What Happened

Munich Re, one of the world's largest insurers with €60.4 billion in insurance revenue in 2025, announced on Wednesday that it has agreed to acquire At-Bay, a cyber-insurance startup, for $575 million in enterprise value.

The price is a stark reset. At-Bay was valued at $1.35 billion in its last funding round in 2021, according to Calcalist's CTech. The $575 million acquisition price represents less than half that figure.

At-Bay has raised approximately $276 million since its founding in 2016. That means the $575 million exit delivers a modest return over capital invested — roughly 2x — rather than the windfall a $1.35 billion valuation once implied. The company employs about 280 people across the US and Israel and reported $278 million in gross written premiums, making it a top-10 US cyber insurer.

The deal is expected to close in Q1 2027, subject to regulatory approvals and customary conditions. At-Bay will be integrated into Hartford Steam Boiler, Munich Re's cyber-focused specialty unit, which had backed the startup since its early days.

The road to this exit was difficult. Rising interest rates and shifts in the insurance market weighed on At-Bay, CTech reported. The company laid off staff, including a large portion of its development team in Israel.

Why It Matters

This deal is a signal on two levels.

First, it confirms that the 2021 insurtech valuation peak was unsustainable. A company that raised $276 million and was valued at $1.35 billion exited for just over 2x capital invested. That echoes a wider pattern of valuation resets we've tracked — most recently, Nielsen's acquisition of DoubleVerify at half its IPO price on August 7.

Second, it reveals where large insurers believe cyber-insurance is heading. Munich Re framed the acquisition as a bet on the shift from standalone policies toward platforms that bundle insurance with security. At-Bay's model — branded 'InsurSec' — pairs cyber coverage with its own security software, continuously monitoring a customer's exposure and using that data to sharpen underwriting and prevent attacks before they happen.

Mike Kerner, a member of Munich Re's board, called At-Bay 'a perfect addition to our specialty insurance portfolio' and said he expected the business to become a strong earnings driver over time.

The strategic logic: cyber is a fast-growing but volatile line of business. A single large breach can drive heavy claims. Owning the security layer — not just the policy — is Munich Re's bet on how to profit from that risk while reducing the volatility.

Who Is Affected

Cyber-insurance startups and insurtech founders face a sobering valuation benchmark. The market is pricing deals on current revenue and unit economics, not growth narratives. A 2x return on capital invested after a decade is not the outcome most 2021-era founders raised money expecting.

Enterprise IT buyers and SMBs purchasing cyber insurance may see product changes as At-Bay is folded into Hartford Steam Boiler. The prevention-first bundle — monitoring tools plus coverage — could become more widely available, but it could also mean higher premiums or changed coverage terms.

Security software vendors competing in the SMB segment should watch whether insurance-bundled security platforms become a standard go-to-market. If Munich Re scales the InsurSec model, standalone security tools may face pressure from insurers offering 'free' monitoring as part of a policy.

Strategic Implications

For AI startup founders: If you're building in cybersecurity or adjacent spaces, expect acquirers to anchor on current revenue multiples, not 2021 growth projections. The At-Bay deal — $575M on $278M in gross written premiums — suggests insurers will pay for real premium volume and data assets, not narrative. Plan your fundraising and exit strategy accordingly.

For developers/operators building with AI APIs: The InsurSec data loop is a template worth studying. At-Bay's model uses continuous monitoring data to improve underwriting, which reduces claims, which improves margins. If you build security tooling, the question is whether your product can plug into that kind of feedback loop — because that's what insurers will pay for.

For non-technical business owners: Cyber-insurance pricing and coverage terms may shift as large insurers push prevention-first bundles. If you buy cyber coverage for your SMB, expect more vendors to bundle monitoring tools with policies. Evaluate whether the bundled security actually reduces your risk or simply adds cost to your premium.

What to Watch Next

Monitor whether other large insurers follow Munich Re's lead in acquiring insurtech security platforms at reset valuations. Also watch for regulatory approval timelines — the deal isn't expected to close until Q1 2027, and integration details remain sparse.

Frequently Asked Questions

Q: How much did Munich Re pay for At-Bay?

A: Munich Re agreed to acquire At-Bay for $575 million in enterprise value, less than half of At-Bay's $1.35 billion valuation from its 2021 funding round.

Q: Why is Munich Re buying a cyber-insurance company?

A: Munich Re is betting that owning a prevention-first security platform — not just a standalone insurance policy — will reduce cyber claims and improve underwriting profitability. At-Bay's 'InsurSec' model pairs continuous security monitoring with insurance coverage, creating a data loop that aims to prevent attacks before they result in claims.

Q: When will the At-Bay acquisition close?

A: The deal is expected to close in the first quarter of 2027, subject to regulatory approvals and customary closing conditions.