Hong Kong Cyber Insurer Comparison: Enterprise Solutions Overview
In one sentence: the cyber insurance (Cyber Security Insurance / Cyber Insurance) carriers accessible to Hong Kong businesses fall into roughly four categories — international insurance groups, specialist cyber carriers, virtual insurers, and Lloyd's coverholders. This page lists these companies and their enterprise solutions one by one for comparison, so you know what is available in the market before arranging cover.
This page last updated: 20 October 2026 | Data collection date: 20 October 2026
Scope and Stance of This Page
- This page only compiles public data, and does not constitute insurance product sales, an offer or solicitation, nor does it rate, rank or recommend any individual company or product.
- Cyber insurance wording differs enormously, and versions of the same company at different times may also differ; the coverage highlights and limit caps listed on this page are "reference" only, and actual coverage is always governed by the policy document issued by the insurer for the specific case.
- This page focuses on enterprise (commercial) solutions; personal cyber coverage is out of scope.
- Some carriers (especially Lloyd's market members) have no direct retail channel to businesses in Hong Kong and must be arranged through an insurance broker with cyber risk experience.
1. Quick Comparison Table
The table lists each carrier's cyber insurance product, how to obtain it in Hong Kong, its main target clients and enterprise solution positioning.
| Carrier | Representative product | How to obtain in Hong Kong | Main target clients | Limit cap (reference) | Enterprise solution positioning |
|---|---|---|---|---|---|
| Chubb | Cyber ERM | Local underwriting in Hong Kong (Chubb Insurance HK) | Large to SME enterprises; layered arrangements for multinationals | Up to about US$25M per line | Global cyber, bespoke, 24/7 incident response |
| AIG | CyberEdge® | Local underwriting in Hong Kong (AIG Hong Kong) | Small to multinational enterprises; minimum annual revenue about US$100k | Up to US$50M+ for large enterprises | 13 modular covers, strong in financial and complex risk |
| Zurich | Cyber Enterprise Risk | Local underwriting in Hong Kong | Multinationals, asset management, large enterprises | Depends on risk and layering | Close relationship with Beazley (acquisition offer made in 2026) |
| AXA XL | CyberSecure | Local underwriting in Hong Kong (AXA Group) | Large enterprises, multinational groups, operational technology (OT) risk | Depends on risk and layering | Modular, strong in OT restoration and international network |
| Beazley | Breach Response (BBR) / Full Spectrum Cyber | Via Lloyd's coverholder or broker arrangement | Healthcare, finance and others holding large volumes of regulated data; also SME solution | Third-party liability up to about US$15M; SME solution cap about £5M | Specialist cyber carrier known for incident response services |
| Coalition | Active Cyber Insurance | Via appointed broker arrangement (international) | SMEs to enterprises; technology, professional services | Up to about US$15M | Insurance + proactive security monitoring (Coalition Control, MDR) |
| CNA | NetProtect Pro | Via broker arrangement | Medium to large enterprises | About US$1M–25M | Risk management tools, emphasises reputation and PR loss coverage |
| Hiscox | Cyber Insurance | Hong Kong local / Lloyd's | Small businesses, professional services (consultants, law firms, accountants) | Standard cap about US$2M (can be higher) | SME-oriented, quick online quotation |
| OneDegree × OneInfinity | Cyber Security Insurance (Enhanced) | Hong Kong virtual insurer, direct digital application | SMEs, startups, AI-adopting innovative enterprises; critical infrastructure operators | Up to US$2M | First product addressing the Critical Infrastructures Ordinance, proactively including AI risk |
| Cowbell | Cowbell Insurance | Via broker arrangement (US-based, expanding outward) | Mainly SMEs | Varies by market | AI risk scoring, flexible limits |
| Allianz Commercial | (Commercial cyber insurance) | Via broker arrangement; some markets now underwritten by Coalition | Large enterprises, multinational groups | Depends on layering | Established global commercial cyber partnership with Coalition in 2026 |
The table does not exhaust all market participants. Munich Re, Swiss Re and others mainly support capacity as reinsurers; Liberty Mutual, Tokio Marine HCC, Travelers and others also provide cyber or related liability coverage in the Hong Kong enterprise market, usually via brokers.
