Cyber Market Maturity

Cyber insurance in 2025 looks nothing like it did five years ago -- and that is mostly a good thing.

After a period of explosive growth followed by severe loss deterioration, the market forced a reset. Underwriters started asking harder questions: What is your MFA adoption rate? Do you have immutable backups? How long does your incident response team take to contain a breach?

Buyers who can answer those questions with evidence -- not just attestations -- are getting better terms. The underwriting rigor that felt burdensome during the hard market has produced a healthier risk pool, and pricing is stabilizing in segments where carriers have confidence in the risk quality.

For carriers on the underwriting side, the lesson is that cyber demands continuous monitoring, not just point-in-time assessment. The risk profile of a policyholder can change materially between renewal cycles.