Cybersecurity Firm & MSSP Insurance Coverage Checklist
The coverages a cybersecurity firm & mssp business may carry — core, prevalent, and situational — why each matters, and the gap most often missed.
Pull out your current policy and check the box next to any coverage you can confirm is already in place — anything unchecked is worth a quick conversation with your advisor. Coverage checklist for MSSPs, MDR and SOC providers, penetration testers, and security consultants. Priorities reflect typical exposure for this class; confirm against your actual services and clients.
Tick each coverage you can confirm you carry — anything left unticked is a good question for your next policy review.
| Have it? | Coverage | Why this business needs it | Priority |
|---|---|---|---|
| Technology E&O | Covers client and insurer claims that you missed an alert or failed to run a promised control. | Core | |
| Cyber Liability | Covers an attack on your own systems, including one that spreads to clients. | Core | |
| Contingent / Network Security Liability | Covers claims when your tools or access are used to attack clients. | Core | |
| General Liability | Covers office premises and on-site client work. | Core | |
| Workers' Compensation | Covers analysts and field technicians. | Core | |
| Employment Practices Liability | Covers claims from staff in a tight hiring market. | Prevalent | |
| Crime / Social Engineering | Covers wire fraud and funds transfer fraud against you or clients' funds you control. | Prevalent | |
| Directors & Officers Liability | Covers leadership in investor and regulatory suits. | Situational | |
| Umbrella / Excess E&O | Adds limits when a single incident affects many clients. | Situational |
The coverage gap most often missed
The gap most often missed by security providers is a claim from a client's insurer. After paying a ransomware loss, insurers can sue the security vendor to get their money back, as Chubb's ACE did in 2025 against an MDR provider that rated an attack only moderate. Confirm your E&O covers subrogation claims, write down who owns each control in every contract, and require clients to carry their own cyber insurance.
Send us the checklist and we'll review your cybersecurity firm & mssp coverage line by line, then market it across multiple carriers that compete for your account.
Related: Cybersecurity Firm & MSSP Insurance · Cybersecurity Firm & MSSP Supplemental (apply) · All coverage checklists
Frequently asked questions
What insurance does a cybersecurity firm & mssp business need?
The core coverages for a cybersecurity firm & mssp business are Technology E&O, Cyber Liability, Contingent / Network Security Liability, General Liability, Workers' Compensation. This checklist also lists the prevalent and situational coverages worth considering, with a plain-English note on why each matters.
Is this checklist insurance advice?
No. It is a free educational tool to help you have a more informed conversation with a licensed professional. It affords no coverage and is not insurance, legal, or financial advice — only your actual policy language governs what is and isn't covered.
Can Cory Washington & Co. review my cybersecurity firm & mssp coverage?
Yes. Share your checklist and we'll review your program line by line, market your account across multiple carriers, and explain the trade-offs in plain English. Cory Washington & Co. LLC is licensed in all 50 states.
This checklist is a free educational tool from Cory Washington & Co. to help you review your own coverage and have a more informed conversation with a licensed insurance professional. It is general information only — not insurance, legal, or financial advice, and not a recommendation to buy, change, or cancel any policy. Coverage terms, availability, limits, and requirements vary by policy, carrier, and state, and only the language in your actual policy governs what is and isn’t covered. Checking or leaving blank any item above does not indicate that you are adequately insured or under-insured. Using this checklist does not create a client, agency, or fiduciary relationship. Always consult a licensed professional about your specific situation.