits, exclusions and requirements vary. A licensed insurance professional should review the complete risk and issued policy terms.

Verified Google reviews

What our cyber insurance clients say about us

5.0 / 5from 7 Google reviews

Reviews reflect individual client experiences and are not a guarantee of coverage, pricing or results.

91 Enterprise LLC

March 24, 2026

We are using Gleason insurance for our commercial auto policy and GL policy. David is the best insurance broker I've worked with — very honest, responsive, and knowledgeable. Highly recommend.

Fito Plumbers

February 20, 2026

We have been working with David at Gleason Insurance Brokers for 8+ years. David always goes above and beyond to make sure we have the appropriate coverages. He explains everything in detail and makes sure we feel confident and understand all of our policies. He is always available and responds right away!

Barry Stay

February 17, 2026

David provides great service and I highly recommend him for your insurance needs.

Why there is no single price for cyber insurance

A cyber premium is built from the business in front of the underwriter: how much revenue runs through it, what industry it is in, how many records it holds, which security controls are in place, what has happened before and how much coverage it wants. Two businesses of the same size can see very different quotes because one has multi-factor authentication and tested backups and the other does not.

That is why this guide explains the factors instead of quoting an average. An average built from other businesses' revenue, records and controls says little about yours, and a quote built from your own submission is the only number that matters when choosing coverage. Financial firms are often priced differently because of the data and funds they handle; see cyber insurance for financial services firms.

Premium follows the business, not a published rate

Same-size businesses can price very differently

Averages mix businesses unlike yours

Your own submission produces the number that counts

The factors underwriters price

Revenue and size set the starting point, because they track how much data and money move through the business. Industry adjusts it: a medical practice, an escrow office and a restaurant each carry a different typical loss. The number and type of records held — Social Security numbers, card data, health information — shape the breach-response exposure. Prior incidents, and what changed afterward, weigh heavily.

Then come the choices the buyer makes: the policy limit, the retention, any sublimits such as social engineering, and the business-interruption waiting period. Contract requirements can set a minimum limit, and coverage parts such as dependent business interruption or invoice manipulation add to the price when included.

Revenue, size and industry set the starting point

Records held shape the breach-response exposure

Prior incidents and the fixes that followed weigh heavily

Limit, retention, sublimits and waiting period are buyer choices

How security controls change a quote

Controls are the factor a business can change fastest. Underwriters commonly ask about multi-factor authentication on email and remote access, separated and tested backups, endpoint detection, patching, phishing training and a callback procedure for payment changes. Some carriers treat multi-factor authentication and backups as threshold items, so their absence can narrow the terms offered or the number of carriers willing to quote at all.

Fixing a gap before a submission goes out is usually worth more than negotiating afterward. Free guidance from the Cybersecurity and Infrastructure Security Agency and NIST's Cybersecurity Framework 2.0, released in February 2024, describes the same controls in plain terms. Our guide to the questions on a cyber application previews what you will be asked.

Controls can change both price and the number of carriers quoting

Multi-factor authentication and backups are often threshold items

Fix gaps before the submission goes out

CISA and NIST describe the controls in plain terms

Limits, retentions and sublimits: the levers you choose

A higher retention generally lowers the premium because the business absorbs more of each loss, but it should be an amount the business could actually pay the week after an incident. A longer business-interruption waiting period does the same for outage losses. A higher limit costs more, and its value depends on whether it reaches the loss the business is most likely to have.

The social-engineering sublimit is the lever most often overlooked. It is frequently set well below the policy limit, so a business that routinely sends large payments should price that line separately rather than assume the headline limit applies to a diverted transfer.

Higher retention: lower premium, more paid per loss

Longer waiting period: lower premium, more outage absorbed

Higher limit: more premium, more protection if it reaches the loss

Price the social-engineering sublimit on its own

Where the cyber insurance market stands

The National Association of Insurance Commissioners reported roughly $9.14 billion of U.S. cyber direct written premium in 2024, about 7% below the $9.84 billion written in 2023 and the first annual decline it has recorded. The same report counted about 4.37 million policies in force and found reported claims rose almost 40%, to nearly 50,000.

