Cyber Insurance Limit Calculator How much cyber insurance do you need?
Our free cyber insurance limit calculator estimates what a serious cyber event could cost your business, including breach response, business interruption, and ransomware, and recommends a limit based on your revenue, your data, and your contracts.
-
Based on current breach dataUses IBM and Sophos 2025 cost figures, with every assumption shown.
-
Completely privateRuns in your browser. Nothing is sent unless you ask a broker to review your results.
-
Limit report PDFShare it with leadership, your board, or your broker.
Calculate how much cyber insurance you need
Three short steps. Have your annual revenue and a rough count of the personal records you hold. “Not sure” is fine for anything else.
Loading the Cyber Insurance Limit Calculator… If it doesn’t appear, call (855) CUT-RISK or email [email protected].
Four costs decide the right limit
A cyber limit has to cover the whole event, not just the ransom. A ransomware attack with data theft can trigger all four of these costs at once, and they all draw from the same aggregate limit.
Data breach response and liability
Notifying affected people, credit monitoring, legal and regulatory costs, and claims. This grows with the number and sensitivity of the records you hold.
Business interruption
Income lost while systems are down, plus extra expenses to keep operating. This grows with your revenue and how much of it depends on technology.
Incident response and restoration
Forensic investigators, breach counsel, crisis communications, and rebuilding systems and data.
Ransomware and extortion
Ransom demands and negotiation. Demands are typically higher for larger companies. Many policies cap ransomware below the full limit; see how ransomware sublimits work.
Contract requirements
Client contracts often set a minimum limit. Your limit should never be lower. Check yours with our Cyber Insurance Contract Checker.
Technology E&O
If you provide technology services, client claims for your errors or outages fall under Technology E&O, which may need its own limit.
The assumptions behind your number
Every estimate uses published industry data and the answers you give. Nothing is hidden.
| Cost | How it’s estimated |
|---|---|
| Data breach | Starts from IBM’s 2025 average of $160 per customer record. We count 70% of that as the share cyber policies typically pay, since most lost-business costs aren’t covered. The per-record cost then steps down for larger breaches, because IBM’s average comes from breaches of about 3,000 to 114,000 records. Health and biometric data are weighted higher, and contact-only data lower. |
| Business interruption | Your daily revenue × the share that depends on your systems × the outage length you choose. In 2025, Sophos found 53% of ransomware victims fully recovered within a week and 18% took more than a month. |
| Incident response | Scaled to your revenue, from $150,000 for businesses under $10 million to $2.5 million for those over $1 billion. Sophos reports an average recovery cost of $1.53 million in 2025. |
| Ransomware | Scaled to your revenue using Sophos 2025 data: median demands under $350,000 for organizations with $250 million or less in revenue, and $5 million for those over $1 billion. |
| Recommended limit | The estimated total, or your highest contract requirement if that’s higher, rounded up to the next common policy limit. |
Sources: IBM Cost of a Data Breach Report 2025; Sophos State of Ransomware 2025.
Cyber insurance limit questions, answered.
Have a question that isn’t here? Ask our team.
How much cyber insurance do I need?
Enough to cover a serious event from start to finish: breach response and liability, business interruption, incident response, and ransomware, all under one aggregate limit. The right amount depends on your revenue, how many personal records you hold, how much of your business stops when systems go down, and any limits your client contracts require. Our cyber insurance limit calculator estimates each of these and recommends a limit.
Is $1 million in cyber insurance enough?
For some small businesses with limited data, yes. But many businesses find a single serious event, such as ransomware with data theft, can exceed $1 million once breach response, downtime, and legal costs are added together, and client contracts often require higher limits.
How does the cyber insurance limit calculator work?
It estimates four costs using IBM’s 2025 Cost of a Data Breach Report, Sophos’s 2025 State of Ransomware report, and your answers about revenue, records, and downtime. It adds them up, compares the total with any contract requirement, and rounds up to a common policy limit. Every assumption is shown on the page and in your report.
Are my answers saved?
No. The calculator runs entirely in your web browser, and your answers are not saved or sent to us. If you choose Get Quotes for This Limit, your answers are passed to our application on your device so you don’t have to re-enter them. If you ask a broker to review your results, a summary of your results and your PDF report are sent with your name and contact details through our secure form so we can review them before we call.
Does a higher cyber limit cost much more?
Usually less than you’d expect. Each additional million of limit, often written as an excess layer, typically costs less than the first million because it only pays after the underlying limit is used. Pricing depends on your business and security controls and is subject to insurer underwriting.
Need more limit than one insurer will write?
We build primary and excess cyber towers for businesses of all sizes, including complex and high-limit risks.
The Cyber Insurance Limit Calculator is an educational tool. Its estimates are based on industry averages and your answers, and actual losses vary widely. It does not provide a coverage recommendation for a specific policy, a quote, or legal advice. ComplexCyber.com is operated by Cyber Data Risk Managers LLC, an independent insurance brokerage. Insurance availability, eligibility, terms, limits, and pricing are subject to insurer underwriting and approval. No coverage is bound through this website. Privacy Policy