Pomegra
Munich Re's $575M deal for At-Bay converts a decade-long reinsurance partnership into direct ownership of a top-10 US cyber insurer built around active security monitoring for SMBs.
Key Takeaways:
- Munich Re will pay $575M for At-Bay - a ~2x multiple on $278M in gross written premiums, but 57% below the startup's 2021 valuation of $1.35B
- At-Bay pairs cyber insurance policies with managed detection and response services for small and midsize businesses, where market penetration sits at just 10-20%
- The deal closes under Hartford Steam Boiler (HSB), Munich Re's specialty arm, which has backed At-Bay as a capacity partner since the company's founding
Lead
Munich Re Group agreed on August 19, 2026 to acquire At-Bay, a US-Israeli cyber insurtech, for $575 million in cash. The transaction is the reinsurer's largest disclosed move into primary cyber insurance, absorbing a company with $278 million in gross written premiums and a security operations layer that active monitors policyholders rather than waiting for claims. The deal is expected to close in the first quarter of 2027, pending regulatory approvals.
At-Bay's last private valuation was $1.35 billion, set after a 2021 Series D fundraise. The $575 million exit price, while substantial in absolute terms, sits well below that figure - a gap that tells a broader story about the insurtech market more than the company's performance.
Why Did Munich Re Pay $575M for a Discounted Unicorn?
The buyer is not making a bet on an emerging platform. It is acquiring a functioning underwriting and technology business at a moment when the insurtech market has repriced sharply from its 2021 peak. Munich Re's Hartford Steam Boiler (HSB) unit has served as At-Bay's primary reinsurance capacity provider since the company's founding - meaning Munich Re already holds years of granular loss data on the portfolio it is now buying outright. Paying 2x gross written premiums for a book it already partially backs is, in one framing, simply converting existing exposure from contingent to owned.
The more strategically significant asset is At-Bay's security infrastructure. At-Bay continuously scans policyholders' external attack surfaces, runs managed detection and response services, and can intervene before a covered incident occurs. Traditional carriers underwrite risk and pay claims. At-Bay attempts to reduce claim frequency by staying inside the loop operationally. Owning that capability - rather than reinsuring a carrier that runs it - changes Munich Re's position in the cyber loss chain.
What Does At-Bay Actually Build?
At-Bay was founded in 2016 by Rotem Iram, a former captain in Israel's Intelligence Unit 8200, alongside Roman Itskovich, Etai Hochman, and Tilli Kalisky. Iram has described the model as InsurSec - the integration of insurance underwriting with active cybersecurity services, targeting a customer segment that large carriers have historically underserved.
The focus is deliberate. Cyber insurance penetration among large enterprises runs between 60% and 70%. Among small and midsize businesses, that figure is 10-20%. At-Bay has built one of the largest primary SMB cyber books in the US market, achieving a top-10 ranking by premium volume. The company currently employs approximately 280 people split between US and Israel offices.
Why Did the Valuation Fall So Far?
At $575 million, the exit price is 57% below At-Bay's 2021 high-water mark. That compression reflects a sector-wide reset, not an isolated failure. Insurtech valuations from 2020 to 2022 were benchmarked against public comparables trading at elevated revenue multiples; when those comps fell from 2022 onward, private marks followed. Simultaneously, reinsurance capacity for cyber tightened as loss activity climbed - squeezing margins for MGAs and insurtechs reliant on external capital.
At-Bay's underlying premium growth suggests the business has expanded substantially since its Series D. But investors and employees holding equity struck at $1.35 billion face a materially different return profile than those rounds implied.
Structure and Integration
At-Bay will operate under Hartford Steam Boiler (HSB), Munich Re's specialty insurance unit within its Global Specialty Insurance business. The existing relationship between HSB and At-Bay simplifies the integration path - this is not a turnaround scenario, and the deal does not fit the profile of an acquihire. Munich Re is integrating a functioning underwriting platform, a security operations capability, and a distributed SMB distribution network into a larger institutional structure.
No leadership transition has been disclosed as part of the transaction announcement.
Outlook
The At-Bay acquisition signals that major reinsurers are prepared to pay for primary cyber distribution at scale, even at valuations well off peak. For Munich Re, the deal locks in a growing SMB footprint at a moment when cyber insurance demand is expanding and most small businesses remain without coverage. The integrated underwriting-and-security model is still relatively unproven across a large, diverse book - but Munich Re now owns the largest institutional experiment testing whether it works.
The deal price of 2x gross written premiums sets a visible market reference point for other cyber MGAs and insurtechs evaluating strategic exits over the next 12 to 24 months.