2. Carrier-by-Carrier
Chubb — Cyber ERM
Chubb is a long-standing participant in the cyber insurance market, underwriting cyber risk in the US, Europe and Asia since 2001, operating in Hong Kong for over ninety years, with an S&P AA- insurance financial strength rating. Its Hong Kong enterprise solution features include:
- 24/7 local-language incident hotline, supported by global and local experts;
- First-party coverage: emergency response (usually no deductible), business interruption, data and system restoration, cyber extortion;
- Third-party coverage: privacy and cyber security liability, payment card (PCI) contractual fines, regulatory fines (where legally permitted), media liability;
- Extended coverage: outage of outsourced technology suppliers, system failure (human error / programming error / power failure), cyber crime, social engineering fraud, cyber terrorism, worldwide coverage;
- Modular: clients can choose underwriting terms and limits as needed.
Suitable for: large and medium enterprises seeking global cyber coverage, bespoke solutions and emphasis on incident response services.
AIG — CyberEdge®
AIG has provided cyber risk coverage since the late 1990s; its Hong Kong enterprise solution CyberEdge® offers flexibility through thirteen coverage modules:
- First Response: 24/7 connection to a cyber response team;
- Event Management: legal, IT forensics, PR costs;
- Security & Privacy Liability: third-party liability arising from cyber security failure;
- Network Interruption (including Outsourced Service Provider OSP, System Failure);
- Cyber Extortion, Electronic Data Incident, Digital Media, Computer Crime, Criminal Reward Fund, Telephone Hacking;
- Loss Prevention Endorsement: free loss prevention services.
Suitable for: small to multinational enterprises; deeper experience with financial institutions and complex cross-border risk. Minimum annual revenue requirement about US$100,000.
Zurich — Cyber Enterprise Risk
Zurich has a local team in Hong Kong; its enterprise cyber solution focuses on multinationals and large institutions, with coverage typically spanning first-party and third-party cyber losses, business interruption and liability. Notably, Zurich made an acquisition offer for Beazley in 2026, and the relationship between the two on cyber capacity is in a state of change; businesses may watch the latest market dynamics when arranging cover.
AXA XL — CyberSecure
AXA XL is part of the AXA Group, focused on large and complex risk; its enterprise cyber solution is known for modular design, with strength in operational technology (OT) restoration and international networks. For manufacturers, energy and transport enterprises reliant on industrial systems, its OT coverage is of reference value; its incident waiting period and loss-proof requirements are stricter and should be noted at underwriting.
Beazley — Breach Response (BBR) / Full Spectrum Cyber
Beazley is a specialist cyber carrier known for incident response services. Its BBR product is handled by a dedicated BBR Services team for incident investigation, legal and forensic coordination, and provides credit monitoring and PR support. Since July 2025 it has launched Full Spectrum Cyber, integrating commonly used endorsements into the policy.
- First-party and crime coverage: cyber extortion, data restoration, business interruption (including supplier dependency interruption), electronic crime;
- Third-party: information security and privacy liability (up to about US$15M), media liability, regulatory defence and fines, payment card liability;
- SME solution: for enterprises with annual revenue below about £100M and a cap of about £5M, quick broker quotation via the myBeazley platform.
In Hong Kong, Beazley is usually arranged through Lloyd's coverholders or brokers with cyber risk experience, suitable for healthcare, finance and other institutions holding large volumes of regulated data that require sophisticated incident handling.
Coalition — Active Cyber Insurance
Coalition combines cyber insurance with proactive security technology (which it calls Active Insurance): beyond the policy, insureds gain the Coalition Control risk management platform, continuous vulnerability and dark web monitoring, AI-driven email fraud alerts, and MDR (managed detection and response, Wirespeed). Its enterprise solution covers ransomware, social engineering, funds transfer fraud, business interruption, and AI threat-related coverage.
