Asure bundles AI-threat cyber cover into SMB payroll platform

Asure Software adds cyber liability insurance to its HR and payroll stack as AI-enabled breaches rise 56% year-on-year.

By Disrupts Editorial Team Wed, 21 October 2026 AI level 2 of 5

AI level 2 of 5: drafted by our AI editorial assistant from the company's announcement; fact-checked, edited and signed off by Mark Walker, Editorial Director. What the levels mean

A modern control room features a large eight-screen display wall showing numeric lists, various charts, and complex network diagrams, with rows of empty office chairs and desks in the foreground, illuminated by natural light from large wind

Asure Software, the Nasdaq-listed payroll and HR platform serving small and mid-sized businesses, is pushing its CyberMax Protects cyber insurance bundle to the fore this month, citing a sharp rise in AI-enabled attacks targeting the digital payroll and workforce management systems its clients depend on daily. The move folds cyber liability coverage, prevention tooling and incident response into the existing employer relationship, adding a risk-transfer layer to what has historically been a software-only stack.

The timing draws on fresh data. IBM's 2026 Cost of a Data Breach Report found that one in four malicious breaches now involve AI, a 56% increase on the prior year. Deepfake impersonation emerged as the most common attack vector, while voice and SMS phishing, accounting for 17% of reported incidents, carried the highest per-breach cost. AI-augmented attacks added up to one million dollars in incremental costs per breach, according to the report.

Cyber insurance as a distribution strategy

Asure's decision to surface CyberMax Protects as a Marketplace add-on is as much a commercial play as a product one. Bundling cyber cover alongside payroll and HR creates an upsell pathway into an existing trusted relationship, a model that insurtech and embedded-finance players have been refining for several years in adjacent verticals. For a payroll platform, the logic is particularly direct: payroll systems sit at the intersection of financial data, employee records and banking credentials, making them high-value targets and giving the insurer-of-record a ready-made distribution channel with credible context.

CyberMax Protects pairs a cyber liability policy from a national A-rated carrier with a set of preventive services, including phishing security testing, managed detection and response licences, external vulnerability scans, and security reviews of Microsoft 365 and Google Workspace environments. If a breach occurs, policyholders receive forensics support, breach counsel and round-the-clock incident response. Notably, the policy extends to coverage for "bricking," the scenario in which a cyberattack renders a device permanently inoperable, a risk that standard business-interruption policies frequently exclude.

"On CyberMax, the claims we see most often start with phishing and account takeovers, sometimes serious enough that a laptop has to be wiped," said Robert Campbell, Vice President of Partnerships at CyberMax Protects. "That's why we pair coverage with prevention, including phishing testing, managed detection and response, and security reviews of Microsoft 365 and Google Workspace."

The wider convergence: AI threats meet embedded insurance

The broader signal here sits at the intersection of three trends converging rapidly. First, AI is materially changing the economics of cybercrime: the marginal cost of a convincing deepfake or a personalised phishing campaign has collapsed, pushing attack volumes up and average breach costs higher across all business sizes. Second, SMBs, long underserved by enterprise-grade security vendors, are being reached at scale through vertical software platforms that already hold their trust and data. Third, embedded insurance is maturing as a distribution model: rather than selling cyber cover through brokers or standalone insurtechs, carriers are routing it through payroll, accounting and ERP platforms where the risk context is richest and the customer acquisition cost is lowest.

For capital allocators tracking the insurtech and cybersecurity spaces, Asure's move illustrates a structural shift in how cyber risk is being packaged and distributed at the SMB tier. The company reports that CyberMax already covers thousands of its clients, though it has not disclosed premium volumes or attachment rates. As AI-driven threat frequency continues to climb, the question for the sector is whether embedded cyber cover becomes a standard feature of any vertical SaaS platform handling sensitive financial or workforce data, rather than a discretionary add-on.