Coalition: Difference between revisions

🏢 '''CorporateDelaware identityincorporation.''' Coalition, Inc. is the global marketing name for the operations of its affiliates and subsidiaries, with its parent entity legally domiciled in Delaware.<ref name="about">{{cite web |title=About Coalition |url=https://www.coalitioninc.com/au/about |publisher=Coalition |access-date=9 March 2026}}</ref><ref name="imprint">{{cite web |title=Imprint |url=https://www.coalitioninc.com/nordics/legal/imprint |publisher=Coalition |access-date=9 March 202603-09}}</ref> The parent entity is a Delaware corporation.<ref name="privacy">{{cite web |title=Privacy Policy |url=https://www.coalitioninc.com/legal/privacy |publisher=Coalition |access-date=9 March 2026-03-09}}</ref> CoalitionThe company operates a hybrid cyber insurtech structure that combinescombining an insurance distribution entity (producer and surplus lines broker in the US), a multi-carrier capacity model backed by unaffiliated carriers and Lloyd's capacity, a licensed admitted carrier for admitted placements, cybersecurity services provided bythrough affiliated security entities, and a reinsurance-facing intermediaryinitiative brandbranded ("Coalition Re.").<ref name="coalition-recoalitionre">{{cite web |title=Introducing Coalition Re |url=https://www.coalitioninc.com/announcements/introducing-coalition-re |publisher=Coalition |access-date=9 March 2026-03-09}}</ref> The companyCoalition launched publicly in December 2017 with initial carrier capacity from Swiss Re Corporate Solutions and Argo Group.<ref name="launch-2017">{{cite web |title=Leading Global Insurers Back Coalition to Solve Cyber Risk |url=https://www.coalitioninc.com/announcements/leading-global-insurers-back-coalition-to-solve-cyber-risk-2017-dec-05 |publisher=Coalition |date=5 December 2017 |access-date=2026-03-09}}</ref>

== Leadership, governance, and AXA linkage checkgovernance ==

👤 '''FoundersCo-founders.''' Joshua Motta isserves as CEO and co-founder of Coalition. His official biography states he previously held CXO and Head of Special Projects roles at Cloudflare and also worked at Goldman Sachs, the Central Intelligence Agency, and Microsoft.<ref name="about"/><ref name="series-dseriesd">{{cite web |title=Coalition Raises $175M to Build the Future of Commercial Insurance |url=https://www.coalitioninc.com/announcements/Coalition-Raises-%24175M-to-Build-the-Future-of-Commercial-Insurance |publisher=Coalition |date=March 2021 |access-date=2026-03-09}}</ref> John Hering is co-founder, alongsidewith Motta.<ref name="seed-round">{{cite web |title=Cyber Insurer Coalition Raises $10 Million to Solve Cyber Risk for SMBs |url=https://www.coalitioninc.com/announcements/cyber-insurer-coalition-raises-10-million-to-solve-cyber-risk-for-smbs-2018-feb-28 |publisher=Coalition |date=28 February 2018}}</ref> The founders'a combinedbackground backgroundsthat includeincludes founding and building cybersecurity companies such as Lookout, Cloudflare, OpenDNS, and HackerOne.<ref name="founded">{{cite web |title=Why We Founded Coalition |url=https://www.coalitioninc.com/blog/why-we-founded-coalition |publisher=Coalition |access-date=9 March 2026-03-09}}</ref> Hering'sThe World Economic Forum profile lists his educational background as studies in Public Policy at USC.<ref name="hering-wef">{{cite web |title=John Hering Profile |url=https://www.weforum.org/people/john-hering/ |publisher=World Economic Forum |access-date=9 March 2026-03-09}}</ref> Coalition states some team members have US Intelligence Community experience, though no specific agency role is attributed to Hering in primary materials.<ref name="seed-round"/>

🏛️🏗️ '''Board governancesignals.''' Trade press reports indicate that Oliver Bäte, CEO of Allianz SE, joined Coalition's board in late 2023, reinforcing the strategic relationship established through Allianz X's participation in the Series F round.<ref name="bate-board">{{cite web |title=Coalition Appoints Allianz SE Leader to Board |url=https://www.insurancebusinessmag.com/au/news/cyber/coalition-appoints-allianz-se-leader-to-board-468363.aspx |publisher=Insurance Business Magazine |date=2023 |access-date=2026-03-09}}</ref><ref name="series-f"/> No AXA-linked individual was identified in the disclosed leadership biographies or board-level governance sources reviewed.<ref name="exec-risksseriesf"/>

