Cyber Insurance Providers UK 2026

This directory lists UK insurers and specialist underwriters that provide cyber insurance for businesses, covering data breaches, ransomware, and business interruption from cyber events. Entries are listed alphabetically and were checked on the FCA Register in June 2026; this is a reference list, not a ranking or recommendation. Kael Tripton does not provide quotes, does not route enquiries to brokers, and does not earn commission from any firm mentioned.

How this directory is compiled

This directory lists insurers and underwriters active in UK cyber insurance, sorted alphabetically with no ranking implied. Inclusion is based on a firm being an FCA-authorised insurer, or a specialist cyber underwriter operating in the UK market, drawn from the FCA Register and the firms' own material.

FCA reference numbers are shown where independently confirmed on the FCA Register at register.fca.org.uk, accessed June 2026; specialist underwriters that operate through brokers or the Lloyd's market are marked for verification, as their cover is placed through an authorised intermediary or managing agent. The directory does not rate, rank, or recommend any provider.

Provider directory

Reference numbers for the general insurers and the broker were confirmed on the FCA Register, accessed June 2026; specialist underwriters are marked for verification because their cover is placed through brokers or the Lloyd's market.

Profile per provider

Hiscox

Authorised under reference 113849, Hiscox is a significant player in UK cyber and data insurance for SMEs and larger businesses, pairing cover with risk management support.

Aviva, AXA, Zurich, RSA, QBE

These FCA-authorised insurers, confirmed under references 202153, 202312, 203093, 202323, and 202842, offer cyber cover within their commercial ranges, generally arranged through brokers and, in some cases, directly.

CFC Underwriting

CFC is a London-based specialist cyber underwriter with a strong SME and mid-market presence, known for fast claims handling. Cover is placed through brokers, so confirm the underwriter and your broker on the FCA Register.

Beazley

Beazley underwrites cyber insurance across SME to enterprise risks and is typically accessed through brokers. Confirm the authorised entity and managing agent on the FCA Register and within the Lloyd's market.

Coalition and Markel

Coalition pairs cyber cover with active risk monitoring for SMEs and the mid-market, while Markel offers cyber products for small businesses and start-ups. Confirm each authorised entity on the FCA Register.

How to verify a provider's authorisation

The FCA Register at register.fca.org.uk is the primary check. Search the insurer or broker by name or reference number to confirm authorisation and permitted activities. Because much cyber cover is placed through brokers or the Lloyd's market, confirm both the broker and the underlying underwriter or managing agent.

Companies House provides a cross-check on legal status. The Register confirms authorisation but not the quality of an insurer's incident response, which is central to cyber cover, so review the policy wording, the incident response panel, and the security conditions the insurer requires. The NCSC's cyber insurance guidance is a useful neutral reference when assessing a policy.

How to compare providers in this category

Match the provider to your size and sector, since some specialise in SMEs and others in enterprise risk. Compare the core sections, data breach response, business interruption, cyber extortion, and third-party liability, and the limits and sub-limits for each, rather than the base premium alone.

Check the security conditions the insurer requires, such as multi-factor authentication and tested backups, because these affect both eligibility and claims. Confirm the quality and availability of the incident response service. Then verify the provider and any broker on the FCA Register, and use the Financial Ombudsman Service for eligible disputes if a claim is declined.

It is also worth understanding how this market is structured before approaching it. A large share of UK cyber risk is written either by specialist underwriters or in the Lloyd's market, and accessed through brokers rather than bought directly. This means the named brand on a policy, the underwriter behind it, and the broker arranging it can all be different firms, each with its own role. A broker with cyber expertise can compare these providers, negotiate the security conditions, and explain the sub-limits and exclusions that vary most between policies, which is why many businesses use one for this class of cover. Whichever route you take, the key checks remain the same: confirm authorisation, read the wording, and meet the conditions.

Frequently asked questions

Who provides cyber insurance in the UK?

The market includes large general insurers such as Aviva, AXA, Hiscox, Zurich, RSA, and QBE, alongside specialist cyber underwriters like CFC, Beazley, Coalition, and Markel, many accessed through brokers.

What does a cyber insurance provider cover?

Cover typically includes data breach response, business interruption from a cyber event, cyber extortion, and first and third-party losses, supported by incident response. Limits and exclusions vary by provider and policy.

Are specialist cyber underwriters FCA-regulated?

Yes, the cover must be provided through FCA-authorised firms, though specialist underwriters often operate via brokers or the Lloyd's market. Confirm the authorised entity and any broker on the FCA Register.

How do I choose a cyber insurance provider?

Match the provider to your size and sector, compare the core cover sections and limits, check the security conditions required, and assess the incident response service. Verify the provider on the FCA Register before buying.

How do I verify a cyber insurer?

Search the firm on the FCA Register at register.fca.org.uk, and for broker-placed or Lloyd's market cover, confirm both the broker and the underwriter or managing agent. Cross-check legal status on Companies House.

What if my cyber insurance claim is rejected?

Use the insurer's internal complaints process first. If you remain dissatisfied and are eligible, you can refer the complaint to the Financial Ombudsman Service for a free, independent review.