
You work inside other people’s systems. Their lawyers noticed first.Founded by a software developer who owns a software company.
We insure IT consultants, MSPs and technology consulting firms: E&O for advice and admin access, cyber that follows you into client environments, and the limits client MSAs demand.
Tell us the situation.
One licensed human replies the same business day — not five agents, not an auto-responder. If the policy you have is already the right one, we will tell you.
We use this to quote and service your insurance, and we do not sell it or pass it to lead networks. Privacy policy.
The person placing your tech E&O builds and sells software.

Kevin Kelsey
Founder | Principal Agent
Boring’s founder, Kevin Kelsey, is a software developer. He owns Manifest Post, post-production coordination software for episodic television, built B/side, a video editor for teams, holds a number of patents on that software, and wrote the platform this agency quotes, files and services every policy on. So when an enterprise customer’s contract asks for technology E&O and cyber at $5M, the clause is read by someone who knows what an uptime promise and a data processing agreement mean to a software company, rather than by someone matching a class code to a rate.
Send us what you have. We’ll tell you if it’s right.
Your current policy paperwork, a renewal notice, or nothing at all. A licensed agent reads it and replies the same business day.
What IT consulting businesses actually need.
Cyber & tech E&O
Breach response, ransomware and the notification costs that follow. Technology errors and omissions sits on the same policy and covers the software or service itself failing a client, which is the half most tech companies find out about too late.
Without it — A consultant with admin access carries two exposures at once: your systems, and every client environment your credentials reach.
Professional liability
Covers the advice, the drawing, the diagnosis. The work itself, rather than someone getting hurt on your premises.
Without it — The recommendation that did not survive contact with production is a professional claim: the migration that lost data, the architecture that fell over.
Umbrella & excess liability
Extra limit stacked above general liability, auto and employers liability. Usually the cheapest million dollars on the policy.
Without it — Client MSAs name limits without asking what your carrier sells. Excess over the E&O and cyber is how the gap closes.
General liability
Third-party bodily injury and property damage. It is the line nearly every contract names by default.
Without it — The certificate every client onboarding portal requests before your first invoice clears.
Hired & non-owned auto
Covers vehicles the business does not own but its people drive on the job: rentals, and employees running errands in their own cars. Their personal auto policy will not cover a business trip, and the claim lands on the business. Pricing depends entirely on HOW it is bought: as an endorsement on a general liability policy we write, HNOA often costs a few hundred dollars; as a stand-alone (monoline) policy it runs $2,500 to $5,000, and association practitioner programs (CPH, CM&F and similar) generally cannot take the endorsement, so "add HNOA to my existing policy for $300-$800" is usually not a real option. A package carrying GL, professional liability and HNOA together is typically cheaper than the monoline.
Without it — Consultants driving their own cars to client sites are the classic uncovered claim: the business exposure personal auto quietly refuses.
Workers compensation
Required in almost every state the moment you have employees. Priced on payroll and class code, which is why the class code is worth arguing about.
Without it — Required with the first employee, and the first question on many vendor forms even for firms of two.
An MSP with admin credentials across forty client environments carried a generic consultants’ E&O bought years earlier. A new client’s MSA required technology E&O and cyber naming limits the old policy could not meet, and the old form’s data-release sublimit would have been the first thing a breach lawyer read.
We moved them to a technology form covering E&O and cyber together at the contract’s limits, priced for what they actually are: a firm whose keys open other companies’ systems. The MSA cleared, and two subsequent client security questionnaires were answered with the same certificate.
What the insurance company will ask about your IT consulting business
We read the applications the markets use for businesses in this field and pulled out what they actually ask. Have these answers ready and a quote takes a day instead of a week, because nobody has to come back to you for the missing piece.
About the business
- What's your company name, address, and website?
- How many employees do you have?
- What's your annual revenue?
- Do you provide managed IT services, and if so, what percentage of your revenue comes from that?
- What percentage of your revenue is business-to-business versus direct to consumers?
How you operate
- What are your two largest client engagements from the past two years, including what services you provided and what they paid?
- Do you use written contracts with all your clients, or what percentage of the time?
- Do you accept payment cards, and if so, what percentage of your revenue comes from card payments?