! scope="col" style="text-align:right; width:7em" | Amount raised

📊🔍 '''Investor profile.''' Coalition's investor base blends technology-focused growth capital and insurance-adjacent strategic capital. The Series E co-leads include large crossover-type asset managers (Durable Capital, T. Rowe Price, Whale Rock), while the Series F broughtintroduced strategic insurtech capital from Allianz X.<ref name="series-eseriese"/> Coalition's Series F announcement statedstates overthe $755company millionachieved in"nearly equity200%" fundingrevenue togrowth date;over the arithmeticprior sumyear, tying funding to operational scale of disclosedover rounds160,000 yieldscustomers, exceeding $770M,775M possiblyrun reflectingrate definitionalGWP, differencesand suchplans asfor theinternational treatmentexpansion ofand secondaryproduct componentsbroadening.<ref name="series-fseriesf"/>

== Underwriting scope, customer segments, and distribution ==

🎯 '''Segment boundaries.''' Coalition's US underwriting appetite in the US extends to organisationsorganizations with up to $5B in annual revenue and up to $15M in limits.<ref name="au-active-cyberactivecyber">{{cite web |title=Coalition Launches New Active Cyber Policy |url=https://www.coalitioninc.com/au/announcements/coalition-launches-new-active-cyber-policy |publisher=Coalition |access-date=9 March 2026-03-09}}</ref> Certain policy features are reserved fortarget smaller insureds: the Vanishing Retention endorsement and unlimited reinstatements are available only to businesses under $100M revenue.<ref name="policy-highlightspolicyhighlights"/>{{cite Inweb the|title=Coalition UK,Active theCyber focusPolicy isHighlights on|url=https://cdn.intelligencebank.com/us/share/NMXD/nG3M/g1MK3/original/Coalition_Active%2BCyber%2BPolicy%2BHighlights |publisher=Coalition |date=April 2025 |access-date=2026-03-09}}</ref> UK positioning targets businesses under £1 billion1bn in revenue, with disclosed premiums ranging from £111 to £200,000+.<ref name="lloyds-uklloydscoverholder">{{cite web |title=Coalition Approved Lloyd's Coverholder UK |url=https://www.coalitioninc.com/blog/cyber-insurance/coalition-approved-lloyds-coverholder-uk |publisher=Coalition |date=January 2023 |access-date=2026-03-09}}</ref>

🏭📋 '''Industry appetite.''' Coalition accepts submissions from nearly every industry but explicitly excludes adult entertainment, cannabis, casinos and gambling, data aggregators, and payment processors.<ref name="policypolicyhighlights"/> The combination of a very high customer count, a product design emphasizing rapid quoting and standardized enhancements, and incentives targeted at sub-highlights$100M revenue insureds indicates a scaled, packaged cyber MGA distribution model weighted toward SMB and mid-market volume placements.<ref name="seriesf"/>

== Cyber insurance product and coverage analysisproducts ==

📋📄 '''PolicyActive formCyber Policy.''' Coalition's current flagship US cyber form is, the "Coalition Active Cyber Policy," was released on 15 April 202515, to2025, replacereplacing the previous surplus lines version.<ref name="policy-highlightspolicyhighlights"/> Insurance products are offered bythrough the producer/surplus lines broker and are available on an admitted basis through Coalition Insurance Company (NAIC #29530).<ref name="coalition-recoalitionre"/>

|+ 🛡️ Coalition Active Cyber Policy — first-party coverages<refcyber name="coverages"/><ref, name="policy-highlights"/>status by product material classification, Apr 2025

| Business interruption / system failure (incl.including contingent BI) || Direct and Contingent Business Interruption || Standard

| Bricking / hardware damage || Computer Replacement Costs (hardware permanently altered by malware) || Standard; integrated into base form Apr 2025

| Reputation repair advertising support || Reputation Repair || Available by endorsementEndorsement