Suitable for: SMEs to enterprises that want to "buy insurance while improving defence", especially technology and professional services. Arranged in Hong Kong via appointed brokers.
CNA — NetProtect Pro
CNA's enterprise cyber solution covers incident response, business interruption and liability coverage, with a feature in reputation and PR loss indemnity, of reference value to industries reliant on brand trust. Its underwriting has stricter requirements for security controls such as endpoint detection and response (EDR).
Hiscox — Cyber Insurance
Hiscox excels with small businesses and professional services; its cyber solution covers data breach, cyber extortion, business interruption, media liability and regulatory defence, with a standard cap of about US$2M (can be higher) and a simple online quotation process. Suitable for lower-revenue professional service firms — consultants, law firms, accountants — seeking quick cover.
OneDegree × OneInfinity — Cyber Security Insurance (Enhanced)
OneInfinity is a Hong Kong virtual insurer and one of the few cyber insurance providers in Hong Kong that directly serves enterprises through a digital application process. Its product has two features directly relevant to the Hong Kong market:
- The first cyber insurance product addressing the Protection of Critical Infrastructures (Computer Systems) Ordinance, supported by reinsurance from OneDegree together with Fronting Reinsurance and Peak Re, helping enterprises meet the statutory cyber security requirements effective 1 January 2026 through a fully digital, automated end-to-end solution;
- Proactively includes AI-related cyber risk within coverage — while many international insurers add AI exclusion clauses, OneInfinity chooses to include "network losses and third-party liability arising from the use of AI within the insured's systems, or from AI being used as an attack vector" within coverage.
Coverage includes incident response, business interruption, data restoration, and cyber security and privacy liability, with a limit up to US$2M. Suitable for SMEs, startups, innovative enterprises adopting generative AI or AI agents, and critical infrastructure operators.
Cowbell and Allianz Commercial
- Cowbell focuses on SMEs, using AI risk scoring and flexible limits; more mature in the US market, expanding internationally via brokers.
- Allianz Commercial has transferred its commercial cyber insurance business to Coalition underwriting in some markets (global partnership in 2026); businesses should confirm the specific local underwriting arrangement with their broker when arranging cover.
3. Choose by Business Need
| Your situation | Carriers to prioritise |
|---|---|
| Large multinationals needing high limits and layered coverage | Chubb, AIG, Zurich, AXA XL, CNA |
| Healthcare, finance and others holding large volumes of regulated data, valuing incident response | Beazley (BBR), AIG, Chubb |
| SMEs wanting quick cover | Hiscox, OneInfinity, Coalition, Cowbell |
| Want insurance that also provides proactive defence tools | Coalition |
| Already using or planning to use AI, concerned about AI-related cyber risk gaps | OneInfinity (proactive inclusion); also confirm AI exclusion clauses with other carriers |
| Critical infrastructure operators needing to comply with the 2026 Ordinance | OneInfinity (first matching product); also enquire with international groups for bespoke arrangements |
| Relying on industrial / operational technology (OT) systems | AXA XL |
4. Brokers and Reinsurers: How Hong Kong Businesses Usually Arrange Cover
Cyber insurance wording differs enormously; Hong Kong businesses usually arrange cover through an insurance broker with technical risk experience, rather than simply comparing prices. Major brokers have dedicated cyber insurance practices in Hong Kong, including Marsh, Aon, WTW (Willis Towers Watson), and Howden.
In addition, the cyber capacity behind many carriers is underpinned by reinsurers such as Munich Re and Swiss Re. Reinsurers' underwriting attitudes (e.g. towards AI risk, war and state action) indirectly affect the wording and premium trends of front-line policies.
