Guides
Active assailant insurance: what it covers and what standard policies miss
Active assailant policies pay for crisis response, lost income and liability after an armed attack that standard property and liability forms may not reach.
Active assailant insurance, also sold as active shooter or deadly weapons coverage, is a specialty policy that responds when an armed attacker harms people at or near your business. It typically pays for crisis response, victim support, lost income and your legal liability, whether or not the attack is ever called terrorism. It exists because the policies most businesses already carry were not written with this event in mind, and the gaps show up at the worst time.
This guide explains what the policies contain, how they fit with the rest of your program, and what to compare before you buy. It describes the market as of October 2026; wording differs by carrier and none of it is a promise of coverage.
Why the standard program leaves gaps
Walk through the bills after an attack and match each to the policy that normally pays.
| Cost after an attack | Policy that may respond | Common gap |
|---|---|---|
| Injured employees' medical bills and wage loss | workers' compensation insurance: how it works | Covers employees only, not customers, tenants or visitors; benefits follow state law |
| Lawsuits from injured customers or tenants alleging negligent security | general liability insurance: what it covers and what it does not | Carriers often add assault and battery or weapons exclusions, or low sublimits; see assault and battery exclusions |
| Repairing damaged property | commercial property insurance: what it covers and what it doesn't | Responds to physical damage, which many attacks leave little of |
| Lost income while closed | business interruption insurance: how business income coverage works | Needs direct physical loss; civil authority coverage: when an order closes your doors needs damage to other property |
| Crisis consultants, counseling, security, public relations | Usually none | Not a standard coverage |
| Losses from an attack with a political motive | Terrorism endorsement or stand-alone cover | Often limited to certified acts or to physical damage; see Terrorism insurance and TRIA: how the federal backstop works |
The last row matters. A certified act of terrorism under federal law requires insured losses of at least $5 million and an effort to coerce the public or influence government policy. A lone attacker with a personal grievance and a handgun usually fails one or both tests. Marsh describes the dedicated product as affirmative coverage for deliberate, malicious physical attacks by an armed assailant who is physically present, built to sit beside the general liability and property policies a business already buys. Beazley's product page makes a similar point and advises checking whether your general liability policy excludes deadly weapon attacks.
What the policies typically contain
There is no standard ISO form. Each carrier writes its own, so the components below are common features, not guarantees.
Liability. Cover for bodily injury and property damage claims from victims and their families, plus defense costs. This is the part buyers worry about most. A suit can be expensive to defend even if the business is cleared. Beazley's U.S. product is written as primary liability, which matters if your general liability carrier excludes the event.
Property damage. Repair or replacement of buildings and contents, with some forms covering forensic cleanup.
Business interruption and extra expense. Lost income and rent while you are closed. Some forms do not require physical damage. CFC's June 2025 U.S. brochure describes lost income, including rent, when authorities restrict access even if nothing is damaged, plus loss of attraction after a nearby attack and reimbursement when a specific threat disrupts operations without an actual attack. Beazley lists business interruption as an extension available if purchased.
Crisis response and support. A hotline and pre-arranged consultants, counseling, funeral costs, medical or psychiatric care, retraining and relocation of injured people, public relations and added security. Beazley states that crisis management fees sit outside the policy limit and are available if a weapon is only brandished.
Accident benefits. Some forms add accidental death and dismemberment and medical payments for people hurt in the event, regardless of fault. Verify who counts as an insured person. Marsh's overview says it can include anyone lawfully on the premises, such as employees, customers, patients, contractors and volunteers.
Prevention services. Many carriers bundle threat assessment, drills and response planning. Lockton's September 2026 market commentary notes security consultants are often available for planning and training.
How big the exposure is
The FBI's Active Shooter Incidents in the United States in 2025 identified 34 incidents, up from 24 in 2024, with 166 casualties (51 killed and 115 wounded). Fourteen of them, or 41%, occurred at commerce locations, and more than three-quarters of those at businesses open to the public such as retail stores and restaurants. Commerce locations accounted for nearly 60% of all deaths. Seven attackers were classed as insider threats.
