FRIEND OF FRIEND / THE WEEKLY VOL. 08 · 2026
RISK-INTELLIGENCE FOR SMALL-BUSINESS INSURANCE · VOL. 08, WEEK OF SEPTEMBER 28, 2026 · 5-MINUTE READ
 

For decades the insurer priced your ZIP code. This year it started pricing your building.

LAST TIME WE SAID Vol. 07: capital is cheap at the top of the market and dear at the bottom because nobody can see the individual risk. This week the industry started building the eyes.
RIGHT, SO FAR
FROM THE DESK

Walk any commercial block and pick two shops that look the same to an insurer: same street, same ZIP code, same line of business. To the typical insurance pricing engine they are one and the same risk, charged the same blended rate to transfer that same-looking risk, even though one has a hardened roof and a clear yard and the other has neither. For more than a hundred years the insurance carrier had no cost effective way to tell these risks apart, so it did not try. This week, in three separate corners of the insurance market, the tools that finally tell one building from the next moved out of the pilot deck and into the machinery that sets prices. That is the whole thing we are building, arriving from the other direction.

NEWCOMBE · FOUNDER, FRIEND · NEW YORK
BY THE NUMBERS
20+
States that have accepted structure-level wildfire models in rate filings
12
States where FEMA just redrew flood maps into the high-risk zone
70%
Of US businesses now buy cyber cover, a record, up from 63%
44%
Of last year's rate filings drew at least one regulator objection
THIS WEEK · THE ONE TO DISCUSS THE ARGUMENT · FIG. 01

The advanced analytic tools and aerial imagery data sets that tell one building from the next (from the sky) just moved from pilot decks into insurance rate filings. The careful operator is the one these tools are built to find, and the careless neighbor is the one who has been getting a discount on the careful operator's dime.

The unit of pricing is shrinking

In August, FM bought FortressFire, a firm that combines physics-based fire modeling with machine learning to judge whether one specific structure will ignite, not whether its neighborhood might. FM's own read on the deal is blunt: traditional carriers use coarse geographic segmentation, but what you want is structure-level modeling that prices the individual property risk. The gap between the old way and the new is widening into an adverse-selection problem for anyone still pricing the map, not the roof. This is not a science project. More than 20 states have already accepted AI-driven wildfire models in rate filings, per the Insurance Institute for Business and Home Safety and the American Property Casualty Insurance Association. The money is there because the losses are: wildfires and severe storms were 83% of 2025's $107 billion in insured catastrophe losses, by Swiss Re's count.

Granularity cuts both ways

A model that can reward the hardened building that has proactively prepared for, and mitigated, wildfire loss risk can surcharge the exposed one, and it will. The insurance carrier that can see and compare the individual structures takes the good risks at a fair price and leaves the blended-rate carrier holding the rest, which is what adverse selection means in practice. The old bucket was comfortably profitable (until it wasn't) precisely because it hid something Friend sees again and again: the careful operator, with a well managed property, subsidized the careless one, and neither could tell. Structure-level pricing ends the subsidy. It is good news for the operator who has done the work and a bill for the one who has not, and for the first time the carrier can act on the difference.

The arithmetic, on one building

Take a bakery in a wildfire-exposed county with an $8,000 premium property policy. Priced by ZIP code, it pays the territory average, the same as the shop two doors down with a wood-shake roof and brush to the wall. Priced by structure, with a Class-A roof and a cleared five-foot zone, the same bakery looks more like a $5,600 risk, while the careless neighbor looks more like $10,400. The $2,400 the careful owner was overpaying did not go anywhere useful. It quietly covered the neighbor. The data and the model that separate them are not expensive to run. It has simply, until now, not been run.

