Moody's is quietly building a monopoly on US property risk analytics.

TL;DR

• Moody's owns RMS (2021, $2B), Cape Analytics (January 2025, undisclosed), and holds a 2021 $250M strategic investment in BitSight that made it the largest shareholder.
• Three of the most widely-referenced signals in US P&C underwriting and reinsurance — catastrophe probability, property-level attributes, and cyber risk — now sit under a single corporate parent.
• For carriers already buying from Moody's on ratings, credit, or ESG, the bundled analytics stack is the path of least integration resistance.
• The counter-argument: single-vendor concentration creates pricing risk, vendor-lock risk, and a single point of analytic failure. Having a counter-model (Verisk AIR for cat, first-party attribute extraction for property) is not a luxury.
• The consolidation is not malicious — it is rational industrial logic given the data-network-effect economics. But carriers signing 3-year renewals in 2026 should price that risk explicitly.

The four acquisitions

Between 2021 and 2025, Moody's built a vertically integrated US property-risk-analytics stack through four transactions:

RMS — September 2021, $2.0 billion. Moody's acquired Risk Management Solutions from Daily Mail and General Trust for approximately $2.0 billion, closed September 15, 2021. RMS is the incumbent US catastrophe model, used by most US tier-1 P&C carriers and most reinsurers. The acquisition immediately added ~$320 million in insurance-analytics revenue to Moody's, lifting its insurance line to roughly $500 million.

BitSight — September 2021, $250 million strategic investment. Same month, Moody's invested $250 million in cyber-risk-ratings vendor BitSight, becoming BitSight's largest shareholder with a minority stake. BitSight simultaneously acquired VisibleRisk (a Moody's–Team8 joint venture). This is a strategic investment rather than a full acquisition — BitSight remains independent — but the ownership posture is materially concentrating.

Praedicat — casualty insurance analytics. Moody's earlier acquisition in the insurance-adjacent casualty-modelling space. Less widely referenced than RMS but fills out the multi-peril coverage.

Cape Analytics — January 13, 2025, undisclosed. Moody's announced the acquisition of Cape, a geospatial-AI provider for property attributes (roof condition, pool, trampoline, vegetation proximity, etc.) at the individual-address level. Expected close in Q1 2025. Cape's pre-acquisition customer list named Hippo, Amica, State Auto, The Hartford, CSAA, Cincinnati Insurance, and State Farm Ventures.

Taken together, Moody's now operates or strategically controls catastrophe probability (RMS), property-level attributes (Cape), casualty modelling (Praedicat), and cyber risk (BitSight) — four of the most load-bearing analytics surfaces in US P&C underwriting and reinsurance.

Why this changes the 2026 buying decision

Pre-consolidation, a US P&C carrier standardising its analytics stack typically bought RMS or Verisk AIR for catastrophe models, then separately bought property-attribute data from Cape, CoreLogic, or EagleView, then separately bought cyber from BitSight, SecurityScorecard, or Black Kite. Three vendor relationships, three procurement cycles, three integration projects.

Post-consolidation, Moody's can offer those signals bundled under one contract, with one data-pipeline, one invoice, and one account-management relationship. For a carrier already running RMS, adding Cape post-acquisition is the path of least resistance.

That is the structural attraction. It is also the structural risk.

Three risks the bundle creates

1. Pricing power. A vendor with multiple bundled signals has more pricing leverage than three separate vendors in a competitive market. If a carrier's rate filings, reinsurance placement, and underwriting are all referencing Moody's products, the cost of switching is high enough that list-price increases become sticky. Carriers who signed 3-year renewals in 2023 will see the shape of Moody's pricing discipline in their 2026 renewals.

2. Single-point-of-failure analytic risk. If RMS's cat model has a systematic bias (historically true of Hurricane Irma 2017, where RMS's early loss estimates were materially revised), and Cape's property attributes feed into the same model, the errors compound rather than cancel. Having Verisk AIR as a counter-model at tier-1 carriers is not a legacy habit — it is correlation insurance. Similarly for property attributes: first-party attribute extraction from captured imagery (Nearmap / Betterview, EagleView) is a useful counter-signal to Cape.