Two cautions. The FBI counts only incidents it classes as active shooter attacks, defined as one or more people actively engaged in killing or attempting to kill people in a populated area. Vehicle and knife attacks, which active assailant forms are meant to reach, are outside that count. And the counts say nothing about your own odds. Underwriters look at your occupancy, public access, location, security measures and political or social profile.
The liability side can dwarf the property side. Following the October 2017 Las Vegas shooting, MGM Resorts announced a settlement of up to $800 million, with the final figure expected between $735 million and $800 million depending on participation, and its insurers having agreed to provide $751 million (Carrier Management, October 2019). It is an extreme case, but it shows why negligent-security theories drive buyers to this coverage. Premises liability rules differ by state, so the legal exposure for a venue in one state can look different in another; see premises liability: how slip-and-fall claims are handled and workers' comp and benefits requirements by state.
Who buys it and what it costs
According to an Insurance Business report dated September 30, 2026, Marsh's terrorism placement leader said the number of organizations buying the coverage has grown about 30% a year over four years. A Beazley underwriter quoted there named education, hospitality, health care, commercial and residential real estate, retail and nonprofits as the sectors most interested. Lockton's September 2026 note adds that healthcare organizations buy because of violence from visitors and patients.
The same report says renewal increases were in the mid-to-high single digits, comparable to stand-alone terrorism, while, per IMA Financial Group as cited in the report, average commercial property and casualty premiums fell 1.2% in the first quarter of 2026. Treat that as direction, not a quote. Price depends on the limit, retention, class, location, headcount or visitor counts and the security program.
Capacity is modest next to property markets. Beazley's U.S. page lists capacity up to $30 million, and CFC's U.S. brochure lists limits up to $10 million any one event. Other markets write it too. Availability varies by state and by whether the carrier is admitted or surplus lines.
What to compare before you buy
Justin Peterson of Beazley, writing for the university risk managers' association URMIA in May 2025, framed the questions well. Add a few from experience:
- Trigger. Does the policy require a minimum number of victims, actual bodily injury or property damage? What happens when a weapon is only brandished, or a credible threat closes your doors?
- Weapon and attack definition. Does it include vehicles, knives, explosives and other items, or only firearms? CFC says its policy does not restrict what counts as a weapon; Beazley lists specific categories and a catch-all for handheld devices.
- Who the attacker can be. Check any exclusion for employees, tenants or insiders.
- Motive exclusions. Ask whether gang violence, domestic violence, theft or robbery are excluded. These are common motives.
- Liability. Who counts as a third party, and are defense costs inside or outside the limit?
- Business interruption. Waiting period, sublimits, loss of attraction and denial of access.
- Coordination. How does it interact with your general liability, property and terrorism policies, and the other insurance clause in each? Do not assume the umbrella follows.
- Services. Are response vendors named, free of charge, and available before an incident?
Use the What business insurance do I need? to line up the answers and bring them to a broker who places specialty lines.
A hypothetical
Say a suburban shopping-center owner carries a $1 million general liability limit, a property policy and a certified-acts terrorism endorsement. A gunman enters a tenant restaurant and shoots four people, then is stopped. Property damage is minor. The center is closed for two days and then loses traffic for weeks. The owner receives a negligent-security demand from a victim's family.
- The property policy pays for broken glass but not weeks of lost traffic.
- Terrorism coverage does not respond, because the event is not certified.
- The general liability carrier defends under a reservation of rights, and an assault and battery sublimit may cap what it pays.
- A dedicated active assailant policy would cover crisis and counseling costs and, depending on the wording, closure income and primary liability.
The facts are invented to show how the pieces connect; they are not a typical loss.
Key takeaways
- Active assailant policies are affirmative specialty forms that pay for crisis response, victim support, lost income and liability after an armed attack, regardless of motive.
- Standard forms leave gaps: assault and battery exclusions, a physical-damage trigger for lost income and certified-only terrorism coverage.
- Compare triggers, weapon definitions, insider and motive exclusions, defense treatment and business interruption terms, since there is no standard form.
- The FBI counted 34 active shooter incidents in 2025, and 41% occurred at commerce locations; liability, not property damage, is usually the larger financial risk.
- Prevention planning matters: see workplace violence prevention and insurance. Underwriters price security and response plans as much as the limit.