Resilience, a cyber insurer that also offers policyholders services for defending against ransomware, raises a $80M Series C from General Catalyst and others
Kyle Alspach / VentureBeat : Source: Resilience Insurance .
Context & Ripple Effects
Resilience's $80M Series C lands mid-boom: just months earlier, rival At-Bay closed At-Bay's $185M Series D at a $1.35B valuation explicitly riding the global ransomware wave. The two rounds mark the same thesis — cyber insurance is where ransomware economics get priced — but Resilience adds a twist by selling policyholders active ransomware defense services alongside coverage.
The bet paid forward on the corpus timeline: two years later Resilience raised a $100M Series D built around AI that analyzes policyholders' systems to determine risk, pushing total funding past $225M. This Series C is the bridge between 'insurer with services' and 'underwriter that measures your security posture directly.'
First-order effects
- Resilience gains the capital to scale a dual-revenue model — premiums plus paid defense services — while General Catalyst deepens its position in a cyber insurance category it now backs from both sides of the At-Bay/Resilience split.
Second-order effects
- At-Bay and other carriers face pressure to bundle prevention services of their own, since a policy that ships with ransomware defense competes on loss reduction, not just price.
- Dedicated ransomware-defense vendors like Halcyon and Mimic — each later raising $50M rounds — find insurers becoming both a distribution channel and a competitor for the same security budget.
Third-order effects
- If underwriting keeps migrating toward measured policyholder security posture — the direction Resilience's AI-driven Series D points — insurance shifts from transferring breach losses to pricing and shaping them, pulling incident-response capability (the space IBM entered with its Resilient Systems acquisition) inside the carrier relationship.
The trend: Cyber insurance is consolidating into a carrier-plus-security-services model where the insurer underwrites, sells, and partly delivers ransomware defense.