| Deepfake response || Deepfake Response || Available by endorsementEndorsement

|+ 🛡️⚖️ Coalition Active Cyber Policy — third-party coverages<refcyber name="coverages"/>, status by product material classification, Apr 2025

| Privacy liability, regulatory defense and fines/penalties || Regulatory Actions; expanded privacy liability definition || Standard

| Bodily injury / property damage crossover || Bodily Injury and Property Damage (1st and 3rd party) || Available by endorsementEndorsement

| Pollution liability || Pollution || Available by endorsementEndorsement

💲💡 '''PolicyRetention and limits economicsmechanics.''' The Vanishing Retention endorsement, (available to businesses under $100M revenue), reduces retentions based on vulnerability resolution and claim-free years.<ref name="policy-highlightspolicyhighlights"/> A reduced retention applies for early funds transfer fraud reporting within 72 hours.<ref name="policy-highlights"/> Unlimited reinstatements are available by endorsement for businesses under $100M revenue.<ref name="policy-highlightspolicyhighlights"/>

🚨🩺 '''Breach response services.''' Coalition embeds breach response services in two forms: "Rapid Response Services" providingoffering immediate access including a two-hour legal consultation from a panel provider and support from Coalition Incident Response at no cost, and "Breach Response Costs" coveringcoverage for incident response, customer notification, credit monitoring, and legal expensescosts.<ref name="coverages"/> Vendor selection is panel-based, with incidentIncident response services are offered via a panel provider list, with affiliated services offered through panel selection.<ref name="coverages"/>

⚠️⚔️ '''Exclusions.''' Coalition's public coverage summaries include general cautions that exclusionsWar and limitationsterrorism apply and that coverage is governed by the policy as issuedcommentary.<ref name="coverages"/>''' Coalition's Ukraine-related guidance states that acts of war are excluded across the industry and notes the policy provides coverage for acts of cyber terrorism, though this isrepresents indicative commentary rather than policy language.<ref name="ukraine">{{cite web |title=Preparing for Increased Cyber Risks Amidst Russian Invasion of Ukraine |url=https://www.coalitioninc.com/blog/security-labs/preparing-for-increased-cyber-risks-amidst-russian-invasion-of-ukraine |publisher=Coalition |access-date=20222026-03-09}}</ref>

== Cybersecurity services and technology stack ==

🔍 '''PlatformCoalition overviewControl platform.''' Coalition positions itself as "Active Insurance," integrating security capabilities with insurance products across the policy lifecycle.<ref name="control-overview"/> Its security platform, Coalition Control, is powered by proprietary technology and data used to underwrite and protect hundreds of thousands of businesses, combining public data scans with proprietary incident, claims, and infosec data to produce an outside-in view of security posture for hundreds of thousands of businesses.<ref name="control-overview"/> Free sign-up is available with a business email address, andoffering domain scanning that surfaces vulnerabilities and remediation recommendations.<ref name="control-helpcontrolhelp">{{cite web |title=Coalition Control Overview |url=https://help.coalitioninc.com/hc/en-us/articles/7687332367259-Coalition-Control-Overview |publisher=Coalition |access-date=9 March 2026-03-09}}</ref>

🌐📡 '''Pre-bindContinuous scanningmonitoring.''' The 2020 acquisition of BinaryEdge (Switzerland) brought internet-scale scanning technology for continuous monitoring of policyholders' internet attack surface, providing threat intelligence and alerts.<ref name="binaryedge"/> Coalition Control features include attack surface monitoring, third-party risk monitoring, security notifications, on-demand rescans, and mechanisms for insureds to attest to remediation steps.<ref name="control-overview"/> TheBinaryEdge's platforminternet scanning technology enables continuous monitoring of policyholders' attack surfaces and provides threat intelligence and alerts.<ref name="binaryedge"/> Coalition also includesoffers "CoalitionAI Security Copilot" as part of Control, supporting vulnerability interpretation and remediation guidance.<ref name="control-overview"/>

🛠️🚨 '''Post-incident servicesresponse.''' Coalition Incident Response is anprovides affiliated incident response capabilitycapabilities accessible to policyholders before, during, and after events, offered via aan panel-basedincident modelresponse firm panel.<ref name="control-overview"/> ThePolicy economics incentivize use of Coalition's affiliated response: the policy explicitlyhighlights providesdescribe $0 out-of-pocket costs for digital forensics and incident response when policyholders use Coalition Incident Response.<ref name="policy-highlightspolicyhighlights"/>