THE EXHIBIT
One ZIP code, one price. One building at a time, three prices.
A · SAME BLOCK, SAME ZIP, TWO BUILDINGS
One $8,000 wildfire-zone property policy, priced three ways. The ZIP price is the blend both shops pay today.
Structure-scored, hardened shop
Class-A roof, cleared 5-foot zone
  $5,600
Priced by ZIP code
The blend both shops pay today
  $8,000
Structure-scored, careless neighbor
Wood-shake roof, brush to the wall
  $10,400
B · THE MAP IS BEING REDRAWN UNDER EVERYONE
Where risk is now being repriced building by building, in states, this year.
Wildfire, structure models in rate filings
  20+ states
Flood, FEMA maps redrawn this year
  12 states
Sources: FM and FortressFire, via Insurance Business; IBHS and APCIA (states accepting wildfire models); Cotality, via Carrier Management (FEMA flood maps). Panel A is Friend's arithmetic on an illustrative policy. Bars to scale within each panel.
 
THE FRIEND READ

For a century the careful operator paid the average of everyone in their broad cohort and never saw the bill for the careless one. Structure-level pricing is the industry admitting, out loud, and in rate filings, that the average was always wrong. This change is arriving one risk at a time, wildfire first, because that is where the big recent losses forced it to get more precise. The $2,400 a hardened bakery has been overpaying is not a rounding error, it is a subsidy, and the individualized scores we are building with our models are how you make it visible across every business line and every business roof, not just the one that caught fire.

INSURANCE BUSINESS · FM · IBHS · APCIA · SWISS RE INSTITUTE
THE JARGON, TRANSLATED
Adverse selection

When one insurer can see a risk clearly and another cannot, the good risks drift to the carriers that price them fairly and the bad risks pile up on the balance sheet of the insurer that does not. Blended pricing is how you lose the customers you most want to keep.

Every term, every issue: friendanalytico.com/glossary
ALSO THIS WEEK · THE BRIEFS THREE DEVELOPMENTS
02
FIG.
CATASTROPHE / FLOOD · UNITED STATES

FEMA redrew the flood maps, and thousands of properties across twelve states just landed in the high-risk zone

CARRIER MANAGEMENT · COTALITY · 18 SEPTEMBER 2026

FEMA's latest map revisions moved more than 100 communities across 12 states into the Special Flood Hazard Area, per a Cotality alert. Owners in newly mapped areas get about 45 days to secure flood insurance cover before disruptions at closing or renewal. Escambia County, Florida alone added 2,344 properties to the new flood danger zone, Pender County, North Carolina 678, and Chattanooga 635. Cotality notes the change lands hardest on budget-tight owners, and that premium spikes have historically tracked with mortgage stress along the Gulf Coast. A double whammy on those who can least afford it.

 
THE FRIEND READ

A shop that sat outside the flood line last month sits inside it this month, and now needs a flood policy that can run $1,500 to $3,000 a year it never budgeted for. Nothing about the building changed. A line on a map did. Notice this is the same story as the wildfire lead, run backward towards less precision, not more: the map is a blunt instrument that reprices a whole zone at once. Whether that particular shop is dry, elevated, or floodproofed is invisible to the new map, and that gap between the zone and the building is exactly the space a real read on the risk is supposed to fill.

03
FIG.
CYBER / ADOPTION · UNITED STATES

Cyber coverage hits a record: seventy percent of US businesses now carry it, but only half of small ones do

BUSINESS INSURANCE · TRAVELERS RISK INDEX · 22 SEPTEMBER 2026

Travelers' 2026 Risk Index, a survey of 1,202 US business decision-makers, found 70% now carry cyber insurance, up from 63% a year ago and a record. Adoption splits by size: 82% of large companies against 50% of small businesses. Cyber risk ranked the top overall concern for the fifth time in eight years, with AI-driven breaches the second-highest worry. Meanwhile 89% of firms report using AI daily and only 59% have written rules governing it within their organizations, a gap the survey calls the real risk exposure.

