IT and managed services
Insurance for MSPs and IT services companies
Managed services, security services, consulting, and staffing. Your access to client systems is the exposure most programs underestimate.
One incident, many clients
Compromised admin credential
Size cyber and E&O for an event that spreads to every client you manage, not one that stays put.
Who this is for
MSPs and MSSPs, IT consultants, cybersecurity vendors, and tech staffing firms.
First look
Privileged access to client systems, RMM tools, and subcontracted work.
Where programs go wrong
Four places a managed services program usually comes up short
One incident, many clients
A compromised RMM tool or admin credential can reach every client you manage at once. Your cyber and E&O limits need to be sized for an event that spreads, not one that stays put.
A program that describes the old company
Moving from break-fix to managed and security services changes the risk. If GL is still rated on a field repair class, or E&O doesn't name your security services, the paper doesn't match the work.
Subcontracted and white-label work
Subcontractors and resold services can put someone else's mistake on your contract. Check whether your E&O covers work done on your behalf.
Staffing exposure
Placing technical staff at client sites brings employment practices, third-party discrimination, and client property questions a standard IT program can miss.
Coverage that matters most
- Technology E&O
- Cyber
- Crime and social engineering
- Employment practices
- General liability and umbrella
- Workers' comp
Common questions
Do MSPs need both E&O and cyber?
In almost every case, yes. E&O responds when a client says your service caused their financial loss. Cyber responds to your own breach and the client data you hold. Many MSP claims touch both, so how the two fit together matters.
What do MSP client contracts usually require?
Common asks include specific E&O and cyber limits, additional insured status on GL, waivers of subrogation, and notice of cancellation. Larger clients often run your certificate through a vendor portal that checks it against their requirements.
Is security work covered under a standard IT E&O policy?
Not automatically. If you've added MSSP, SOC, or penetration testing services, make sure the policy's definition of covered services names them.
Get a straight read on your program
A 30-minute call and a one-page findings summary. No quote request, no obligation to move anything.
One useful read a month
Contracts, coverage, and risk for technology company owners and CFOs. No fluff.