The 2026 InsurSec Rankings Report

The email and remote access tools a business uses, and how it configures them, shape what happens when attackers try to get in. In this report, we analyzed over 100,000 policy years of At-Bay claims data to rank the email providers, email security solutions, and VPNs associated with the most risk.

This year, we also looked at how attackers use brand impersonation and abused infrastructure to steal credentials, and how those credentials end up being used to execute a six-figure ransomware attack.

In this report, you’ll learn:

• The email and remote access tools associated with the highest levels of risk
• How attackers borrow trusted brands and platforms to steal credentials
• Actionable steps to protect your inboxes and networks, even when a password is stolen