🤖 '''MDR and the Wirespeed acquisition.''' InCoalition Novemberacquired 2025,Wirespeed Coalitionto announcedcombine theautomated acquisitionmanaged ofdetection Wirespeed,and an automatedresponse (MDR) providerwith its cyber risk management tools and coverage.<ref name="wirespeed"/> Wirespeed's platform delivers a median time-to-verdict of 1,801 milliseconds and 99.99% alert noise reduction, using conditional logic plus probabilistic AI and ChatOps integrations (with Slack, Microsoft Teams, email, and SMS).<ref name="wirespeed"/> WirespeedThe MDR capability will integrate data from Coalition's "Active Data Graph," including external attack surface monitoring and cyber claims data, to provide 24/7 protection.<ref name="wirespeed"/>

🔌🔧 '''Partner ecosystem and business model.''' Coalition disclosesControl integrates cybersecurity partners inside Coalition Control spanningacross email security, endpoint detection and response, identity and access, security awareness training, and penetration testing, with named vendorspartners including Armorblox, CrowdStrike, Okta, and SentinelOne.<ref name="control-overview"/> TheActive servicesInsurance businesspolicyholders modelreceive combines includedfull access to Coalition Control for Active Insurance policyholders, no-cost rapid response services plus optional affiliate IR via panel, and incentivised adoption throughwhile premium credits of up to 12.5% are available for Coalition MDR adoption, and additional funds transfer fraud sublimits are tied to paid enrolmentenrollment in Coalition's security awareness training.<ref name="control-overviewpolicyhighlights"/><ref name="coverages"/><ref name="policy-highlightscontrol"/>

== Capacity, reinsurance,and geographic footprint, and strategic partnerships ==

🏦 '''Capacity providers.''' Coalition's multi-carrier model leverages relationships with multiple leading insurers and capacity providers. Disclosed counterparties include Swiss Re Corporate Solutions (named atsince launch and in later capacity references), Arch Insurance North America, Lloyd's of London (coverholder authority), forAscot UK business)Group, and Ascotadditional Groupcarriers that vary by state and product.<ref name="launch-2017"/><ref name="series-fseriesf"/><ref name="series-b"/><ref name="control-overview"/> The carrier roster varies by state and product, and additional carriers are listed in Coalition's licensing disclosures.<ref name="coverages"/>

📝 '''Aspen capacity agreement.''' In March 2024, Coalition announced a multi-year capacity agreement with Aspen Specialty Insurance Company to deploy US cyber insurance capacity beginning on or after 1 April 1, 2024, brokered by McGill and Partners.<ref name="aspen"/><ref{{cite nameweb |title="about"Coalition Enters Long-Term Capacity Agreement with Aspen |url=https://www.businesswire.com/news/home/20240311718472/en/Coalition-Enters-Long-Term-Capacity-Agreement-with-Aspen |publisher=BusinessWire |date=March 2024 |access-date=2026-03-09}}</ref>

🔄 '''Coalition Re.''' Coalition launched "Coalitionits Re"reinsurance asintermediary, aCoalition reinsurance intermediaryRe, framing it as a cyber reinsurance underwriting approach based on continuous internet-wide data collection, AI-enabled threat detection, and internal security and insurance expertise.<ref name="coalition-recoalitionre"/> Aspen's cyber leadership is quoted as partnering with Coalition on the reinsurance offering, indicating Coalition is positioning itself for a cedant-facing role beyond MGA insurance distribution.<ref name="coalition-recoalitionre"/>

== Financial performance, risk factors, and outlook ==

|+ 📊 Coalition, Inc. — key performance indicators, (publicly disclosed only)metrics, 2021–2022<ref name="series-e"/><ref name="series-f"/><ref name="good-news"/>

! scope="col" style="text-align:center" | MetricKPI

! scope="col" style="text-align:right; width:8em9em" | Most recent figure

! scope="col" style="text-align:right; width:8em9em" | Prior year

| Gross Written Premium (run rate)GWP || style="text-align:right" | >$775M run rate (2022) || style="text-align:right" | $325M run rate (2021)

| Revenue growth || style="text-align:right" | ~Nearly 200% YoY (2022) || style="text-align:right" | —

| Headcount (historical) || style="text-align:right" | >100 (May 2020)— || style="text-align:right" | —Well over 100 (May 2020)