Falling premium alongside rising claims is a reminder that market conditions can change from one renewal to the next. A softer year does not set any individual price, but it is a reason to market a submission to several carriers rather than accept a single figure.

About $9.14 billion of U.S. cyber premium written in 2024

Roughly 7% below 2023 — the first recorded annual decline

About 4.37 million policies in force

Reported claims rose almost 40%, to nearly 50,000

Comparing cyber quotes on more than price

Two quotes at the same premium can cover very different losses. Line them up on the policy limit and aggregate, the retention, the business-interruption waiting period, the social-engineering sublimit and any callback condition, whether dependent business interruption is included, how regulatory coverage is worded and what risk-management services come with the policy.

Then read each against the three losses most likely for your business. The cheaper quote is the better one only if it still answers those.

Limit, aggregate and retention

Waiting period and dependent business interruption

Social-engineering sublimit and any callback condition

Regulatory wording and included risk-management services

Getting a cyber insurance quote

We market cyber submissions to several carriers and compare structure as well as price. Call 844-978-7283 or request a quote with Cyber Liability selected. If your business has its own industry page in our cyber insurance directory, start there for the exposures underwriters will focus on; smaller businesses can start with small business cyber insurance.

Several carriers compared on structure and price

Industry pages show what underwriters will focus on

A small business page for companies outside those industries

Call 844-978-7283 or request a quote with Cyber Liability selected

Frequently asked questions

8 questions — start typing to filter

How much does cyber insurance cost in California?

There is no single figure. Premium depends on revenue, industry, records held, security controls, prior incidents and the limit, retention and sublimits chosen. A quote built from your own submission is the reliable number.

Why do two similar businesses get very different cyber quotes?

Usually because of security controls, records held or claims history. One company with multi-factor authentication and tested backups can price very differently from a same-size company without them.

Does multi-factor authentication lower the cost of cyber insurance?

It often affects both price and availability. Many carriers ask about it first, and some treat it as a threshold item for email and remote access.

Does choosing a higher retention lower my premium?

Generally, yes, because the business absorbs more of each loss. Choose a retention the business could realistically pay the week after an incident.

Is a cyber endorsement cheaper than a standalone policy?

Often, because it usually provides less: lower limits and fewer coverage parts. Compare what each answers, not only what each costs.

Do prior cyber incidents raise the cost of coverage?

They can. Underwriters typically want to know what happened, what it cost and what changed afterward, and a clear account of controls added since can matter as much as the incident.

Is the cyber insurance market getting cheaper?

The NAIC reported U.S. cyber premium fell about 7% in 2024, the first annual decline on record, while reported claims rose. Conditions can change at each renewal, so comparing several carriers is worthwhile.

Can I get a cyber quote if my security controls are incomplete?

Often, yes, though the terms or the number of interested carriers may be narrower. Closing gaps before applying usually improves the result.

Official resources

Verify current licensing, regulatory and program requirements directly with the responsible agency — this is general information, not legal advice, requirements change without notice, and what is summarized here may be out of date or contain errors. Confirming what applies to your own city, project, contract and policy is your responsibility.

NAIC — Report on the Cybersecurity Insurance Market (2025, 2024 data)Verified 2026-10-11 CISA — Secure Your Business (small and medium businesses)Verified 2026-10-11 NIST — Cybersecurity Framework 2.0Verified 2026-10-11 California Department of InsuranceVerified 2026-10-11

Explore Related Coverage and Resources

Related coverage

Cyber insurance quotes by industry Management liability: D&O, EPLI and crime Professional liability and errors and omissions General liability insurance in California Commercial property insurance Business owners policy for smaller operations Workers compensation insurance in California Umbrella and excess liability limits Commercial auto and fleet insurance

Guides and resources

Cyber insurance for small businesses Construction cyber liability insurance quote Cyber underwriting questions explained Insuring against wire fraud Brewery and taproom cyber coverage Cyber insurance directory by industry

Updated October 11, 2026

Next Level Experience. Insurance Done Right.

One Stop. We Shop. Real Results.

Get a Quote