The sponsoring organisation of this site, Henderson Insurance Consultants Limited (licensed insurance agency, licence FA-2958), can assist in comparing and arranging corporate coverage including cyber insurance according to the business's actual risk profile; see About Henderson Insurance Consultants.
5. Two Things Not to Look At Alone When Comparing
Whatever carrier you choose, when comparing cyber insurance a business should place the following two points on equal footing with "limit":
- Sub-limits and layered structure: under the overall limit, ransom, business interruption, regulatory fines and third-party liability each have independent caps, usually non-fungible. When comparing policies, look at sub-limits, not just the total (see Products and Coverage Structure).
- Exclusions: war and state action, prior known circumstances, failure to maintain the security level required by the policy (such as full MFA enablement), and sub-limits for business email compromise — these clauses determine whether the policy actually pays when an incident occurs.
6. Frequently Asked Questions
How many insurers offer cyber insurance in Hong Kong?
There is no official "list of cyber insurance companies" in Hong Kong. Carriers accessible to the Hong Kong enterprise market include international groups (Chubb, AIG, Zurich, AXA XL, CNA, Hiscox, etc.), specialist cyber carriers (Beazley, Coalition, Cowbell), local virtual insurers (OneInfinity), and coverholders arranged via the Lloyd's market. Some are available only via brokers, with no direct retail channel.
Is cyber insurance mandatory in Hong Kong?
No. There is currently no mandatory requirement for businesses to purchase cyber insurance in Hong Kong. However, the Protection of Critical Infrastructures (Computer Systems) Ordinance has imposed statutory cyber security duties on designated critical infrastructure operators since 1 January 2026; the Personal Data (Privacy) Ordinance also requires data users to take practicable safeguarding steps. These statutory duties indirectly raise business demand for cyber insurance, but whether to purchase it remains the business's own decision.
Can SMEs obtain cyber insurance in Hong Kong?
Yes. Hiscox, OneInfinity, Coalition, Cowbell and others offer solutions suitable for SMEs, some supporting online or digital application, and standard premiums have become affordable for SMEs with sound security posture. For most SMEs, the cost of a single uninsured incident is usually far higher than the annual premium.
If a business has commercial comprehensive insurance, is cyber risk already included?
Generally not. The property and liability coverage of traditional commercial insurance is written for the physical world; losses such as data breach, system interruption and cyber fraud usually require separate clauses or additional coverage in the policy. In recent years some policies have explicitly added AI exclusion clauses, making the "assumed covered" gap more apparent.
How does the Hong Kong market handle AI-related cyber risk?
Currently the Hong Kong market's approach to AI risk is not uniform: some carriers add AI exclusion clauses, while others (such as OneInfinity) proactively include AI-related cyber risk within coverage. Standalone artificial intelligence liability insurance products are currently found mainly in the US and Lloyd's markets, and are not an off-the-shelf product in Hong Kong. Businesses should check each policy's stance on AI individually (see Products and Coverage Structure).
7. Sources
The information on this page is compiled from each carrier's official product pages and public press releases, as well as market research, with a main reference date of 20 October 2026:
- Chubb Hong Kong cyber insurance product page (chubb.com/hk-zh)
- AIG Hong Kong CyberEdge® product page (aig.com.hk)
- Beazley Breach Response and Full Spectrum Cyber descriptions (beazley.com)
- OneInfinity cyber security insurance enhancement press release (January 2026)
- Coalition Active Cyber Insurance public materials (coalitioninc.com)
- Market research: EssFeed "Top 10 Cyber-Insurance Public Firms" (2026), Insura "Cyber Liability Insurance Guide" (2026), TrustMyIP "Cyber Insurance Cost 2026", EBActuary "Cyber Insurance Regulations and Landscape in Hong Kong"
- Hong Kong regulatory and statistics: HKCERT 2025 cyber security incident statistics, Office of the Privacy Commissioner 2025 data breach notifications, Protection of Critical Infrastructures (Computer Systems) Ordinance (Cap. 653)