The cyber insurance market in mid-2026 isn’t the same one brokers navigated 18 months ago. Rates have softened in some segments and hardened in others. Coverage forms are tightening. Carriers are watching new risk categories.
If you placed cyber policies in 2024 or early 2025 and haven’t revisited them, your clients may be paying for coverage that no longer matches the risk.
Here’s the mid-2026 picture.
Pricing Has Bifurcated
The blanket “cyber is up 30%” narrative is dead. In 2026, pricing depends heavily on:
- Revenue band. Mid-market accounts ($50M-$500M) are seeing flat to slightly down renewals. SMB and large enterprise are seeing modest increases.
- Industry. Healthcare, manufacturing, and construction remain high-risk categories with premium pressure. Professional services and SaaS are seeing relief.
- Security posture. Carriers are still rewarding strong controls — MFA, EDR, immutable backups, incident response plans. The discount gap between well-prepared and poorly-prepared accounts is widening.
What this means for brokers: a quote that worked six months ago may be too high now — or too low. Run a fresh market check on every renewal.
Coverage Forms Are Tightening
Two changes brokers need to watch:
Sublimits are creeping back in. After several years of carriers expanding coverage, 2026 has seen a quiet return of sublimits on ransomware payments, social engineering, and vendor business interruption. Some carriers are also reintroducing co-insurance on these coverages.
War exclusions are being tested. The NotPetya-era “act of war” exclusion is back in the news thanks to ongoing state-sponsored cyber activity. Carriers are clarifying — and in some cases narrowing — how they apply these exclusions.
What this means for brokers: the difference between a “good” cyber policy and a mediocre one in 2026 is in the form, not the limit. Read every endorsement.
The Risks Carriers Are Watching Now
Three categories are driving underwriting scrutiny in mid-2026:
1. AI-related liability. Clients using AI tools (especially customer-facing) are getting pointed questions about model governance, data handling, and bias coverage. Few carriers have a clean answer yet.
2. Supply chain and vendor risk. After a year of high-profile vendor compromises, carriers want to see named-vendor coverage and contractual indemnity language. Clients without it are getting capacity reductions.
3. Deepfake and social engineering 2.0. Synthetic voice and video fraud has moved from “rare” to “weekly incident.” Carriers are tightening social engineering sublimits and requiring pre-event training attestations.
What Top Brokers Are Doing in 2026
The brokerages winning cyber placements right now share three moves:
They’re doing mid-year cyber reviews
Not waiting for renewal. Mid-year check-ins catch gaps when there’s time to fix them — and they generate revenue.
They’re building carrier relationships across the market
Clients want options. Brokers who only quote one or two carriers are leaving money on the table and overpaying their clients.
They’re documenting cyber conversations
Every recommendation, every declined coverage, every limit discussion — documented. That’s how E&O exposure stays low.
The Bottom Line for Brokers in H2 2026
The cyber market is still favorable for most accounts. But the brokers winning now are the ones reading the form, asking the hard questions, and treating every cyber policy like a custom placement — not a commodity sale.
The agencies that treat cyber as a strategic line will pull ahead in 2026. The ones treating it as a checkbox will watch their retention numbers slide. Book a Free Consultation