- If you rely on third-party cloud hosting or payment processors, do you have a backup plan if they go down?
- Do you use email to store or send sensitive customer information?
Safety and controls
- Do you require your employees to use a virtual private network (VPN)?
- Do you protect all devices with anti-virus, anti-malware, or endpoint protection software?
- Do you scan incoming emails for malicious attachments and links?
- How often do you back up critical data, and are those backups encrypted and kept separate from your main network?
- Have you tested whether you can restore your key data and systems from backups in the last six months?
Your history
- Have you had any claims or incidents in the past five years that you need to report?
- Have you notified customers of any data breach in the past five years?
- Have you been subject to any government investigation or action related to privacy violations in the past five years?
- Have you received any complaints or cease-and-desist letters about trademark, copyright, privacy, or defamation?
Money and people
- Have you completed, agreed to, or are you planning any mergers or acquisitions in the past 12 months or next 12 months?
Have these ready
- Your most recent audited annual financial statement
- Your written client contracts (or a sample if you use the same template)
- Documentation showing your payment card processor is PCI compliant
You answer what you can; a licensed agent fills the rest with you.
What our IT consulting clients ask us.
A client’s contract holds us liable for a breach in their environment. Can insurance actually cover that?
Yes, if it is placed knowing that is the exposure. A technology E&O and cyber form can respond to claims that your work — the credentials, the configuration, the patch that waited — contributed to a client’s incident. A generic consultant policy frequently cannot: many exclude or sharply sublimit claims involving the release of personal information, which is what a breach claim is. The contract review comes first, because the clause tells us what the policy has to say.
We are a two-person consultancy. Are the client insurance requirements negotiable?
Occasionally, but rarely in your favor and never quickly. Procurement teams apply the same vendor template to a two-person firm as to a two-hundred-person one. It is almost always faster and cheaper to satisfy the clause than to argue with it, and small firms often find the required coverage costs less than the billable hours the negotiation would burn.
Does our E&O cover subcontracted specialists we bring onto projects?
Your policy covers claims against you, including for work you subcontracted, but it does not cover the subcontractor, and their bare spot has a habit of becoming your claim. The clean pattern is the one your own clients use on you: require certificates from subs, at limits that make sense for what they touch. We help set those numbers.
What does IT consultant insurance cost?
For an independent consultant, tech E&O with cyber commonly lands in the low four figures a year; firms with staff, admin access at scale or contract-driven limits price on those facts. The auction for this search runs to three digits per click, which tells you carriers consider the accounts valuable, worth more than a one-size answer. Revenue and what your contracts require decide it, and those are the first things we ask. For scale, on our calls in 2026 a solo web developer whose client contract required $1,000,000 of professional liability bought tech E&O with cyber for $3,838 a year, a business owners policy for $479, and workers comp for $578 when the same contract asked for it, all bound on two calls.
We recommend and deploy AI tools for clients. Where does the liability land?
On you first, as the professional who advised and configured, and the claim is negligent advice or negligent implementation under technology E&O. A client who puts customer records into a tool you recommended, without the business associate agreement or the data terms it needed, has a privacy claim with your name on it. Document the tool selection, the data terms you reviewed and the client’s sign-off, and carry E&O that covers AI affirmatively, because the 2026 exclusions reach consultants as readily as developers.
What does a IT consulting insurance application ask for?
The applications for IT consulting businesses ask about 4 things above all: what's your company name, address, and website; what are your two largest client engagements from the past two years, including what services you provided and what they paid; do you require your employees to use a virtual private network (vpn); have you had any claims or incidents in the past five years that you need to report. Have your most recent audited annual financial statement and your written client contracts (or a sample if you use the same template) ready and a quote takes a day instead of a week.
Commercial insurance is 96% of what we do — it is not a department here, it is the whole business. Not ready to talk? The guides answer the questions this page raises in more depth. Already insured with us and need a certificate or a policy change? Ask the service team rather than starting a quote — it is faster and it goes to the people whose job it is. We also write home and auto, which is usually cheaper alongside the business policy than apart from it.
Handed a lease, a vendor packet or a client contract with insurance requirements? Paste it into the COI Requirements Decoder to see what each one means for your business, or read what the requirements mean.