3. Vendor lock through data-pipeline dependencies. Once a carrier's actuarial and underwriting workflows depend on Moody's data shapes, migrating to a different vendor is a year-long integration project. This is less true of RMS (industry-standard schema) and more true of Cape (proprietary attribute definitions).

The counter-argument: data-network-effect economics favour consolidation

To be fair to the economics: analytics platforms benefit from data network effects. More carrier data flowing into RMS makes the model better at estimating rare-event probabilities; more imagery into Cape improves attribute extraction. A consolidated dataset has a real quality advantage over fragmented separate datasets of the same total size.

This is the same economic logic behind Bloomberg's dominance of market data, S&P's index franchise, or LexisNexis's US insurance-data cooperative. Platforms that aggregate standardised data across many participants tend toward single-vendor dominance. Moody's is not doing something malicious; it is executing rational industrial logic given the category's economics.

The question for buyers is not whether consolidation is legitimate — it is. The question is how to price the risk that comes with it.

What a US carrier should do in 2026

For tier-1 carriers renewing in the next 18 months: - Keep Verisk AIR as a contracted counter-model, even if RMS is primary. Refuse to let the Moody's RFP team argue that AIR is "redundant." - Treat the Cape-via-Moody's integration as a useful adjacency, not a sole-source property-attribute provider. Maintain Nearmap or EagleView as a parallel source of captured imagery. - Ask Moody's for pricing commitments that span the full renewal, not just year one. Single-vendor concentration is precisely when pricing discipline erodes.

For mid-market carriers: - The Cape-Moody's bundle is more compelling because you cannot afford parallel vendor relationships at mid-market scale. Pick it with open eyes about the lock-in. - Negotiate a data-export clause: at contract end, you should be able to extract historical attribute data in a portable format.

For reinsurers: - RMS + counter-model discipline is already the norm. Extend it to Cape: if your cedents are reporting Cape-derived property attributes, be able to reprocess against an independent source.

For procurement teams: - Add a "Moody's-influenced" line to your vendor-graph assessment. Any vendor where Moody's is a strategic investor or operator should be tagged.

The broader pattern this is part of

Moody's analytics concentration is not unique. In the adjacent categories:

• Verisk has built a comparable concentration on the claims-data-cooperative side: ClaimSearch (primary claims database), ISO (industry rates), Xactware (property damage estimation), and adjacencies.
• LexisNexis Risk Solutions holds near-monopoly positions in US life underwriting data (Risk Classifier) and in US auto-shopping-behaviour signals.
• Guidewire runs the largest partner marketplace in US P&C PAS, which is a different form of concentration (distribution rather than data).
• CCC Intelligent Solutions consolidated auto-claim estimating (incumbent network) plus EvolutionIQ (disability + medical review, $730M January 2025).

In every case the pattern is the same: data-network-effect economics favour consolidation, and carriers benefit from single-vendor convenience until they get locked in. The 2026-2028 window will be where several of these carrier relationships are first renegotiated under the new ownership.

Closing

Moody's quiet assembly of RMS + Cape + BitSight + Praedicat is neither malicious nor surprising. It is rational industrial logic. But it is also material to how a US P&C carrier should think about its analytics stack in 2026.

The correct response is neither boycott (unrealistic) nor unconditional acceptance (risky). It is to price the concentration risk explicitly into procurement decisions, maintain counter-model discipline where affordable, and keep vendor-alternative options warm even when not immediately used. The real cost of single-vendor analytic concentration becomes visible only at the third renewal — by which point the migration cost has grown past the annual savings from switching.

The carriers who will do best in the 2026-2028 window are the ones who treat Moody's as a useful partner, not as the centre of gravity of their stack.