 
THE FRIEND READ

Here is the same problem wearing a different coat. A small-business cyber policy runs on the order of $1,500 a year, and the shop that uses multifactor logins and keeps backups (most now do) pays close to what the shop with neither pays, because the carrier cannot cost effectively see which is which on the smaller end. So the careful owner buys cyber cover and quietly funds the careless one, exactly as in property. Cyber is just the insurance line where the buildings are servers and the roofs are web domains, and the readable signals, the controls a business already runs, are sitting right there, largely unread by most.

04
FIG.
REGULATION / RATE FILINGS · UNITED STATES

Nearly half of last year's rate filings drew a regulator's objection, and each one added more than a month

INSURANCE JOURNAL · ZESTYAI · 19 AUGUST 2026

A ZestyAI analysis of 20,183 approved rate filings across all 50 states in the year to May found 44% drew at least one regulator objection: 53% of homeowners filings, 51% of personal auto, and 34% of commercial property. Each objection added a median of 38 days to approval. California, New York and New Jersey ran slowest, Wisconsin and South Dakota fastest. Every month a filing sits in objection, the analysis notes, the carrier keeps writing at a rate it has already flagged as wrong.

 
THE FRIEND READ

A rate filing is when an insurance carrier goes to the state regulator and shows their math. The state cares that the math is correct and that there is enough money in the bank to pay all the claims that may come ... based on the math. It's a gate all insurers must walk through if they want their products to meet the muster of the banks and landlords that often require proof of state regulated insurance before they make a loan to or sign a lease with a small business.

The better read from the lead has to clear this gate, and the gate is slow. A commercial-property filing that draws an objection from the regulator sits an extra 38 days, on average, and for those weeks the price you pay reflects last year's guess at the math, not this year's model read. Put a number on it: on a $6,000 policy that a corrected filing would trim 8%, the month of delay is about $40 you overpay while a spreadsheet waits in a queue. Small per shop, but it is the reason a fairer price is always a season behind the tool that could set it.

THE WEEK, IN ONE LINE

The industry is finally paying to tell one building from the next, peril by peril, and every place it does, the careful operator stops subsidizing the careless one. The read was always the missing piece. It is starting to get built.

ASK FRIEND
Opens in October

Reply to this note with the insurance question you would be slightly embarrassed to ask your broker. The first issue of every month, starting in October, answers one of them in plain language. No names, no follow-up sales call, and if the honest answer is "nobody knows," we will say that.

Or write to newcombe@friendanalytico.com with "Ask Friend" in the subject
ON THE CALENDAR
EARLY NOVEMBER The 45-day clock runs out for owners in FEMA's newly mapped flood zones. We are watching how many buy cover, and how many find out at closing that they have to.
30 NOVEMBER Atlantic hurricane season closes and California's peak wildfire weeks run on. The loss year that is pushing carriers toward structure-level pricing gets most of its final number.
1 JANUARY 2027 Reinsurance renewals. The cheaper capital everyone expects only reaches the small account if someone can price the small account. Watch whether the structure-level models start showing up in the terms.
SOURCES
FRIEND IS RAISING A SEED ROUND
We're building the risk-intelligence layer for small-business insurance.

The Green, Yellow, and Red score that tells a careful operator from a careless one, across every line and not just the one that caught fire. If you want the full plan, or you just want to learn more, reach us at newcombe@friendanalytico.com, or simply reply to this note. Whether you are thinking about investing or only want to learn more, either is welcome.

Clarity is the product.
EVERY BUSINESS IS A CROSS-SECTION · CLARITY IS THE PRODUCT.

A weekly read on small-business insurance from Friend, which builds the score that tells a careful operator from a careless one. You're getting it because you're close to us; if we've read something wrong, reply and say so, the more brutal the feedback the better. Why you're reading this, in full →

NEW YORK · 2026 · WRITTEN BY NEWCOMBE, FOUNDER OF FRIEND · YOU'RE RECEIVING THIS AS A FRIEND OF FRIEND, INVESTOR, CLIENT, OR FELLOW TRAVELER.
FORWARD IT TO A FRIEND OF FRIEND. THEY CAN REPLY TO BE ADDED. · READ ON THE SITE · EVERY ISSUE