Short answer
Many firms say they already have cyber through another commercial policy, but it is often an endorsement on a business owner’s policy (BOP) or package policy. In the cyber endorsement vs standalone comparison, endorsements often carry a smaller limit and narrower coverage. That doesn’t make them worthless, but they can differ from the breach response, ransomware, business interruption and social engineering coverage a standalone policy often includes. The actual terms depend on your policy.
How do I know if I have a cyber endorsement or a standalone policy?
Look at your declarations page. A standalone policy has its own declarations page, its own policy number and its own limit. An endorsement appears as an added form on another policy, such as a BOP, along with its own limit.
If you aren’t sure, ask your broker or agent which one you have. In the replies we get to our cyber outreach, many firms who say they have cyber find that it is an endorsement once we ask.
What gaps can a cyber endorsement have?
Endorsement terms vary widely, so read yours. Endorsements often have lower limits, and they can be narrower in what they cover. Common gaps can include:
- Low aggregate limits
- Coverage for data breach costs only
- No social engineering coverage
- No business interruption coverage
Your endorsement may include some of these and not others. Use the form itself to confirm.
What does a standalone cyber policy usually include?
In the standalone $1M quotes we ran in 2026, small firms often saw prices starting around $520 to $1,000. Those options usually included breach response outside the limit, ransomware coverage at the full $1M and an 8-hour waiting period for business interruption.
These figures come from quotes we ran, so they don’t describe the whole market. Social engineering limits in those same quotes were often lower than the headline limit, as our post on cyber policy wire fraud explains.
Example: a BOP with a cyber endorsement
Consider a hypothetical engineering firm with a BOP. The BOP includes a cyber endorsement, and the firm assumes it has cyber covered. After an email account compromise, the firm reads the endorsement and finds that it addresses certain breach costs but not a payment sent to a fraudster.
That firm would have been better served by checking the endorsement beforehand. Reviewing the wording in advance tells you what the endorsement covers while you can still make changes.
Can I have both an endorsement and standalone cyber?
Many firms can carry both, but the two policies interact. Each policy may contain an other-insurance clause that addresses which one pays first or how they share a loss. Ask your broker how the clauses in your policies would work together. Our guide to comparing cyber liability quotes explains the coverage lines to compare.
Does standalone cyber cost much more than an endorsement?
The difference is often smaller than firms expect, although it varies. Compare the endorsement’s premium and limit with a standalone quote at the same limit, and look at what each includes. This post is not a recommendation to cancel anything. Review your current coverage first, and request a policy review if you’d like help.
What to check on your declarations page
- Whether cyber appears as an endorsement on your BOP or package policy
- The cyber limit and whether it is an aggregate
- Whether the form covers social engineering, invoice manipulation and business interruption
- The retention or deductible that applies
Related questions
Is cyber included in a business owner’s policy?
Sometimes, usually as an endorsement or limited coverage. Terms vary by carrier and policy, so check your forms.
How do I know if my cyber coverage is an endorsement?
Look for a cyber form attached to another policy, such as a BOP, with its own limit on the declarations page.
Is a cyber endorsement enough for an engineering firm?
It depends on the limit, the coverage and your contracts. Compare the endorsement with a standalone quote before you decide.
Can I carry a cyber endorsement and a standalone policy?
Often yes. Ask your broker how the other-insurance clauses would apply to a loss.