📈 '''FinancialGrowth trajectory.''' Coalition disclosesdisclosed rapid scaling in both customer count and premium volume, moving from $325M run rate premium and 52,000 customers in 2021 to overexceeding $775M run rate GWP and 160,000+ customers by 2022.<ref name="series-eseriese"/><ref name="series-fseriesf"/> Coalition asserts that its technology-first approach is tied to underwriting performance. The company also frames its operating model around continuous scanning and prevention as a loss-mitigation lever, disclosing scanning frequency of 65,000 times per week in its 2021 funding announcement.<ref name="series-e"/> Public filed financial statements for Coalition, Inc. were not available in the reviewed sources, consistent with private-company status.<ref name="exec-risksseriese"/>

⚠️ '''Risk factors.''' Capacity dependency risk remainsis material given Coalition's explicit reliance on multiple carrier relationships and capacity deals; disruptions in delegated authority, pricing corridors, or carrier appetite could force rapid underwriting retrenchment.<ref name="series-fseriesf"/> Aggregation and systemic cyber exposure areremain structurally relevant, as Coalition's portfolio facesis exposed to correlated vulnerability exploitation and systemic events,.<ref name="seriese"/> Regulatory and conduct risk expands with the company'sinternational ownfootprint, modelwhich predicateduses ondistinct continuousregulatory monitoringstrategies toacross managemultiple thisjurisdictions, riskincreasing compliance surface area around distribution oversight and conduct obligations.<ref name="series-eukbroker"/>

🌐🔮 '''RegulatoryOperational and operationalproduct riskrisks.''' InternationalCoalition expansionoffers increasesrapid complianceresponse surfaceservices area,and withpanel-based distinctincident regulatoryresponse strategiesaccess acrosswhile jurisdictions:explicitly appointedtying representativeeconomics structure in the UK, German insurance agent registration with Nordic branches,(retention and AFSL licensing with binder authority in Australia.<ref name="brokerout-uk"/>of-pocket Operationalcosts) andto claimsthe executionuse riskof isits paired with Coalition's differentiation, as rapidaffiliated response; servicesany and economics tiedfailure to affiliateddeliver responseservice (retention and out-of-pocket costs)levels could create adverse selection, reputational harm, or claims friction if service levels are not met.<ref name="coverages"/> Product expansion risk is increasing as Coalition pursues ambitions beyond cyber into executive risks and additional lines, cancreating diversifyunderwriting earningsand butoperational alsocomplexity introducesacross underwritingclaims specialization, regulatory filings, and operationaldistribution complexitytraining.<ref name="series-fseriesf"/>

🧭 '''StrategyStrategic and outlookpillars.''' Coalition's disclosed strategicstrategy pillarscenters align around "Active Insurance":on active risk assessment and monitoring via Coalition Control using proprietary data and AI-driven workflows;, active response via affiliateaffiliated incident response offerings embedded in the product; structure, and underwriting and distribution scaling via broker platform tooling and international expansion.<ref name="control-overview"/><ref name="coverages"/><ref name="series-fseriesf"/> The strategic trajectory also includes verticalVertical integration moves: include the BinaryEdge acquisition (for internet-scale scanning), the Wirespeed acquisition (for automated MDR), and the launch of Coalition Re asfor a cedant-facing reinsurance intermediary suggesting evolution toward a cyber risk intelligence and capacity role for cedants.<ref name="binaryedge"/><ref name="wirespeed"/><ref name="coalition-recoalitionre"/>

🏷️🏁 '''PeerCompetitive positioning.''' Coalition aligns with "full-stack cyber platform" MGAs that combine proprietary risk telemetry, embedded security services, and multi-carrier capacity access. Closest competitive comparators by model similarity include At-Bay, Corvus Insurance, and Resilience, each commonly positioned around integrated cyber risk data and underwriting technology stacks.<ref name="control-overview"/><ref name="series-f"/><ref name="policy-highlights"/><ref name="good-newsseriesf"/>