Cyber Insurance Premium Estimator
Estimate your organization's annual cyber insurance premium based on revenue, industry risk profile, data sensitivity, security posture, and claims history.
Your organization's total annual revenue in US dollars.
Industries handling sensitive data or critical infrastructure carry higher premiums.
Total PII, PHI, PCI, or other sensitive records stored or processed.
Maximum payout limit per policy period (e.g. $1M, $5M, $10M).
Self-assessed score: MFA, encryption, EDR, patching, backups, training, IR plan, etc.
Prior claims significantly increase premiums due to elevated risk profile.
Higher deductibles reduce premiums. Typical range: $5,000–$100,000.
Formula & Methodology
Annual Premium = Base Rate × Coverage Factor × Records Factor × Industry Multiplier × Security Multiplier × Claims Multiplier × Deductible Credit
- Base Rate = max(Revenue × 0.001, $500) — approximately 0.10% of annual revenue, floored at $500.
- Coverage Factor = (Coverage Limit / $1,000,000)0.65 — non-linear scaling reflecting that larger limits are not proportionally more expensive due to loss probability distributions.
- Records Factor = 1 + (Records / 1,000,000) × 0.5 — each additional million sensitive records adds 50% to the exposure component.
- Industry Multiplier = 0.8 (Low Risk) to 2.0 (Critical Risk) — reflects sector-specific breach frequency and severity data.
- Security Multiplier = 1.5 − (Score / 100), clamped [0.40, 1.60] — a score of 100 yields a 60% discount; a score of 0 yields a 60% loading.
- Claims Multiplier = 1.0 (no claims) to 2.0 (3+ claims) — prior losses are the strongest predictor of future losses.
- Deductible Credit = 1 − min(Deductible / Coverage, 0.40) — higher self-retention reduces insurer exposure, capped at 40% credit.
- Rate-on-Line (ROL) = Premium / Coverage × 100 — typical cyber ROL ranges from 1%–15% depending on risk profile.
Assumptions & References
- This tool is for educational and planning purposes only and does not constitute an insurance quote or offer.