Skip to content

Cyber Insurance for Small Business

One business intake for the security controls, data practices and incident history the cyber market reviews before it can quote.

We shop the market for you, no broker fees

Eight relevant markets are shown for comparison. Availability depends on the risk and location, and a logo does not imply a direct appointment.

  • Coalition

    Cyber risk and response

  • Cowbell

    Cyber insurance

  • Chubb

    Cyber enterprise risk

  • Travelers

    Cyber liability

  • Hiscox

    Small business cyber

  • Markel

    Cyber and technology risks

  • Philadelphia Insurance Companies

    Cyber security liability

  • Great American

    Cyber risk insurance

Security facts to have ready

A designated security owner

Name who is responsible for information security, even when that role belongs to an outside provider or a leader wearing more than one hat.

MFA and encryption

Confirm whether multi-factor authentication is enforced and whether sensitive information is encrypted in the environments where it is stored or transmitted.

Backups and patching

Document the real backup and patching frequencies. Those answers route the carrier's exact questions about backup type and recovery controls.

Training and response planning

Security training and a written incident-response plan show how the organization prepares people to recognize and contain an event.

How it works

  1. 10 minute form

    A few questions about your business or home.

  2. We shop the market

    We compare carriers and read the forms line by line.

  3. Quote and bind

    We pick the best policy and get you covered.

The controls behind the checkbox matter

A cyber application can feel like a security audit that showed up before breakfast. Cyber applications ask about backups, authentication and incident response because the underwriter is pricing both how likely an event is and how quickly the business can recover. The Menlo intake records those controls once and preserves the exact answers for shopping.

Backups need a real cadence

The application records how often business-critical data is backed up. A portal may then ask where the backups live and whether recovery has been tested.

MFA is broader than email

The captured question covers employees, contractors and partners. Newly revealed carrier questions are returned through Shopping Lens instead of being guessed.

Past incidents stay visible

A prior event does not disappear into a note. It triggers the carrier's own follow-up questions about what happened and what changed afterward.

Organizations this cyber intake can describe

  • Professional and service businesses
  • Retailers and restaurants
  • Construction and real estate firms
  • Manufacturers and distributors
  • Technology and digital-service companies
  • New ventures and established organizations

What changes your premium

There is no flat rate for this coverage. These are the inputs a carrier prices against, and they are the same things the quote form asks you for.

  • Industry, annual revenue and employee count
  • Past cyber incidents and claims
  • Security ownership and employee training
  • Encryption, cloud storage and MFA controls
  • Backup, patching and incident-response practices

Text us. We're by your side.

13:19
506

Menlo Agent

  1. Today, 9:41 AM
  2. Our lease for a second location starts September 1. Does our current policy cover it?
  3. Not automatically. Send me the address, square footage, operations, contents value, and move in date. I will ask the carrier to add it before you take possession.
  4. Sending the lease details now.
  5. Received. The location was added effective September 1. Your updated policy is ready.

    View updated policy

    menloinsurance.com

Questions we get asked

Why does a cyber quote ask about backups and MFA?

Those controls affect how easily an attacker can enter the environment and how quickly the business can restore critical data after an event.

What happens when a carrier asks a question that is not in the intake?

The shopping agent pauses that carrier, sends the exact question and available choices through Shopping Lens, and resumes only after the applicant answers.

Can I start if my company had a prior cyber incident?

Yes. Disclose it accurately. The carrier may ask for incident details and the controls added afterward before it can decide whether to quote.

Can you write this where my business is?

We are currently licensed in California only. Start a quote if the business or risk is in California, and we will confirm eligibility before you spend time on it.

What actually happens after I start a quote?

You answer a short set of questions, and a licensed broker at Menlo reads them, maps your operation to a class, and shops it with the carriers we are appointed with. There is no instant bind and no black box. You talk to a person before anything is quoted.

Get it placed by someone who reads the fine print

Start a quote and a licensed broker takes it from there, or talk to one now.

Talk to a licensed broker