Willis (NASDAQ:WTW) has expanded its CyMax Facility, a primary and excess cyber insurance facility for SMEs and middle market companies across EMEA. The renewed offering adds panel-based capacity with AXA XL, Beazley, HDI Global and Markel, higher limits, broader eligibility and faster placement.
Key features include a one-page application, pre-agreed pricing grids, eligibility for companies with turnover up to €/CHF500m, proprietary CyCore wordings aligned with GDPR, NIS2 and DORA, and access to specialist pre- and post-breach cyber services.
The stock moved +5.2% in the session following this news. A strong positive reaction aligns with WTW...
Analysis
The stock moved +5.2% in the session following this news. A strong positive reaction aligns with WTW’s push into cyber solutions, following prior product launches. Investors may focus on broader EMEA reach and higher limits, while future risks include execution challenges and competition in SME cyber coverage.
Key Figures
Turnover eligibility cap:€/CHF500mApplication form length:One-pageUnderwriting questions:6–8 questions
3 metrics
Turnover eligibility cap€/CHF500mMaximum turnover for companies eligible for the CyMax Facility
Application form lengthOne-pageCyber Application Form for accessing CyMax Facility coverage
Underwriting questions6–8 questionsShort eligibility questionnaire for CyMax Facility applicants
Global study on AI, employee experience and business performance metrics.
24h Move is the share-price change in the day after each event; other market factors may also have contributed.
Pattern Detected
Recent WTW news often sees mixed reactions, with several positive product or data releases followed by share price declines.
Key Terms
ransomware, social engineering, contingent business interruption, gdpr, +2 more
6 terms
ransomwaretechnical
"exposures ranging from data breaches and ransomware to supply chain risks"
Ransomware is malicious software that locks or encrypts a company’s computer files and systems, then demands payment for their release — like a thief changing the locks on a business and asking for a ransom. It matters to investors because attacks can halt operations, trigger large cleanup costs, damage customer trust, lead to regulatory fines or legal claims, and reduce future revenue, all of which can hurt a company’s financial value.
social engineeringtechnical
"cover for evolving threats such as social engineering, telephone hacking and invoice manipulation"
Social engineering is the practice of manipulating people into revealing confidential information, granting access, or taking actions that compromise security, often by posing as a trusted person or using urgent, persuasive stories. For investors it matters because these scams can lead to direct financial loss, theft of sensitive corporate data, disrupted operations, or damage to a company’s reputation — similar to a con artist who tricks a business into handing over its keys.
contingent business interruptiontechnical
"business interruption and contingent business interruption, regulatory action, social engineering"
Contingent business interruption is insurance that pays for a company’s lost revenue when a disruption happens not to the company itself but to a key supplier, customer, or service provider whose outage prevents the company from operating—think of it as covering the ripple effect when a supplier’s shutdown stops your factory. Investors care because this protection can preserve cash flow and earnings after external shocks, reducing downside risk to valuation and creditworthiness, though coverage terms and claim outcomes can be complex.
gdprregulatory
"CyCore Primary and Excess wordings, aligned with GDPR, NIS2 and DORA"
General Data Protection Regulation is a law that sets rules for how organizations must collect, store and use personal data about people, and gives individuals rights over that data. It matters to investors because noncompliance can lead to large fines, higher operating costs and damaged reputation, while strong compliance can be a competitive advantage—think of it as a strict safety code for handling customer information.
nis2regulatory
"CyCore Primary and Excess wordings, aligned with GDPR, NIS2 and DORA"
NIS2 is a European Union cybersecurity law that sets mandatory rules for how many businesses and public organizations must protect their networks, report cyber incidents, and undergo checks. Think of it as a requirement to install stronger locks, keep a log of any break-ins, and show auditors the keys; for investors, compliance affects a company’s legal risk, operating costs and reputation, and can influence future cash flow and valuation.
doraregulatory
"CyCore Primary and Excess wordings, aligned with GDPR, NIS2 and DORA"
The EU Digital Operational Resilience Act (DORA) is a law that requires banks, asset managers, insurers and other financial firms to strengthen how they prevent, detect and report problems with information technology and third‑party service providers. It matters to investors because it raises standards for cybersecurity and incident disclosure, which can change a firm’s costs, reduce unexpected outages or losses, and make operational risks easier to compare—like forcing buildings to meet safety codes so occupants and insurers can better judge risk.
LONDON, July 01, 2026 (GLOBE NEWSWIRE) -- Willis, a WTW business (NASDAQ:WTW), today announced the expansion of its CyMax Facility, a primary and excess cyber facility designed specifically for SMEs and middle market companies across EMEA, in partnership with Insurers AXA XL, Beazley, HDI Global and Markel.
