Skip to main content
Calcimator

Cyber Insurance Calculator

Estimate cyber liability insurance premiums based on revenue, data records, security posture, and industry risk.

About this calculator

This calculator estimates a cyber liability premium by starting from a base rate of $1,500 per $1 million of Annual Revenue, then multiplying that base by four risk factors: how many sensitive records you store, your security maturity, your industry's typical exposure, and how large a coverage limit you're buying. Annual Revenue is floored at $100,000 for this calculation's purposes, representing a minimum premium baseline -- Annual Revenue entries from the declared minimum of $50,000 up to $100,000 all price identically, since insurers typically apply a minimum premium regardless of how small the business is. Records Stored moves in steps rather than continuously -- the risk multiplier jumps from 1.0x at under 10,000 records to 1.3x, 1.8x, and finally 2.5x at the 1 million+ tier, since insurers price large PII/PHI holdings as a much bigger single-incident liability, not a proportionally scaling one. Security Posture applies a matching multiplier from 0.7x (strong: MFA, encryption, staff training) up to 2.0x (weak), reflecting that underwriters price weaker security as meaningfully higher risk.

Industry applies its own fixed multiplier -- healthcare (1.8x) and finance (1.6x) price highest, reflecting the regulatory and breach-notification exposure those sectors carry, while manufacturing (1.0x) prices lowest. Estimated Breach Cost is a SEPARATE calculation from the premium: it multiplies your records stored (capped at 100,000 for this estimate) by $164 per record, a fixed reference figure matching IBM's 2022 Cost of a Data Breach Report average cost per compromised record (subsequent IBM reports have put the figure somewhat higher, so treat this as a conservative, not current, estimate). Notably, Estimated Breach Cost does not factor in your Security Posture or Coverage Limit at all -- it's a flat records-based exposure estimate meant to help you judge whether your chosen coverage limit is adequate, not a premium input.

Inputs

$
$

Results

Monthly Premium

$390.00

Estimated Breach Cost

$8,200,000.00

≈ 20 average U.S. homes

Annual Premium$4,680.00
Coverage Limit$1,000,000.00
Avg Cost per Breached Record$164.00
Coverage AdequacyUnderinsured by $7,200,000
How to Use This Calculator
  1. Enter your company's annual revenue.
  2. Input the number of customer records containing sensitive data (PII, PHI, PCI).
  3. Select your Security Posture (Strong to Weak) -- this swings the premium 0.7x-2.0x, the second-largest factor after industry.
  4. Select your industry sector and set your desired Coverage Limit (limits above $2M and $5M raise the premium).
  5. Review the estimated Monthly and Annual Premium (point estimates, not a range), and compare Estimated Breach Cost against your Coverage Limit to judge Coverage Adequacy.
  6. Combine the estimate with a cybersecurity risk assessment to set appropriate coverage limits.

How the result changes with Annual Revenue

Annual RevenueMonthly PremiumEstimated Breach Cost
$1,000,000.00$195.00$8,200,000.00
$1,500,000.00$292.50$8,200,000.00
$3,000,000.00$585.00$8,200,000.00
$5,000,000.00$975.00$8,200,000.00

What each input means

Annual Revenue
Your company's annual gross revenue.
PII/PHI Records Stored
Number of personally identifiable or protected health information records.
Security Posture
Your organization's cybersecurity maturity level.
Industry
Your business industry sector.
Coverage Limit
Maximum coverage limit for cyber incidents.

What each result means

Coverage Adequacy
Whether your Coverage Limit meets or exceeds Estimated Breach Cost.

How this is calculated

Worked example, using the default values

  1. Identify Input Parameters
    4 parameters
    Annual Revenue = 2000000, PII/PHI Records Stored = 50000, Security Posture = 1, Industry = 0 = 5 input(s) provided
  2. Calculate Monthly Premium
    Monthly Premium
    390 = $390
  3. Calculate Estimated Breach Cost
    Estimated Breach Cost
    8200000 = $8,200,000
  4. Calculate Annual Premium
    Annual Premium
    4680 = $4,680
  5. Calculate Coverage Limit
    Coverage Limit
    1000000 = $1,000,000

Engine last updated . Checked against 2 independently-derived tests — how we verify calculators. Built by Paul Gunder, a software engineer, not a licensed financial, medical, or legal professional.

Frequently Asked Questions

Does improving my security posture lower my Estimated Breach Cost?

No -- Estimated Breach Cost is calculated purely from Records Stored (capped at 100,000) multiplied by a fixed $164-per-record figure; Security Posture never enters that calculation. Security Posture does lower your estimated Monthly and Annual Premium substantially, from a 2.0x multiplier at "Weak" down to 0.7x at "Strong," but the breach-cost exposure estimate itself stays the same regardless of how strong your security is.

Why does my premium jump sharply once I pass certain record counts?

Records Stored uses a stepped, not continuous, risk multiplier: 1.0x under 10,000 records, 1.3x from 10,000 to just under 100,000, 1.8x from 100,000 to just under 1 million, and 2.5x at 1 million records or more. Crossing one of those thresholds jumps the multiplier immediately rather than scaling gradually, so a company just above a threshold pays noticeably more than one just below it, even with nearly identical record counts.

Does raising my coverage limit change the Estimated Breach Cost figure?

No -- Coverage Limit and Estimated Breach Cost are calculated independently of each other. Estimated Breach Cost is meant to be a reference point you compare AGAINST your chosen Coverage Limit (to judge whether the limit is adequate for your exposure), not an input that Coverage Limit itself feeds into or vice versa. Coverage Limit does raise your premium once it crosses the $2 million and $5 million tiers, applying a 1.2x and 1.5x multiplier respectively.

What industry factors into this estimate, and why?

Industry applies a fixed multiplier reflecting typical breach-notification and regulatory exposure by sector: healthcare carries the highest multiplier (1.8x), followed by finance (1.6x), retail (1.3x), tech (1.2x), and manufacturing, the lowest, at 1.0x (the model's baseline). Healthcare and finance both handle data that triggers costly regulatory notification requirements when breached, which underwriters price into the premium.

The questions that sit next to this one — chosen by subject, including calculators filed under a different category.

More in Insurance.