Building on the success of its previous Continental Europe facility, the renewed offering provides broader access, higher limits and faster execution for eligible companies seeking comprehensive cyber protection. It is designed to streamline the insurance experience for clients and brokers, while supporting companies facing exposures ranging from data breaches and ransomware to supply chain risks.
The cover supports clients through crisis management and incident response, with access to external expertise when a cyber event occurs. It also provides financial protection for business interruption and supply chain losses, alongside cover for evolving threats such as social engineering, telephone hacking and invoice manipulation, helping protect profitability, continuity and reputation.
Key features:
Panel-based capacity: The CyMax Facility has been expanded from a single-insurer model to a panel-based facility, supporting broader insurer participation and more flexible placement options for SMEs and middle market companies.
Simplified application process: A one-page Cyber Application Form and short eligibility questionnaire of six to eight underwriting questions helps streamline access to cover and reduce administrative burden for clients and brokers.
Broader and more inclusive eligibility: The facility is designed for companies with turnover up to €/CHF500m, who have established security controls, while also providing access to coverage for businesses with partially implemented controls in place.
Pre-agreed pricing grids: Pre-agreed pricing grids reduce the need for back-and-forth discussions with insurers, helping clients and brokers secure terms more efficiently.
Willis Cyber proprietary wordings: Clients benefit from WTW’s EMEA CyCore Primary and Excess wordings, aligned with GDPR, NIS2 and DORA, with innovative coverages such as cyber incident response, notification costs to data subjects and regulators, emergency costs, business interruption and contingent business interruption, regulatory action, social engineering, cyber theft, invoice manipulation and reputation harm.
Specialist cyber support: Clients can access EMEA expertise and insurer pre- and post-breach services, including pre-ransomware alerts, threat intelligence reports, onboarding calls and crisis exercises.
Brian Vosloh, Head of Cyber EMEA at Willis, said: “As cyber risks continue to grow in complexity, SMEs and middle market companies need cyber insurance solutions that are easier to access, quicker to place and better aligned to their evolving exposures.”
“By renewing and expanding Willis’ CyMax Facility, we are giving clients broader access to capacity, higher limits, innovative proprietary coverages and a faster, simpler route to cyber insurance. The use of pre-agreed pricing grids, a streamlined application process and a single vulnerability-scan subjectivity helps reduce friction for brokers and clients, while access to pre- and post-breach services offered by insurers supports stronger cyber resilience.”
At WTW (NASDAQ: WTW), we provide data-driven, insight-led solutions in the areas of people, risk and capital. Leveraging the global view and local expertise of our colleagues serving 140 countries and markets, we help organizations sharpen their strategy, enhance organizational resilience, motivate their workforce and maximize performance.
Working shoulder to shoulder with our clients, we uncover opportunities for sustainable success—and provide perspective that moves you. Learn more at wtwco.com.
What is Willis (NASDAQ:WTW) CyMax Facility and who is it designed for?
CyMax Facility is a primary and excess cyber insurance solution for SMEs and middle market companies across EMEA. According to Willis, it targets businesses facing risks like data breaches, ransomware and supply chain disruption, offering crisis management, financial protection and tailored cyber coverages.
What are the key features of the expanded CyMax Facility announced on July 1, 2026 by WTW?
The expanded CyMax Facility offers panel-based capacity, higher limits and faster execution. According to Willis, it adds a one-page Cyber Application Form, pre-agreed pricing grids, broader eligibility up to €/CHF500m turnover and proprietary CyCore wordings aligned with GDPR, NIS2 and DORA requirements.
Which insurers participate in the Willis CyMax Facility for SMEs in EMEA?
The CyMax Facility operates as a panel-based cyber insurance solution with multiple insurers. According to Willis, participating insurers include AXA XL, Beazley, HDI Global and Markel, supporting broader capacity, flexible placements and improved access to cyber insurance for SMEs and middle market companies.
What cyber risks and coverages does the WTW CyMax Facility provide for clients?
CyMax Facility covers exposures from data breaches, ransomware and supply chain disruption. According to Willis, coverages include cyber incident response, notification costs, emergency costs, business interruption, contingent business interruption, regulatory action, social engineering, cyber theft, telephone hacking, invoice manipulation and reputation harm for eligible companies.
How does the CyMax Facility simplify the cyber insurance application process for WTW clients?
CyMax Facility uses a streamlined process built around a one-page Cyber Application Form. According to Willis, a brief eligibility questionnaire with six to eight underwriting questions plus pre-agreed pricing grids reduces administrative burden and back-and-forth, helping clients and brokers secure terms more efficiently.
How does Willis CyMax Facility support cyber resilience before and after a breach?
CyMax Facility combines insurance cover with specialist cyber support services. According to Willis, clients gain access to EMEA cyber expertise, insurer pre- and post-breach services, including pre-ransomware alerts, threat intelligence reports, onboarding calls, crisis exercises and incident response support when a cyber event occurs.
